Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

For questions about or relating to firewall operations, configuration and troubleshooting.

0
votes
0answers
17 views

Firewall with private WAN (MPLS, VPLS, MetroEthernet) [on hold]

Do the private WAN architectures (MPLS, VPLS, MetroEthernet, etc) for sites interconnections, require a firewall ? (often saw online architectures examples, best practices, etc, without firewall...)
0
votes
1answer
21 views

Change firewall rules of a Cisco Router from network

I'm looking for ways, methods or workarounds to: Change firewall rules (WAN/LAN accept-deny) of a Router from networking, through Linux command or PHP script, can be a socket, or rest service, soap ...
0
votes
1answer
32 views

How does a firewall receiving an image file approve it?

I was recently told that a Firewall configuration for the WatchGuard device does not allow the user to login and alter the configurations. Instead, you send an encrypted image file containing the ...
0
votes
0answers
13 views

Is a FIN only packet legal?

It would be convenient to mark TCP packets with just the FIN flag set, as an intrusion (without tracking the reply). I have always assumed that a FIN without an ACK, while rude and rare, is legal, ...
0
votes
1answer
18 views

How can I use a firewall as Internet Breakout?

I am currently installing a firewall in my company (using OPNsense) but I was asked to use the same system as "Internet Breakout" as well. Does anyone know how to accomplish this? I understand that ...
0
votes
1answer
22 views

Separate network for test systems

I often read that you should put customer machines into a separate (testing) network like a DMZ. Is a layer 3 device (switch/router + firewall) a good option for this? Since some ports need to be ...
1
vote
1answer
61 views

How to block Whatpsapp, Imo, Viber etc from Router? [closed]

I want to block whatspp, viber or other chat apps as such. I have microtik router with RouterOS in it. But how would I block Viber or whatsapp? If I am to block domain, what's their domain though? If ...
0
votes
0answers
16 views

Cisco CPL class-map and object groups, address matching and other

I'm completely new to Cisco Zone Based Firewall concept. I was looking on couple of general tutorials, and I can not figure out following: Is it allowed to use object groups inside class-map ? I know ...
1
vote
2answers
71 views

Does each VLAN need a dedicated uplink port?

I am designing a network consisting of close 60 ports, via a managed switch. I intend to deploy multiple VLANs: one for servers, one for desktops, one for guests, etc. I intend to use the firewall ...
0
votes
0answers
48 views

https url logging (inspect) in cisco asa

Recently I'm started working on cisco ASA 5516 firewall. Now I need to enable logging for browsing URLs with internal IP's list. Able to done for http sites with below commands en conf t policy-map ...
0
votes
1answer
23 views

Why specify additional NAT rule

In watchguard's guide for NAT loopback when describing the additional nat rules required, they show this image: Why are those top two NAT rules necessary, ie aren't they already covered by the next ...
0
votes
1answer
61 views

IP is getting through from firewall although it was in Banned List

I am facing wearied scenario. We are having a SIP gateway in DMZ, yesterday I have observed malicious traffic hitting SIP gateway from the 212.x.x.209 IP. I immediately Banned this IP in firewall so ...
1
vote
0answers
22 views

Where can i find literature on how Firewall logs are generated? [closed]

How are firewall logs generated, I want to know how frequently (or how infrequently ) are logs generated from reading packet data if that is what it is. I want to detect anomaly on an enterprise ...
1
vote
2answers
60 views

port ifIndex at Fortigate 1500D

I searched many online sites but unsuccessful to exact command to check port ifIndex that is used by SNMP to reflect trap at SNMP host at 1500D Fortigate. diagnose sys device list root display the ...
1
vote
0answers
64 views

Frequent Internet Disconnection

Hello everyone! I am relatively new to this forum, and wanted to get some useful feedbacks and resolution from "network-PROs" on my problem.. I have a network with a main router connected to the ...
0
votes
0answers
41 views

Traceroute packets processing behavior

A traceroute initiate for NATed IP address 10.12.1.10 from a router that is outside from AS. This traceroute packet reaches at native BGP peer router where this NAT IP is configured at Firewall. ...
0
votes
0answers
39 views

Cisco ASA 5525 Configuration file

im working on a configuation review so im looking for a way to extract the config for the following equipment : Firepower version 6.2.3 in Cisco ASA 5525 ISE: Model SNS 3515k9, version 2.3 i already ...
0
votes
1answer
42 views

Are these hosts Live?

Situation : Along with other active hosts, our internal network scan shows an extra 9 IP addresses in the report (no reverse DNS, just IP addresses) with 0 vulnerabilities and 2 INFO INFO1 : Nessus ...
1
vote
1answer
73 views

Same subnet on two firewalls

I came across a network setup in this way: Cisco device provided by the ISP serving as a bridge between the fibre line and the LAN. Cable coming out from port eth0 of the Cisco above going to a ...
0
votes
1answer
54 views

What is a “back to back” firewall configuration?

I've found some guides talking about "back to back" (or back2back) configuration but I can't find an explanation of such configuration. Can somebody explain what is meant by "back-to-back"?
1
vote
1answer
44 views

Event manager applet not getting recognized for Cisco ASA ver8.0

I need help as Event manager applet not getting recognized for Cisco ASA ver8.0. But for cisco ASA ver 9.6 it is working properly. Please advise BnglASA/pri/act(config)#Event manager applet ...
0
votes
0answers
62 views

Why ASA might not be logging all connections that are denied by an ACL

For some reason I am unable to see all connection attempts I try through the ASA generate a log for each which what my client is requesting. For instance, I have tried 48 times a telnet session to 8....
5
votes
3answers
213 views

Cisco ASA 5510 - ACL Config Question

My company's email server is under attack from the following IP address blocks 92.63.193.0 5.188.9.0 Here are the corresponding WHOIS records for each network % This is the RIPE Database query ...
0
votes
0answers
15 views

Sonicwall SSL VPN Lab Setup

I would like to setup a lab, and was wondering if anyone knew if a Sonicwall VPN iso can be downloaded just like a Cisco router's iso can downloaded and ran virtually.
1
vote
3answers
52 views

Check physically inaccessible computer on local network

If a physically inaccessible computer attached to your local network segment is firewalling all IP traffic, how would you find out if it is up or not?
1
vote
1answer
27 views

Is an ACL needed when using PAT (dynamic nat)?

We have a single router (4331) that connects to our ISP. We do PAT (dynamic nat) to give users internet access. Now typically we'd have an OUTSIDE-IN ACL that blocks traffic from the internet. My ...
0
votes
0answers
62 views

How to Connect FMC(management center) in Cisco FirePower firewall

I launched a new Cisco FirePower firewall in My AWS account. I followed Cisco Firepower Management Center Virtual for the AWS Cloud Quick Start Guide steps to launch the firewall. Once the ...
3
votes
1answer
85 views

How to connect servers from different Datacentres via firewall

really need help since I am still new in firewall. I have 2 firewall located in two separate Datacentres. I need to make a connection for the servers from these 2 DCs. One firewall is running pfsense ...
0
votes
0answers
93 views

Cisco ASA with FirePOWER - Monitor HTTPS traffic

I'm trying to monitor https traffic entering and exiting the outside interface of my Cisco ASA 5508-x. The current versions are: ASA: 7.9(1) FirePOWER: 5.4.1-211 First and foremost, is it possible ...
0
votes
1answer
28 views

How to check the network performance for smooth transferring of huge data?

We have cisco network setup and we often find that we are having issues while transferring huge amount of data between our database, Is it possible to check the network performance and any latency ...
1
vote
1answer
172 views

Cisco ASA IP object vs TCP/UDP object wrt VPN Filters

When it comes to managing access rules in Cisco ASAs I always use ASDM because it's easier for me to visualize, troubleshoot and manage. I recently created a VPN filter for a S2S IPsec VPN and ...
1
vote
1answer
114 views

Understanding how Cisco ASA with FirePOWER Services works

We recently installed a Cisco ASA 5508-x with FirePOWER Services. I am now getting around to setting FP up. I would like to understand how FP works before configuration. In terms of exposure, how ...
1
vote
1answer
105 views

Pix 6.3 to ASA 9.2 migration

I inherited a production Cisco Pix 6.3 firewall and an unconfigured ASA 5512 9.2. I'm reading up on converting the existing Pix config to an ASA-compatible config and there's mention of a migration ...
1
vote
1answer
96 views

ASA Inspection clarity

i want to make sure i get this because it's driving me a bit mad. class-map ftp match port tcp eq 21 class-map http match port tcp eq 21 [it should be 80] policy-map test class ftp ...
4
votes
1answer
78 views

Can I get what filters are applied to an interface via SNMP?

I have some firewall filters on juniper devices- ex3300s make up the majority of them. I've been looking for an oid that will let me associate an IFL with the filters that are on it, and I've yet to ...
2
votes
2answers
291 views

Cisco failover interface in waiting

I have following scenario, where i am getting 1G copper Cat6 cable from ISP and directly terminated on my Cisco ASA firewall on Gi0/8 interface and i have configured failover now my in failover output ...
1
vote
0answers
344 views

Configure pfSense VLAN Trunk

I have setup a pfSense box as a transparent firewall between my Cisco router and first Cisco switch: CISCO ROUTER - 10.10.1.253 ↓ PFSENSE - OPT1 BRIDGE - 10.10.1.252 ↓ CISCO CORE SWITCH - 10.10.1.250 ...
4
votes
1answer
99 views

What Is Session Border Controller [closed]

What is Session Border Controller(SBC). And What is the Advantages of SBC. How Does It Works?
2
votes
1answer
51 views

Trying to configure STP on a small network and have a few questions

I am trying to configure the switches on a network to use STP or RSTP but I'm confused about how to do this. The network consists of 3 switches, all on the default subnet, so a fairly simple setup. ...
0
votes
0answers
50 views

Allow traffic from only IP address on Cisco router to perform NMAP scan

I need to quickly run an NMAP scan against ISR4K router, and I would like to be able to disable all traffic to it, except from one IP address, where the scan is done. Then secondly, what configs do I ...
1
vote
1answer
236 views

Cisco ASA Management and Routing Help

Hoping somebody can help me understand what I'm doing wrong here. Here is the diagram: [![enter image description here][1]][1] We have an ASA sitting at the edge. The FirePower module is connected ...
2
votes
1answer
100 views

VPN S2S/L2L between 2 ASA 5506-X

I have a problem to create a VPN L2L between 2 ASA 5506-X (see the pictures bellow). I configure my 2 firewall inspired by the majority of tutorials found on the NET. I correctly place client PCs in ...
1
vote
2answers
167 views

How to assign a second available Public ip for NAT (Dynamic PAT) to Inside Network Cisco ASA 5516-X

I have a x.x.x.200/29 subnet of Public IPs. Router Interface: x.x.x.206 255.255.255.248 ASA 5516-x outside: x.x.x.201 255.255.255.248 ASA 5516-x Inside: 10.111.22.254 255.255.255.0 I want to nat ...
0
votes
1answer
759 views

link-monitoring in fortigate

]3i am trying for a failover between two ISP interfaces using link-monitor in fortigate. both ISP links are vlan interface ( ie, not physical). and with my primary ISP, i have eBGP. i need to monitor ...
4
votes
0answers
99 views

Immediately block a host's traffic

I've got a script set up (triggered by Fail2Ban) to block hosts at the edge of our network. It adds the IP address to a group that's already blocked by an ACL, and then clears the connection out. ...
1
vote
0answers
38 views

What are some options to replace a computer that is dual homed on 2 separate VLAN's? [closed]

One is a "secure" VLAN, the other is a "house" VLAN. At some point, a workflow was developed in which a decision was made that sales staff needed to take some of their materials received from clients ...
0
votes
0answers
24 views

I'm setting up a small network with ASA 5505 can not ping inside addresses from other inside addresses

Here is the config. The inside network 10.43.2.X I can ping the ASA from 10.43.2.4 but can not ping 10.43.2.41 or any other address other than the ASA which is at 10.43.2.12. names ! interface ...
2
votes
1answer
56 views

CBAC on 2911 Not Working Properly

I am attempting to configure CBAC on one of my 2911 routers to better secure a remote site with less configuration and cleaner access lists. We have two circuits, a broadband circuit, and a MPLS ...
0
votes
2answers
67 views

Firewall has only one port. How can I properly NAT to ISP on a Layer-3 switch?

My firewall, an iptables Linux box only has one Ethernet port. My network topology is pretty simple and looks something like this: ISP (Port Gi 1/1) -> Switch <-Firewall on Port Gi 1/2 ...
1
vote
1answer
56 views

Traffic flow for internal traffic in Juniper SRX 650

I would like to know whether the Juniper SRX by default allows all the source and destination ports if all the devices are from the internal networking range. For eg, Src-10.10.x.x SrcPrt-any Des-10....