Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

Filter by
Sorted by
Tagged with
0
votes
0answers
9 views

Can someone recommend some open source tcp proxy/firewall for diploma project? [closed]

I'm working on a diploma about finding malware in encrypted TCP traffic and the goal of my project is to create some firewall-tool that could block TCP traffic that I would flag as malicious. I'm ...
0
votes
0answers
11 views

How to forward port 8080 on pfSense to a (internal) nginx webserver? [closed]

Yesterday i installed a pfSense firewall switch on a company. The pfSense is connected directly to another modem from the internet provider. This modem receives the internet. Lets say my external ip ...
0
votes
0answers
8 views

HA Setup WAN Switch Point of Failure [closed]

Had a back and forth email conversation with a new client.. who requested for a Network Upgrade proposal.. So basically we suggested HA setup which consists of the following 2 x FIrewall (active-...
0
votes
1answer
14 views

Connect to application hosted in private network on a private DNS from outside world

I have an application hosted in a 2 VMs in a private network. Out of which one application is accessible from the outside world and the other one required private DNS. So outside users are not able to ...
2
votes
2answers
66 views

Where should I locate F5 Load Balancer in Network Segmentation?

I segmented my network and locate some important servers behind of firewall. So, I restricted traffic LAN (no segmentation between LAN clients, LAN servers) to/from important servers. These servers ...
0
votes
2answers
35 views

Bridge mode or straight replacement?

Let's assume the ISP is malicious. They have remote access to their own gateway/router. No way to remove that remote access. But ISP allows using a different gateway/router. Security-wise, what is ...
1
vote
1answer
42 views

How to find invalid sessions on Juniper SRX 5800 series Firewall

In Juniper SRX 5800 series Firewall , when we run the command 'show security flow session summary node 0' , we see that it shows large numbers of sessions as invalidated. But we don't know ...
0
votes
0answers
34 views

Packet loss at irregular intervals

We have had significant packet loss issues since switching from Sophos UTM SG 310 to the Barracuda Cloud Gen F380 firewall. This has a big impact on live applications like telephony. It is noticeable ...
2
votes
1answer
20 views

Unable to Communicate from server to other servers after migrating from existing firewall to new firewall

In our existing environment we had migrated old firewall with new firewall after this activity . we had faced connectivity issue . From servers unable to reach other servers . Post clearing ARP table ...
3
votes
1answer
20 views

Let me assume two firewall are connected in active -active mode ,how load sharing happen among two

i wants to know when two firewalls are connected in active -active mode for example A1 and A2 are connected in active -active . if session is initiated from A1 reverse traffic of this session will ...
0
votes
1answer
28 views

What is the difference between these two different network security devices?

I have a choice between these two network security appliances, however the only difference I can see is the year and I don't know what that year means. SONICWALL TZ300 WIRELESS-AC SECURE UPGRADE PLUS ...
0
votes
0answers
18 views

How to configure ZPF with Tunnel?

I am trying to configure ZPF in a Cisco 4331 router in Packet Tracer. I have a tunnel interface for GRE tunnel in this router. But I am not being able to assign this tunnel interface to any zone due ...
1
vote
1answer
42 views

Is it possible to configure DHCP on a router or UTM firewall for the multiple VLANs on L3 Switch?

I'm working on expanding our office network to accommodate more users/devices. Currently we have the DHCP configured on a UTM firewall(cyberoam ing50) device(cum router) providing IP addresses for ...
0
votes
0answers
33 views

Adding a route that changes source IP

I am failing at trying to create a rule for the F5 to change the origination IP address based on the destination IP address. Scenario - There is a web server that has three IP addresses assigned to it....
1
vote
2answers
146 views

Is TLS/SSL inspection throughput important while sizing a Firewall?

Our firm is planning on purchasing a Firewall solution, but are confused with the sizing requirement. We currently have 5 wired internet connections which make a total throughput of 500 Mbps (each ...
2
votes
0answers
53 views

Looking for sanitized Palo Alto FW Config

This may sound a bit unusual, but I'm looking for someone who can answer with a sanitized Palo Alto FW text configuration with the following features used: address-groups & service-groups global-...
0
votes
0answers
24 views

PaloAlto Application ID Signatures, 7-byte Regex Workaround

I'm in the process of creating some custom Application ID signatures, to give control over some in-house applications. In a nutshell, I've created signatures to match HTTP traffic using the http-req-...
1
vote
0answers
117 views

Cisco ASA 5585-x Failover Virtual MAC address

I have configured Cisco ASA 5585-x with Active/Standby mode, cisco best practice saying you should use Virtual MAC address on interface to avoid traffic disruption when you do failover. now question ...
0
votes
2answers
28 views

How to find the client's application port during communication [closed]

After reading firewall rules about inbound and outbount I have some questions and the most sources focus on the server's ports. What happens to the client side when is trying to make a connection to ...
1
vote
0answers
94 views

How to redistribute BGP routes learned from AWS in one VR into another BGP running in another VR in Palo Alto firewall?

I have about 1000+ prefixes I am learning from AWS on Palo Alto through a BGP. This is on the secondary VR. Main VR is where my core routing is situated along with another BGP instance pointing to ...
3
votes
3answers
493 views

What is the difference between an ASA firewall and UTM firewall?

How do ASA firewalls and UTM perimeter firewalls differ?
1
vote
4answers
96 views

How common it is to see unknown IPs in logs?

I have a server that streams video to YouTube/Twitch. I see [UFW BLOCK] entries in logs. One IP is 220.133.236.166, the other is 194.26.25.8. Is it a common thing that a server is connecting to my ...
0
votes
1answer
22 views

answer packages rejected between mangle/prerouting and nat/prerouting

I am currently configuring a ubiquity edgerouter for our network. We have one uplink port (eth2) and two internal ports (eth0; with vlan 1) and eth3 (with vlans 2,3 and 4). uplink and vlan 1 have ...
0
votes
1answer
153 views

Cisco NAT - Overload PAT and Static nat from one inside to two outside interfaces

i have following setup Cisco ISR4k Router with one inside LAN interface and two outside Interfaces. ---- WAN1 (NAT outside) LAN (NAT inside) -- ISR4k | ...
2
votes
2answers
31 views

Understanding IPV4 address range [duplicate]

I do have basic understanding of IP Address which is unique address for each System either in an organization or over the internet. But i want to understand what is IP address range Lets Say we have ...
0
votes
0answers
56 views

Cisco CML 2.0 strange ASA trunking issue

I am seeing very strange issue and now i am losing my mind so thought ask you folk. I have following two components connected point to point on Cisco CML 2.0 [nxos-9000v]--------------------[ASAv] ...
2
votes
3answers
901 views

Cisco SG-350 Switch and Fortigate Firewall Configuration

I'm not what you would call a Network Engineer, but right now i have a (somewhat) complex network problem that i have to solve. I must configure a SG-35028p cisco switch and a fortigate 60f firewall ...
0
votes
0answers
26 views

How much additional processing time is needed for a combination DMZ configuration?

Please consider the DMZ configuration shown below. (Image source: Testing Web Security: Assessing the Security of Web Sites and Applications by Steven Splaine) And then let us consider the following (...
0
votes
1answer
27 views

Public IP address does not work in internal network [closed]

I have configured port forwarding to my system from the router configuration menu, when I try to access the public IP address in the internal network it does not respond but it is accessible outside ...
0
votes
1answer
1k views

How to forward port 80 and 443 on pfSense to a (internal) nginx webserver?

Yesterday we did a "big bang" firewall switch in our company. Our new firewall is a pfSense server. Lets say our external ip is 84.1.1.1, pfSense is 192.168.1.1 and our web server ip is 192.168.1.2. ...
0
votes
2answers
71 views

How Does a Firewall (pfSense) Check Packets Against Rules

For packet rule testing, legacy 5 tuple based techniques employ decision tree, decomposition or hardware (usually TCAM) based approaches. What specific technique do pfSense firewalls employ to test ...
0
votes
0answers
76 views

NTP Sync issues between Palo Alto 3260 and Juniper MX10003

I'm using a Microsemi S650 as the primary ntp server and a Juniper MX10003 as the secondary ntp server. I have the palo alto 3260 configured as follows: [edit deviceconfig system ntp-servers] ...
1
vote
4answers
376 views

Firewall placement

Most diagrams I come across are as follows: ISP > router > firewall However, wouldn't you want a firewall before the router to protect the router? E.g ISP > firewall > router
2
votes
0answers
93 views

Why can't i reach devices in the other network?

I have 2 networks and want to connect them with each other. It should be possible that all devices in network A can communicate with devices on network B and other way round. 1 network is "managed" by ...
0
votes
2answers
214 views

Why cant i reach the other network while i have added the routes and firewall rules to allow traffic? (Pfsense/USG200)

I have 2 networks, the current one and the new one. The current one is not configured by me and one big mess and contains heavily out dated hardware (especially servers). I want to be able to access ...
1
vote
1answer
656 views

Cisco anyconnect VPN router specific public IP via tunnel

I have fully functional cisco Anyconnect VPN running on Cisco ASA5585-X and today i got requirement that there are some remote public sites we need to whitelist our VPN public IP to access them over ...
1
vote
0answers
35 views

How can one detect TLS inspection as a user with an enterprise managed device? [closed]

Let's assume Alice is an employee of the Company Chuck. Alice likes to communicate with Bob, a server somewhere in the internet. Chuck being a security orientated company, inspects all TLS connections ...
1
vote
1answer
116 views

VLAN Subinterface Removal - CISCO ASA

The below are the configuration of the subinterfaces in Cisco ASA firewall and currently sub-interface 0/1.1 is only passing traffic and I need to remove 0/1.2 configuration from here as it is unused. ...
1
vote
2answers
109 views

Palo-Alto Interconnection

I am a novice with PaloAlto networks. For testing purposes, I have connected two PA-220 with each other. I configured the IP addresses from the same subnet. For me, like routers, these devices should ...
0
votes
0answers
36 views

Locating where an IP address lives

Without documentation or using console how can I locate a particular IP within my network? Specific issue is I have public IP sitting on a device at a datacenter. The IP address appears to be going ...
1
vote
1answer
36 views

NSA 2650 - traffic capped [closed]

I have an NSA 2650, firmware v 6.5.4.5-53n. Running only a few of the security services including content filter, gateway AV, IP, RBL filter, GEO-IP, and botnet filter (no DPI-SSL!). I'm trying to ...
1
vote
1answer
662 views

How to route traffic via firewall in EVPN + VxLAN

This is what i am trying to design new network, this is just on paper nothing finalized and i am sure it has lots of issue like firewall should be on leaf not border leaf etc. so that is why i am here ...
0
votes
3answers
60 views

Best ports to use for proprietary protocols that might get inspected/blocked by firewalls

We use software from Genesys that uses its own proprietary protocols (all TCP) and we often run into issues with customers firewalls. The ports we are using are 2000, 2200 and 3010 - I'm not sure ...
0
votes
0answers
589 views

Cisco ASA and missing logs to syslog server

I would like to have some help with sending syslogs from a Cisco ASA 5555-X to a syslog server, graylog 3.2.1. When running the following settings I could see a lot of information in the buffer with ...
1
vote
1answer
848 views

2FA Setup for FortiGate SSL VPN

Just wanted to inquire if there is a way with FortiGate 60E to setup 2FA without setting-up a Forti-Authenticator or any additional costs? We are currently using this FW for our SSL VPN in our small ...
0
votes
3answers
165 views

Two 100mb ports on different networks on FortiGate 110C

If you allow me I have a quite far fetched question... I have a fortigate 110C with a gigabit WAN port, 100mb LAN ports and a 200mb modem connected to the Fortigate. Therefore I cant have 200mb/s ...
0
votes
0answers
10 views

Ipsec connection and nat only one site [duplicate]

There are two companies and two of them connected to each other with İPsec vpn. Company A has a server and company B want to reach to company A server. Which company need to configure nat on its ...
1
vote
1answer
84 views

ASA shows Action:Drop on packet-tracer, no reason or phase

I am doing a very simple lab with one asa and two computers. PC1 connected to dms PC2 connected to outside : Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores) : ASA ...
0
votes
1answer
35 views

How does ISP know which port to open for incoming answer from a site requesting, since sites answer in different ports from ones we ask? [closed]

I'm wondering how does ISP open door for incoming answer from a requesting site since the answer doesn't come from the requesting door, and how to achieve my computer IP since it's behind ISP firewall,...
0
votes
0answers
127 views

QoS over IPSec Site-to-Site VPN: Concerns and Questions

(For clarification purposes: Kbps = Kilobits per second for bandwidth, KB/s = Kilobytes per second for file / data transfer stuff. I'm using them separately because XG knows KBps but not Kbps - ...

1
2 3 4 5
11