Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

Filter by
Sorted by
Tagged with
0
votes
0answers
7 views

Redirect network of on url to proxy otherwise block it [closed]

I want to use proxy only for one website URL, and if the proxy is disabled or down, the URL blocked by a firewall So in my mac os, I connect to a proxy server somewhere, and then if I open, for ...
1
vote
0answers
22 views

Pros and cons of directly interconnecting routers and firewalls vs via switch in an enterprise-network? [closed]

In a medium-sized enterprise network, let's say you have a pair of datacenter switches, a pair of distribution switches, a pair of internal core routers, a pair of firewalls, and a pair of edge ...
1
vote
0answers
22 views

Juniper SRX 340 route lookup failed

I've a strange issue on my Juniper; I've a policy to allow all traffic to a specific address behind it and, in effect, the policy works correctly. All the traffic I send reach the destination, except ...
0
votes
0answers
12 views

How do I port forward between 2 private subnets? [closed]

I am trying to implement a dual firewall DMZ on my homelab similar to this website: https://danielmiessler.com/study/dmz/ Initially in the DMZ there will only be a reverse proxy and a web server on ...
0
votes
0answers
11 views

Active Peer [my FTD IP] already exists

I have configured the Cisco FTD and FMC, now I am trying to add the FTD Device to FMC but the system shows me such an error. Active Peer [my FTD IP] already exists and the the FTD Device doesn't ...
1
vote
1answer
27 views

Turning Off SPC card on Juniper SRX5800 series Firewall

We are running SRX5800 in a cluster. Each Node has FPCs as well as SPCs installed. Due to some maintenance downtime , we were required to power off FPCs as well as SPCs on a backup node , not in a ...
1
vote
0answers
35 views

SOLVED: Check Point firewall log format through syslog [closed]

I receive logs from a series of Check Point firewalls that I don't manage and they are very thorough, containing every possible information about the communication. They're also formatted like field:&...
-1
votes
1answer
33 views

Holding session option in Fortiweb

I have Frotiweb installed as my WAF and it is connected to FrotiSandbox for behavioral detection. In the WAF' File Security Policy, I have the "Hold Session While Scanning" turned off and &...
0
votes
1answer
29 views

NAT in ASA (5505) Firewall is not working for VLANs configured in Layer3 Switch?

Toplogy: Tool Used: Cisco Packet Tracer Scenario: NAT for hosts in any of the VLANs of Layer3-Switch not working. Ping requests reaches outside server, but NAT is not working so ISP Router can't ...
0
votes
1answer
47 views

How to configure NAT in Cisco ASA Firewall for all VLANs connected to layer 3 switch? [closed]

Topology: How to set up NAT in Cisco ASA Firewall (in Packet Tracer), when there are VLANs in the network? In the current approach, NAT is not working to reach the server (8.8.8.8) from any of the ...
0
votes
1answer
63 views

Configure AAA on a router - Extended ACLs

How do I write a named extended ACL which will allow for traffic between a DNS from a LAN (IP address) to a DNS server at (IP address), ping from a host PC (IP address) to any destination and allow ...
0
votes
1answer
38 views

How to force routing to https website without the IP

I am attempting to limit a group of Chromebooks to access one particular site for student testing. The issue is that the website is secure but the ssl cert is attached to the url not the ip. The ip of ...
2
votes
1answer
41 views

Which command is used in Cisco ASA Firewall to display the whole packet flow?

Which command is used in Cisco ASA Firewall to display the whole packet flow on the firewall? This same command allows you to see if traffic is allowed, NATed, or going through a VPN tunnel?
0
votes
1answer
125 views

EdgeRouter X select one out of two WANs according to target IP range

I am using IPSET to define the interested IP range. I want to direct packets to one out of two WAN connections according to an IP range. Here are my conditions. A specific IP range. It is defined by ...
1
vote
1answer
42 views

Does UDP can be exposed to stateful analysis?

From protocol theory we know that TCP is stateful protocol. Different stateful packet filters do filtration based on connection state. I.e. it can distinguish responses and replies. It's obviously for ...
0
votes
0answers
18 views

panic:integer divide fault Message Observed on SRX 5800 Routine Engine

We are running 2 x Juniper SRX 5800 Firewalls in a cluster environment. Node 0 got rebooted and Node 1 took over the master role. Node 0 came back online after reboot. The reasons for Node 0 to reboot ...
2
votes
0answers
122 views

Communication between subnets on Sonicwall firewall

I have a Sonicwall TZ-350. X0 is the default LAN with IP 192.168.10.1, and X1 is the WAN. I've set up a second local subnet on X2 with IP 192.168.20.1 for a single NAS device (no switch; the device is ...
0
votes
2answers
54 views

Adding Second Interface with Different Public IP for Same Internet Connection

We have a situation that I'm not sure how to proceed correctly. This location is currently utilizing two different firewalls - a Sophos XG 310 and a Sonicwall NSA 3500. The way this was originally ...
1
vote
1answer
91 views

WatchGuard Geo Location for restricting access to VPN and "Access Portal"

Problem We want to use WatchGuard's Geo Location to restrict access to our "Access Portal" and "Mobile VPN" connections, but see no options and the corresponding "Firewall ...
2
votes
2answers
117 views

Where should I locate F5 Load Balancer in Network Segmentation?

I segmented my network and locate some important servers behind of firewall. So, I restricted traffic LAN (no segmentation between LAN clients, LAN servers) to/from important servers. These servers ...
0
votes
2answers
83 views

Bridge mode or straight replacement?

Let's assume the ISP is malicious. They have remote access to their own gateway/router. No way to remove that remote access. But ISP allows using a different gateway/router. Security-wise, what is ...
1
vote
1answer
392 views

How to find invalid sessions on Juniper SRX 5800 series Firewall

In Juniper SRX 5800 series Firewall , when we run the command 'show security flow session summary node 0' , we see that it shows large numbers of sessions as invalidated. But we don't know ...
0
votes
0answers
43 views

Packet loss at irregular intervals

We have had significant packet loss issues since switching from Sophos UTM SG 310 to the Barracuda Cloud Gen F380 firewall. This has a big impact on live applications like telephony. It is noticeable ...
0
votes
1answer
28 views

Unable to Communicate from server to other servers after migrating from existing firewall to new firewall

In our existing environment we had migrated old firewall with new firewall after this activity . we had faced connectivity issue . From servers unable to reach other servers . Post clearing ARP table ...
1
vote
1answer
21 views

Let me assume two firewall are connected in active -active mode ,how load sharing happen among two

i wants to know when two firewalls are connected in active -active mode for example A1 and A2 are connected in active -active . if session is initiated from A1 reverse traffic of this session will ...
0
votes
1answer
31 views

What is the difference between these two different network security devices?

I have a choice between these two network security appliances, however the only difference I can see is the year and I don't know what that year means. SONICWALL TZ300 WIRELESS-AC SECURE UPGRADE PLUS ...
0
votes
0answers
33 views

How to configure ZPF with Tunnel?

I am trying to configure ZPF in a Cisco 4331 router in Packet Tracer. I have a tunnel interface for GRE tunnel in this router. But I am not being able to assign this tunnel interface to any zone due ...
1
vote
1answer
54 views

Is it possible to configure DHCP on a router or UTM firewall for the multiple VLANs on L3 Switch?

I'm working on expanding our office network to accommodate more users/devices. Currently we have the DHCP configured on a UTM firewall(cyberoam ing50) device(cum router) providing IP addresses for ...
0
votes
0answers
36 views

Adding a route that changes source IP

I am failing at trying to create a rule for the F5 to change the origination IP address based on the destination IP address. Scenario - There is a web server that has three IP addresses assigned to it....
1
vote
2answers
289 views

Is TLS/SSL inspection throughput important while sizing a Firewall?

Our firm is planning on purchasing a Firewall solution, but are confused with the sizing requirement. We currently have 5 wired internet connections which make a total throughput of 500 Mbps (each ...
2
votes
0answers
66 views

Looking for sanitized Palo Alto FW Config

This may sound a bit unusual, but I'm looking for someone who can answer with a sanitized Palo Alto FW text configuration with the following features used: address-groups & service-groups global-...
0
votes
0answers
58 views

PaloAlto Application ID Signatures, 7-byte Regex Workaround

I'm in the process of creating some custom Application ID signatures, to give control over some in-house applications. In a nutshell, I've created signatures to match HTTP traffic using the http-req-...
1
vote
0answers
224 views

Cisco ASA 5585-x Failover Virtual MAC address

I have configured Cisco ASA 5585-x with Active/Standby mode, cisco best practice saying you should use Virtual MAC address on interface to avoid traffic disruption when you do failover. now question ...
0
votes
2answers
34 views

How to find the client's application port during communication [closed]

After reading firewall rules about inbound and outbount I have some questions and the most sources focus on the server's ports. What happens to the client side when is trying to make a connection to ...
1
vote
0answers
218 views

How to redistribute BGP routes learned from AWS in one VR into another BGP running in another VR in Palo Alto firewall?

I have about 1000+ prefixes I am learning from AWS on Palo Alto through a BGP. This is on the secondary VR. Main VR is where my core routing is situated along with another BGP instance pointing to ...
2
votes
3answers
734 views

What is the difference between an ASA firewall and UTM firewall?

How do ASA firewalls and UTM perimeter firewalls differ?
0
votes
4answers
102 views

How common it is to see unknown IPs in logs?

I have a server that streams video to YouTube/Twitch. I see [UFW BLOCK] entries in logs. One IP is 220.133.236.166, the other is 194.26.25.8. Is it a common thing that a server is connecting to my ...
0
votes
1answer
29 views

answer packages rejected between mangle/prerouting and nat/prerouting

I am currently configuring a ubiquity edgerouter for our network. We have one uplink port (eth2) and two internal ports (eth0; with vlan 1) and eth3 (with vlans 2,3 and 4). uplink and vlan 1 have ...
0
votes
1answer
316 views

Cisco NAT - Overload PAT and Static nat from one inside to two outside interfaces

i have following setup Cisco ISR4k Router with one inside LAN interface and two outside Interfaces. ---- WAN1 (NAT outside) LAN (NAT inside) -- ISR4k | ...
0
votes
2answers
43 views

Understanding IPV4 address range [duplicate]

I do have basic understanding of IP Address which is unique address for each System either in an organization or over the internet. But i want to understand what is IP address range Lets Say we have ...
0
votes
0answers
87 views

Cisco CML 2.0 strange ASA trunking issue

I am seeing very strange issue and now i am losing my mind so thought ask you folk. I have following two components connected point to point on Cisco CML 2.0 [nxos-9000v]--------------------[ASAv] ...
1
vote
3answers
2k views

Cisco SG-350 Switch and Fortigate Firewall Configuration

I'm not what you would call a Network Engineer, but right now i have a (somewhat) complex network problem that i have to solve. I must configure a SG-35028p cisco switch and a fortigate 60f firewall ...
0
votes
0answers
26 views

How much additional processing time is needed for a combination DMZ configuration?

Please consider the DMZ configuration shown below. (Image source: Testing Web Security: Assessing the Security of Web Sites and Applications by Steven Splaine) And then let us consider the following (...
0
votes
1answer
28 views

Public IP address does not work in internal network [closed]

I have configured port forwarding to my system from the router configuration menu, when I try to access the public IP address in the internal network it does not respond but it is accessible outside ...
0
votes
1answer
3k views

How to forward port 80 and 443 on pfSense to a (internal) nginx webserver?

Yesterday we did a "big bang" firewall switch in our company. Our new firewall is a pfSense server. Lets say our external ip is 84.1.1.1, pfSense is 192.168.1.1 and our web server ip is 192.168.1.2. ...
0
votes
2answers
111 views

How Does a Firewall (pfSense) Check Packets Against Rules

For packet rule testing, legacy 5 tuple based techniques employ decision tree, decomposition or hardware (usually TCAM) based approaches. What specific technique do pfSense firewalls employ to test ...
0
votes
1answer
189 views

NTP Sync issues between Palo Alto 3260 and Juniper MX10003

I'm using a Microsemi S650 as the primary ntp server and a Juniper MX10003 as the secondary ntp server. I have the palo alto 3260 configured as follows: [edit deviceconfig system ntp-servers] ...
1
vote
4answers
1k views

Firewall placement

Most diagrams I come across are as follows: ISP > router > firewall However, wouldn't you want a firewall before the router to protect the router? E.g ISP > firewall > router
2
votes
0answers
125 views

Why can't i reach devices in the other network?

I have 2 networks and want to connect them with each other. It should be possible that all devices in network A can communicate with devices on network B and other way round. 1 network is "managed" by ...
0
votes
3answers
548 views

Why cant i reach the other network while i have added the routes and firewall rules to allow traffic? (Pfsense/USG200)

I have 2 networks, the current one and the new one. The current one is not configured by me and one big mess and contains heavily out dated hardware (especially servers). I want to be able to access ...

1
2 3 4 5
12