Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

Filter by
Sorted by
Tagged with
0
votes
0answers
21 views

Cant access wireless devices from a wired device [closed]

I have a ZTE F660 router provided by the ISP. My PC is connected through wire/ethernet cable to the router. Recently I was tinkering with a microcontroller known as ESP 8266 commonly used for simple ...
0
votes
0answers
19 views

How much additional processing time is needed for a combination DMZ configuration?

Please consider the DMZ configuration shown below. (Image source: Testing Web Security: Assessing the Security of Web Sites and Applications by Steven Splaine) And then let us consider the following (...
0
votes
1answer
22 views

Public IP address does not work in internal network [closed]

I have configured port forwarding to my system from the router configuration menu, when I try to access the public IP address in the internal network it does not respond but it is accessible outside ...
0
votes
0answers
31 views

How to forward port 80 and 443 on pfSense to a (internal) nginx webserver?

Yesterday we did a "big bang" firewall switch in our company. Our new firewall is a pfSense server. Lets say our external ip is 84.1.1.1, pfSense is 192.168.1.1 and our web server ip is 192.168.1.2. ...
0
votes
0answers
30 views

How Does a Firewall (pfSense) Check Packets Against Rules

For packet rule testing, legacy 5 tuple based techniques employ decision tree, decomposition or hardware (usually TCAM) based approaches. What specific technique do pfSense firewalls employ to test ...
0
votes
0answers
29 views

NTP Sync issues between Palo Alto 3260 and Juniper MX10003

I'm using a Microsemi S650 as the primary ntp server and a Juniper MX10003 as the secondary ntp server. I have the palo alto 3260 configured as follows: [edit deviceconfig system ntp-servers] ...
0
votes
4answers
84 views

Firewall placement

Ok, so I'm confused on the placement of firewalls, most diagrams I come across are as follows: ISP > router > firewall However, I'm confused about this, surely you would want a firewall before the ...
1
vote
0answers
80 views

Why can't i reach devices in the other network?

I have 2 networks and want to connect them with each other. It should be possible that all devices in network A can communicate with devices on network B and other way round. 1 network is "managed" by ...
0
votes
2answers
62 views

Why cant i reach the other network while i have added the routes and firewall rules to allow traffic? (Pfsense/USG200)

I have 2 networks, the current one and the new one. The current one is not configured by me and one big mess and contains heavily out dated hardware (especially servers). I want to be able to access ...
1
vote
1answer
44 views

Cisco anyconnect VPN router specific public IP via tunnel

I have fully functional cisco Anyconnect VPN running on Cisco ASA5585-X and today i got requirement that there are some remote public sites we need to whitelist our VPN public IP to access them over ...
1
vote
0answers
31 views

How can one detect TLS inspection as a user with an enterprise managed device? [closed]

Let's assume Alice is an employee of the Company Chuck. Alice likes to communicate with Bob, a server somewhere in the internet. Chuck being a security orientated company, inspects all TLS connections ...
1
vote
1answer
39 views

VLAN Subinterface Removal - CISCO ASA

The below are the configuration of the subinterfaces in Cisco ASA firewall and currently sub-interface 0/1.1 is only passing traffic and I need to remove 0/1.2 configuration from here as it is unused. ...
1
vote
2answers
82 views

Palo-Alto Interconnection

I am a novice with PaloAlto networks. For testing purposes, I have connected two PA-220 with each other. I configured the IP addresses from the same subnet. For me, like routers, these devices should ...
0
votes
0answers
31 views

Locating where an IP address lives

Without documentation or using console how can I locate a particular IP within my network? Specific issue is I have public IP sitting on a device at a datacenter. The IP address appears to be going ...
1
vote
1answer
29 views

NSA 2650 - traffic capped [closed]

I have an NSA 2650, firmware v 6.5.4.5-53n. Running only a few of the security services including content filter, gateway AV, IP, RBL filter, GEO-IP, and botnet filter (no DPI-SSL!). I'm trying to ...
1
vote
1answer
110 views

How to route traffic via firewall in EVPN + VxLAN

This is what i am trying to design new network, this is just on paper nothing finalized and i am sure it has lots of issue like firewall should be on leaf not border leaf etc. so that is why i am here ...
0
votes
0answers
34 views

Hub and spoke IPSec in pfsense

I have 9 different sites and one HQ site where all 9 remote sites connect to via IPSec VPN. All are pfsense firewalls. I want to allow traffic between site 2, 3 and 4. But I do not want to configure ...
0
votes
2answers
34 views

Best ports to use for proprietary protocols that might get inspected/blocked by firewalls

We use software from Genesys that uses its own proprietary protocols (all TCP) and we often run into issues with customers firewalls. The ports we are using are 2000, 2200 and 3010 - I'm not sure ...
0
votes
0answers
147 views

Cisco ASA and missing logs to syslog server

I would like to have some help with sending syslogs from a Cisco ASA 5555-X to a syslog server, graylog 3.2.1. When running the following settings I could see a lot of information in the buffer with ...
1
vote
1answer
491 views

2FA Setup for FortiGate SSL VPN

Just wanted to inquire if there is a way with FortiGate 60E to setup 2FA without setting-up a Forti-Authenticator or any additional costs? We are currently using this FW for our SSL VPN in our small ...
0
votes
2answers
52 views

Two 100mb ports on different networks on FortiGate 110C

If you allow me I have a quite far fetched question... I have a fortigate 110C with a gigabit WAN port, 100mb LAN ports and a 200mb modem connected to the Fortigate. Therefore I cant have 200mb/s ...
0
votes
0answers
10 views

Ipsec connection and nat only one site [duplicate]

There are two companies and two of them connected to each other with İPsec vpn. Company A has a server and company B want to reach to company A server. Which company need to configure nat on its ...
1
vote
1answer
32 views

ASA shows Action:Drop on packet-tracer, no reason or phase

I am doing a very simple lab with one asa and two computers. PC1 connected to dms PC2 connected to outside : Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores) : ASA ...
0
votes
1answer
30 views

How does ISP know which port to open for incoming answer from a site requesting, since sites answer in different ports from ones we ask? [closed]

I'm wondering how does ISP open door for incoming answer from a requesting site since the answer doesn't come from the requesting door, and how to achieve my computer IP since it's behind ISP firewall,...
0
votes
0answers
40 views

QoS over IPSec Site-to-Site VPN: Concerns and Questions

(For clarification purposes: Kbps = Kilobits per second for bandwidth, KB/s = Kilobytes per second for file / data transfer stuff. I'm using them separately because XG knows KBps but not Kbps - ...
1
vote
1answer
30 views

User Upload Quota Fortigate - 501E (6.2.1)

Im using a Fortigate 501E. my requirement is: Every user can’t upload more than 1 GB per day. is it possible to implement the above requirement. Thanks
0
votes
1answer
48 views

Unable to receive logs from a device to our SIEM Syslog server via TCP 514 [closed]

I want to collect logs from a security device (McAfee Email Gateway) to our SIEM Syslog server. This security device can forward logs only via TCP syslog on any port (in our case it is 514). We are ...
2
votes
1answer
58 views

When is the source address of ICMPv6 message types 133, 135 and 136 other than unspecified(::/128) or link-local(fe80::/10)?

According to rfc4861 the source address for Router Solicitation(ICMPv6 type 133), Neighbor Solicitation(ICMPv6 type 135) and Neighbor Advertisement(ICMPv6 type 136) can be an address assigned to the ...
0
votes
2answers
158 views

Configuring a network for 100% isolation (for security)

I'm configuring a LAN for an office. It's a new setup, and therefore there are desktops but no servers and no PC-to-PC communications - everything is on the cloud. The exception to this are several ...
3
votes
1answer
93 views

Cisco ASA5585-X replace SSP-20 with SSP-60

We have cisco ASA5585-X with SSP-20 running in production and we need more power so planning to replace SSP-20 with SSP-60 module but not sure we can just hot swap with SSP-20? Does ASA5585-X support ...
1
vote
2answers
54 views

Applying WAN Changes to Juniper Chassis Cluster

I have a Juniper SRX 340 in a chassis cluster state. I am looking to change the WAN IPs used by the firewalls as the ISPs will change. I have GE interfaces that have sub interfaces within them 1,2,20,...
1
vote
1answer
49 views

IP Routing and Switching Interface Speeds

I have a question that relates to routing and switches. I am looking to set up a new Firewall that will handle the routing for the network and attached to the Firewall will be a switch. Here are the ...
0
votes
1answer
56 views

Cisco Zone Based Firewall

I have Cisco 891F configured with ZBF from CBAC. Right now, router is wide-open SSH/443 or anything my public address is listening on, which is not what I intended. My intention was to only allow IMCP ...
3
votes
2answers
132 views

What is the advantage of Supervised Machine Learning over Deep Packet Inspection in Network Traffic Classification?

As per the definition of Deep Packet Inspection (DPI), it uses signatures for packet filtering. Supervised Machine Learning can help put a label on a packet which does not get identified by Deep ...
0
votes
1answer
111 views

Cisco ASA and a Router?

I'm trying to understand networking and when looking at the different routers, firewalls and switches, I came across Cisco ASA. I've read that these can be used as firewalls and routers but others say ...
0
votes
3answers
54 views

packet filtering using bridge vs router

I have a question about the bridge vs router packet filtering using firewalls. I know the basics of the router and bridge and on which layers they work. I just wanna know that on bridge how does ...
4
votes
3answers
2k views

How does Deep Packet Inspection work with encrypted packets?

I've been reading up on Deep Packet Inspection for Software Defined Networks. However, I know that some applications use encryption to evade Deep Packet Inspection. Is there any alternative (such as ...
0
votes
1answer
42 views

Design of 2 Lans Connected to a Watchguard m570 firewall

I have this architecture (without the firewall). I bought a Watchguard M570 as Firewall to add it in my network. My Question is : Could i use my watchguard and connect this one to my 2 LoadBlancers ...
0
votes
0answers
56 views

cisco zone-based policy firewall

How to limit the number of established connections for each host, that connect to the service? In the policy settings, I found only blocking by the number of half open connections. parameter-map type ...
0
votes
3answers
103 views

Access a pc web service with different ip/mask in on-site network

I tried to get a setup working to make the following scenario work: Access a pc web service hosted in a different IP range/mask than the rest on-site PCs. Details: We have a network setup with a ...
0
votes
0answers
61 views

Cisco ASA Security Warning: Untrusted server cert after asa crash and reload

We have Cisco ASA 5505 working VPN anyconnect and it's been almost 1 year no issue, but last week it got crashed and reboot itself and after that we found it started throwing warning like following: ...
2
votes
2answers
243 views

problems routing WAN with private IPs and LAN with public IPs

I have just installed pfsense 2.4 for a SOHO I work and I'm getting problems with the routing. I have asked my ISP for a /29 network with public ips for the DMZ, but instead of giving my directly what ...
1
vote
1answer
171 views

Cisco ASA looping broadcast packet

I have small office where running cisco ASA ASA5506 and version 9.4(1) and it's also configured for IPsec VPN tunnel, My LAN subnet is 10.1.1.0/24 So i have found very interesting things in LAN ...
0
votes
1answer
27 views

telnet connection response if port is closed on firewall [closed]

If port xxx is not open on a firewall, what would be the telnet response when attempting to open a telnet session from a remote host in network "A" connected via site-to-site VPN with network "B"? ...
1
vote
3answers
33 views

Can we set filewall rule to control with in subnet? and also if we use 2 subnet on same interface Is this effect to firewall rule?

Can we set filewall rule to control with in subnet? as in picture Can we use firewall to controll PC0 to access only some port on PC1 ? if we set gateway to router , Is it will alway go to router ...
0
votes
1answer
34 views

Is it possible to see the NAT or PAT mapping from the firewall logs?

Is it possible to see the NAT or PAT mapping from the firewall logs? For example a Fortigate. Thank you This is my previous question which I cannot edit. But here I am posting a precise question. ...
0
votes
1answer
107 views

Checkpoint beginner

My company got few CP firewalls, I have to test them and I never had a chance to work on them. Can anyone explane me differences between CP smart dashboard and CP smart console? Is that software ...
0
votes
0answers
32 views

What is BFM in reference to checkpoint firewall?

Request some one to please expand the term BFM when used in reference to checkpoint firewall. The same appears multiple times in documentation and forums but there is no explanation of what it is. ...
0
votes
1answer
84 views

If you're behind a firewall and all the ports are blocked, how is your browser able to access the internet?

I'm behind a router and I'm able to run game servers on my home computer after forwarding ports or using the DMZ feature on the router. However, I still don't understand the underlying technology as ...
2
votes
1answer
131 views

Restructuring office network advice and How to go about VLAN setup?

Wanted to get some advice and assurance that I’m on the right track for re-configuring our office network. Current setup: FortiGate100D with 2 physical network interfaces, network-1 used for regular ...

1
2 3 4 5
11