Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

How to fix Symmetric NAT Router Router? [closed]

I am trying to host game on game ranger , it gives me the following message: Your internet connection is behind a Symmetric NAT Modem/Router that will prevent you from hosting all games, and from ...
1
vote
1answer
21 views

ASA shows Action:Drop on packet-tracer, no reason or phase

I am doing a very simple lab with one asa and two computers. PC1 connected to dms PC2 connected to outside : Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores) : ASA ...
0
votes
1answer
24 views

How does ISP know which port to open for incoming answer from a site requesting, since sites answer in different ports from ones we ask? [closed]

I'm wondering how does ISP open door for incoming answer from a requesting site since the answer doesn't come from the requesting door, and how to achieve my computer IP since it's behind ISP firewall,...
-1
votes
0answers
6 views

Macos firewall and port scan [closed]

I tried the following on a macOS machine: - set the macOS firewall to stealth mode. According to the documentation, it should not respond to ICMP messages - Added a firewall that blocks any TCP snd ...
0
votes
0answers
28 views

QoS over IPSec Site-to-Site VPN: Concerns and Questions

(For clarification purposes: Kbps = Kilobits per second for bandwidth, KB/s = Kilobytes per second for file / data transfer stuff. I'm using them separately because XG knows KBps but not Kbps - ...
1
vote
1answer
26 views

User Upload Quota Fortigate - 501E (6.2.1)

Im using a Fortigate 501E. my requirement is: Every user can’t upload more than 1 GB per day. is it possible to implement the above requirement. Thanks
0
votes
1answer
23 views

Unable to receive logs from a device to our SIEM Syslog server via TCP 514 [closed]

I want to collect logs from a security device (McAfee Email Gateway) to our SIEM Syslog server. This security device can forward logs only via TCP syslog on any port (in our case it is 514). We are ...
1
vote
0answers
30 views

When is the source address of ICMPv6 message types 133, 135 and 136 other than unspecified(::/128) or link-local(fe80::/10)?

According to rfc4861 the source address for Router Solicitation(ICMPv6 type 133), Neighbor Solicitation(ICMPv6 type 135) and Neighbor Advertisement(ICMPv6 type 136) can be an address assigned to the ...
0
votes
2answers
134 views

Configuring a network for 100% isolation (for security)

I'm configuring a LAN for an office. It's a new setup, and therefore there are desktops but no servers and no PC-to-PC communications - everything is on the cloud. The exception to this are several ...
3
votes
1answer
20 views

Cisco ASA5585-X replace SSP-20 with SSP-60

We have cisco ASA5585-X with SSP-20 running in production and we need more power so planning to replace SSP-20 with SSP-60 module but not sure we can just hot swap with SSP-20? Does ASA5585-X support ...
1
vote
2answers
49 views

Applying WAN Changes to Juniper Chassis Cluster

I have a Juniper SRX 340 in a chassis cluster state. I am looking to change the WAN IPs used by the firewalls as the ISPs will change. I have GE interfaces that have sub interfaces within them 1,2,20,...
1
vote
1answer
44 views

IP Routing and Switching Interface Speeds

I have a question that relates to routing and switches. I am looking to set up a new Firewall that will handle the routing for the network and attached to the Firewall will be a switch. Here are the ...
0
votes
1answer
48 views

Cisco Zone Based Firewall

I have Cisco 891F configured with ZBF from CBAC. Right now, router is wide-open SSH/443 or anything my public address is listening on, which is not what I intended. My intention was to only allow IMCP ...
3
votes
2answers
92 views

What is the advantage of Supervised Machine Learning over Deep Packet Inspection in Network Traffic Classification?

As per the definition of Deep Packet Inspection (DPI), it uses signatures for packet filtering. Supervised Machine Learning can help put a label on a packet which does not get identified by Deep ...
0
votes
1answer
99 views

Cisco ASA and a Router?

I'm trying to understand networking and when looking at the different routers, firewalls and switches, I came across Cisco ASA. I've read that these can be used as firewalls and routers but others say ...
0
votes
3answers
40 views

packet filtering using bridge vs router

I have a question about the bridge vs router packet filtering using firewalls. I know the basics of the router and bridge and on which layers they work. I just wanna know that on bridge how does ...
4
votes
3answers
2k views

How does Deep Packet Inspection work with encrypted packets?

I've been reading up on Deep Packet Inspection for Software Defined Networks. However, I know that some applications use encryption to evade Deep Packet Inspection. Is there any alternative (such as ...
0
votes
1answer
31 views

Design of 2 Lans Connected to a Watchguard m570 firewall

I have this architecture (without the firewall). I bought a Watchguard M570 as Firewall to add it in my network. My Question is : Could i use my watchguard and connect this one to my 2 LoadBlancers ...
0
votes
0answers
53 views

cisco zone-based policy firewall

How to limit the number of established connections for each host, that connect to the service? In the policy settings, I found only blocking by the number of half open connections. parameter-map type ...
0
votes
3answers
84 views

Access a pc web service with different ip/mask in on-site network

I tried to get a setup working to make the following scenario work: Access a pc web service hosted in a different IP range/mask than the rest on-site PCs. Details: We have a network setup with a ...
0
votes
0answers
40 views

Cisco ASA Security Warning: Untrusted server cert after asa crash and reload

We have Cisco ASA 5505 working VPN anyconnect and it's been almost 1 year no issue, but last week it got crashed and reboot itself and after that we found it started throwing warning like following: ...
2
votes
2answers
181 views

problems routing WAN with private IPs and LAN with public IPs

I have just installed pfsense 2.4 for a SOHO I work and I'm getting problems with the routing. I have asked my ISP for a /29 network with public ips for the DMZ, but instead of giving my directly what ...
1
vote
1answer
111 views

Cisco ASA looping broadcast packet

I have small office where running cisco ASA ASA5506 and version 9.4(1) and it's also configured for IPsec VPN tunnel, My LAN subnet is 10.1.1.0/24 So i have found very interesting things in LAN ...
0
votes
1answer
22 views

telnet connection response if port is closed on firewall [closed]

If port xxx is not open on a firewall, what would be the telnet response when attempting to open a telnet session from a remote host in network "A" connected via site-to-site VPN with network "B"? ...
1
vote
3answers
30 views

Can we set filewall rule to control with in subnet? and also if we use 2 subnet on same interface Is this effect to firewall rule?

Can we set filewall rule to control with in subnet? as in picture Can we use firewall to controll PC0 to access only some port on PC1 ? if we set gateway to router , Is it will alway go to router ...
0
votes
1answer
33 views

Is it possible to see the NAT or PAT mapping from the firewall logs?

Is it possible to see the NAT or PAT mapping from the firewall logs? For example a Fortigate. Thank you This is my previous question which I cannot edit. But here I am posting a precise question. ...
0
votes
1answer
68 views

Checkpoint beginner

My company got few CP firewalls, I have to test them and I never had a chance to work on them. Can anyone explane me differences between CP smart dashboard and CP smart console? Is that software ...
0
votes
0answers
29 views

What is BFM in reference to checkpoint firewall?

Request some one to please expand the term BFM when used in reference to checkpoint firewall. The same appears multiple times in documentation and forums but there is no explanation of what it is. ...
0
votes
1answer
77 views

If you're behind a firewall and all the ports are blocked, how is your browser able to access the internet?

I'm behind a router and I'm able to run game servers on my home computer after forwarding ports or using the DMZ feature on the router. However, I still don't understand the underlying technology as ...
2
votes
1answer
93 views

Restructuring office network advice and How to go about VLAN setup?

Wanted to get some advice and assurance that I’m on the right track for re-configuring our office network. Current setup: FortiGate100D with 2 physical network interfaces, network-1 used for regular ...
0
votes
2answers
85 views

Can't get to the Internet from VLAN on switch

I'm trying to setup a network lab to learn more about networking. Equipment: 2 procurve switches. 1 Sonicwall firewall TZ300 The final outline: traffic from Vlan 10 on switch 1(port1) goes to ...
0
votes
2answers
35 views

Fortigate's specs meaning

I am reading through the Fortigate's documentation to look for a device to replace the current device of my office(Draytek). Is that true that I should depend on the Firewall throughput to choose the ...
2
votes
1answer
248 views

Cisco ASA failover monitor-interface policy

I have Cisco ASA 5585 and it has 10G interface in port channel where i configured multiple vlan sub-interface, is it worth to monitor every single sub-interface for failover policy or just monitor ...
0
votes
1answer
27 views

Filtering http/https traffic destined for a juniper router

I need to find a way to harden my network so that all juniper routers reject web management and any http / https traffic that is destined for them specifically. This is what I came up with so far: ...
2
votes
0answers
68 views

very strange broadcast in LAN with Cisco ASA

Today i have detected Cisco ASA 5505 CPU usage went to 100% and LAN was flood with broadcast (ff:ff:ff:ff:ff) going to 10.0.12.255 address, i have noticed all these activity in wireshark that some ...
0
votes
1answer
111 views

What can I use to block all the ports of the WAN in a Cisco router?

I have set up my small network using Cisco ISR C1111-8p and a Cisco Wireless AP C1832i. What can I use to block all the ports of the WAN? Is there any security advantage blocking them rather than ...
1
vote
2answers
604 views

Palo Alto monitor bandwidth usage using SNMP

I'm trying to monitor bandwidth usage on my Palo Alto firewall using SNMP. However only the ifInOctets & ifOutOctets counters of VLAN interfaces are updated. The counters for real interfaces are ...
4
votes
2answers
579 views

Cisco ASA 5585X Internal-Data0/1 interface errors

I have noticed on Cisco ASA 5585 (SSP-20) interface error counter going up specially overrun but so far we haven't seen any production impact or issue, error rate is low so its not noticable but would ...
3
votes
2answers
93 views

Stop Memcrashed amplification DDoS attack

DDoS is essential part of my life so i am back with more question, Yes we started getting memcache based UDP amplification attacks, all source ports are 11211 coming from many random source IPs, we ...
1
vote
2answers
212 views

How does pfSense control network traffic when plugged into a switch? [closed]

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
4
votes
2answers
241 views

Is a TCP segment with FIN but not ACK ever encountered today?

A fin-scan involves sending a TCP segment with FIN and no other flags other than (possibly) PSH and/or URG. Are such packets ever legitimately encountered in 2019? Note that in Is a FIN only segment ...
2
votes
1answer
70 views

Cisco ASA 5505- My subnet mask is different from Show Route

While I was troubleshooting a DNS issue on my 10.10.10.0/30 subnet, I noticed the Local (L) and Connected (C) has different values. I configured the 10.10.10.0 network to use 255.255.255.252 has the ...
3
votes
0answers
199 views

TCAM utilization on Nexus 9396 switches

I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic. I am reading about TCAM and wanted to ...
0
votes
1answer
281 views

How are a firewall and DMZ positioned in a network?

How are a firewall and DMZ positioned in a network? From Computer Network by Tanenbaum What is the device (let me call it "A") between the DMZ and the internet? Is it the main router of the LAN for ...
1
vote
1answer
218 views

Firewall and VPN configuration?

I've been reading a lot of different Q&As on here and other forums about firewall positioning in relation to the DMZ and the appropriate place to put a VPN server. I've made the following logical ...
1
vote
2answers
354 views

Unable to access Server over VPN behind 2 Fortigate Firewalls; however ping is working

Client -> VPN -> FG1 -> FG2 -> Server Created a VPN tunnel with remote IP 10.20.30.4/32 and local ip 10.20.30.40/32 on FG1, NAT/VIP is established with VIP as 10.20.30.40 and server IP as 192.168.2.6 ...
0
votes
1answer
40 views

What is the reason for encrypting Identity field under IPsec phase1?

Why Identity fields are encrypted in IPsec phase 1 around packet 5/6 ? provided that the Identity field contains IP of either end. Does it has any significance ? Does it holds anything different then ...
1
vote
0answers
297 views

DNS not resolving through VPN [closed]

Looking for some help with our Office's VPN that I can't seem to solve... I am trying to remote desktop to the Work PC from Home PC via the DC ASA 5506-x VPN. I can only connect to the Work PC with ...
0
votes
0answers
66 views

ASA - communication between 2 tunnels

I have two IPSEC tunnels with an ASA in the middle Site A - 10.20.4.0 /24 (65.176.80.84) Site B - 192.168.142.0 /24 ASA - 10.99.206.0 /24 (95.12.22.33 Site A - 10.20.4.0 /24 can reach the ASA and ...
2
votes
1answer
90 views

Cannot Ping Firewall After Changing SFP

I am currently working on an issue that has me stumped... I have a network 172.16.144.0/20 which is connected to our fortigate 300D firewall via an Cisco 3850 external switch. Due to hardware ...

1 2 3 4 5 11