Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

Filter by
Sorted by
Tagged with
0
votes
0answers
11 views

Shared Private AND Public internet access [closed]

I've been managing a small camping site for several year that provides internet access to visitors as well as staff/management VOIP and for the owners who live on the site. Because of poor internet ...
0
votes
0answers
47 views

Sophos Misconfiguration [closed]

I have an HQ with many branches connected through leased line. The IP subnet for HQ is 192.168.10.0/24 and branch1 subnet is 192.168.11.0/24 and so on branch2 and 3 etc… the IP Address for ISP router ...
0
votes
0answers
13 views

Why is UFW blocking this request? [closed]

I'm running an Ubuntu 18.04 server with this UFW config: To Action From -- ------ ---- 80 ALLOW Anywhere ...
0
votes
0answers
7 views

Block any access to a range of IP addresses when my IP is in a specific range [closed]

I am a total noob who wants to make sure my VPN is connected when ever I have any connection (even ssh) to a specific range of IP addresses. I'm using mac.
0
votes
1answer
40 views

Cisco Zone Based Firewall

I have Cisco 891F configured with ZBF from CBAC. Right now, router is wide-open SSH/443 or anything my public address is listening on, which is not what I intended. My intention was to only allow IMCP ...
2
votes
1answer
37 views

What is the advantage of Supervised Machine Learning over Deep Packet Inspection in Network Traffic Classification?

As per the definition of Deep Packet Inspection (DPI), it uses signatures for packet filtering. Supervised Machine Learning can help put a label on a packet which does not get identified by Deep ...
0
votes
1answer
50 views

Cisco ASA and a Router?

I'm trying to understand networking and when looking at the different routers, firewalls and switches, I came across Cisco ASA. I've read that these can be used as firewalls and routers but others say ...
0
votes
0answers
18 views

Using USG as firewall with Draytek, have i made a mistake?

something is bothering me with the way i set up a network, this is the setup. I am using Vigor 2862 and Ubiquiti USG Firewall Location 1 Draytek router connected to ADSL Secure LAN to LAN VPN to ...
0
votes
3answers
36 views

packet filtering using bridge vs router

I have a question about the bridge vs router packet filtering using firewalls. I know the basics of the router and bridge and on which layers they work. I just wanna know that on bridge how does ...
4
votes
3answers
2k views

How does Deep Packet Inspection work with encrypted packets?

I've been reading up on Deep Packet Inspection for Software Defined Networks. However, I know that some applications use encryption to evade Deep Packet Inspection. Is there any alternative (such as ...
0
votes
1answer
29 views

Design of 2 Lans Connected to a Watchguard m570 firewall

I have this architecture (without the firewall). I bought a Watchguard M570 as Firewall to add it in my network. My Question is : Could i use my watchguard and connect this one to my 2 LoadBlancers ...
0
votes
0answers
51 views

cisco zone-based policy firewall

How to limit the number of established connections for each host, that connect to the service? In the policy settings, I found only blocking by the number of half open connections. parameter-map type ...
0
votes
3answers
69 views

Access a pc web service with different ip/mask in on-site network

I tried to get a setup working to make the following scenario work: Access a pc web service hosted in a different IP range/mask than the rest on-site PCs. Details: We have a network setup with a ...
0
votes
0answers
15 views

Cisco ASA Security Warning: Untrusted server cert after asa crash and reload

We have Cisco ASA 5505 working VPN anyconnect and it's been almost 1 year no issue, but last week it got crashed and reboot itself and after that we found it started throwing warning like following: ...
1
vote
2answers
38 views

problems routing WAN with private IPs and LAN with public IPs

I have just installed pfsense 2.4 for a SOHO I work and I'm getting problems with the routing. I have asked my ISP for a /29 network with public ips for the DMZ, but instead of giving my directly what ...
0
votes
0answers
12 views

Sonicwall - WLAN not connecting to Amazon VPC over established LAN VPN

VPN Tunnel Interface up and running for 10.80.40.0/24 (X0) subnet. WLAN subnet 10.57.15.0/24 (X0:V100) unable to ping 10.233.X.X on the VPC through established VPN. I have checked the event log and ...
1
vote
1answer
49 views

Cisco ASA looping broadcast packet

I have small office where running cisco ASA ASA5506 and version 9.4(1) and it's also configured for IPsec VPN tunnel, My LAN subnet is 10.1.1.0/24 So i have found very interesting things in LAN ...
0
votes
1answer
20 views

telnet connection response if port is closed on firewall [closed]

If port xxx is not open on a firewall, what would be the telnet response when attempting to open a telnet session from a remote host in network "A" connected via site-to-site VPN with network "B"? ...
0
votes
3answers
28 views

Can we set filewall rule to control with in subnet? and also if we use 2 subnet on same interface Is this effect to firewall rule?

Can we set filewall rule to control with in subnet? as in picture Can we use firewall to controll PC0 to access only some port on PC1 ? if we set gateway to router , Is it will alway go to router ...
0
votes
1answer
31 views

Is it possible to see the NAT or PAT mapping from the firewall logs?

Is it possible to see the NAT or PAT mapping from the firewall logs? For example a Fortigate. Thank you This is my previous question which I cannot edit. But here I am posting a precise question. ...
0
votes
1answer
67 views

Checkpoint beginner

My company got few CP firewalls, I have to test them and I never had a chance to work on them. Can anyone explane me differences between CP smart dashboard and CP smart console? Is that software ...
0
votes
0answers
25 views

What is BFM in reference to checkpoint firewall?

Request some one to please expand the term BFM when used in reference to checkpoint firewall. The same appears multiple times in documentation and forums but there is no explanation of what it is. ...
0
votes
1answer
66 views

If you're behind a firewall and all the ports are blocked, how is your browser able to access the internet?

I'm behind a router and I'm able to run game servers on my home computer after forwarding ports or using the DMZ feature on the router. However, I still don't understand the underlying technology as ...
2
votes
1answer
80 views

Restructuring office network advice and How to go about VLAN setup?

Wanted to get some advice and assurance that I’m on the right track for re-configuring our office network. Current setup: FortiGate100D with 2 physical network interfaces, network-1 used for regular ...
1
vote
0answers
14 views

Isolate a subnet on openvpn [closed]

I'm trying to isolate a subnet in the openvpn with iptables but these clients seems to not obey the iptables rules. My enviroment subnet is 10.50.0.0/24. Every client has a static ip in the network. ...
1
vote
0answers
21 views

iptables forwarding to local interfaces [closed]

I have the following setup: MY-PC: eth1: 192.168.1.1 - - - 192.168.1.2 :eth0 :SERVER: eth1: 192.168.2.2 My SERVER can be used as a router and is not restricted by iptables. (No restrictions in the ...
0
votes
2answers
60 views

Can't get to the Internet from VLAN on switch

I'm trying to setup a network lab to learn more about networking. Equipment: 2 procurve switches. 1 Sonicwall firewall TZ300 The final outline: traffic from Vlan 10 on switch 1(port1) goes to ...
0
votes
2answers
33 views

Fortigate's specs meaning

I am reading through the Fortigate's documentation to look for a device to replace the current device of my office(Draytek). Is that true that I should depend on the Firewall throughput to choose the ...
1
vote
1answer
125 views

Cisco ASA failover monitor-interface policy

I have Cisco ASA 5585 and it has 10G interface in port channel where i configured multiple vlan sub-interface, is it worth to monitor every single sub-interface for failover policy or just monitor ...
0
votes
1answer
24 views

Filtering http/https traffic destined for a juniper router

I need to find a way to harden my network so that all juniper routers reject web management and any http / https traffic that is destined for them specifically. This is what I came up with so far: ...
2
votes
0answers
55 views

very strange broadcast in LAN with Cisco ASA

Today i have detected Cisco ASA 5505 CPU usage went to 100% and LAN was flood with broadcast (ff:ff:ff:ff:ff) going to 10.0.12.255 address, i have noticed all these activity in wireshark that some ...
0
votes
1answer
88 views

What can I use to block all the ports of the WAN in a Cisco router?

I have set up my small network using Cisco ISR C1111-8p and a Cisco Wireless AP C1832i. What can I use to block all the ports of the WAN? Is there any security advantage blocking them rather than ...
1
vote
2answers
451 views

Palo Alto monitor bandwidth usage using SNMP

I'm trying to monitor bandwidth usage on my Palo Alto firewall using SNMP. However only the ifInOctets & ifOutOctets counters of VLAN interfaces are updated. The counters for real interfaces are ...
0
votes
1answer
54 views

Access Localhost (Ubuntu -VM) from Windows [closed]

I use Ubuntu in my virtual machine and start from there my code projects. These project when active can be run under localhost:3000. Now when i execute in Ubuntu ifconfig I get following result: If ...
4
votes
2answers
460 views

Cisco ASA 5585X Internal-Data0/1 interface errors

I have noticed on Cisco ASA 5585 (SSP-20) interface error counter going up specially overrun but so far we haven't seen any production impact or issue, error rate is low so its not noticable but would ...
3
votes
2answers
79 views

Stop Memcrashed amplification DDoS attack

DDoS is essential part of my life so i am back with more question, Yes we started getting memcache based UDP amplification attacks, all source ports are 11211 coming from many random source IPs, we ...
1
vote
2answers
168 views

How does pfSense control network traffic when plugged into a switch?

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
4
votes
2answers
234 views

Is a TCP segment with FIN but not ACK ever encountered today?

A fin-scan involves sending a TCP segment with FIN and no other flags other than (possibly) PSH and/or URG. Are such packets ever legitimately encountered in 2019? Note that in Is a FIN only segment ...
2
votes
1answer
63 views

Cisco ASA 5505- My subnet mask is different from Show Route

While I was troubleshooting a DNS issue on my 10.10.10.0/30 subnet, I noticed the Local (L) and Connected (C) has different values. I configured the 10.10.10.0 network to use 255.255.255.252 has the ...
3
votes
0answers
150 views

TCAM utilization on Nexus 9396 switches

I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic. I am reading about TCAM and wanted to ...
0
votes
1answer
188 views

How are a firewall and DMZ positioned in a network?

How are a firewall and DMZ positioned in a network? From Computer Network by Tanenbaum What is the device (let me call it "A") between the DMZ and the internet? Is it the main router of the LAN for ...
1
vote
1answer
161 views

Firewall and VPN configuration?

I've been reading a lot of different Q&As on here and other forums about firewall positioning in relation to the DMZ and the appropriate place to put a VPN server. I've made the following logical ...
1
vote
2answers
240 views

Unable to access Server over VPN behind 2 Fortigate Firewalls; however ping is working

Client -> VPN -> FG1 -> FG2 -> Server Created a VPN tunnel with remote IP 10.20.30.4/32 and local ip 10.20.30.40/32 on FG1, NAT/VIP is established with VIP as 10.20.30.40 and server IP as 192.168.2.6 ...
0
votes
0answers
56 views

Huawei USG6000 Firewall Captive portal

I don't know if I'm asking this in right place. I am working on a Huawei USG6000 device to make a hotspot solution (External Captive portal), this is the schema of my working: WAN IP :10.10.0.7 ...
0
votes
1answer
38 views

What is the reason for encrypting Identity field under IPsec phase1?

Why Identity fields are encrypted in IPsec phase 1 around packet 5/6 ? provided that the Identity field contains IP of either end. Does it has any significance ? Does it holds anything different then ...
1
vote
0answers
221 views

DNS not resolving through VPN

Looking for some help with our Office's VPN that I can't seem to solve... I am trying to remote desktop to the Work PC from Home PC via the DC ASA 5506-x VPN. I can only connect to the Work PC with ...
0
votes
0answers
61 views

ASA - communication between 2 tunnels

I have two IPSEC tunnels with an ASA in the middle Site A - 10.20.4.0 /24 (65.176.80.84) Site B - 192.168.142.0 /24 ASA - 10.99.206.0 /24 (95.12.22.33 Site A - 10.20.4.0 /24 can reach the ASA and ...
2
votes
1answer
79 views

Cannot Ping Firewall After Changing SFP

I am currently working on an issue that has me stumped... I have a network 172.16.144.0/20 which is connected to our fortigate 300D firewall via an Cisco 3850 external switch. Due to hardware ...
0
votes
1answer
107 views

Measurable performance impact of port mirroring on a firewall\security device?

I am setting up a network monitoring device which recommends that I create a mirror interface on my firewall/security appliance and send all packets to the monitor for sniffing, logging, and ...
1
vote
0answers
21 views

Why is static route being blocked by firewall? [closed]

I've been trying to get router to send specific traffic over to my server to go through an OpenVPN connection. The OpenVPN connection is working fine; and I can use the server as a gateway with no ...