Skip to main content
The 2024 Developer Survey results are live! See the results

Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

Filter by
Sorted by
Tagged with
0 votes
0 answers
40 views

Lancom Failover Configuration does not use LTE after following their documentation

I have tried to configure a Lancom 1900EF-5G Firewall. It is running the latest firmware (10.80.0450SU4). I want to configure SD WAN Dynamic Path Selection. I have three ISP connections. Two fiber ...
cgsmith's user avatar
0 votes
1 answer
47 views

Puppet on Forti os, Is it possible?

I basicaly wanted to know if it is possible to download and configure puppet-client on a fortigate to be able to push configuration manifests from the puppet-server ? I already know that some tools ...
Pierre C's user avatar
1 vote
0 answers
15 views

Firewall not reverse translating NAT address in VyOS GNS3

I'm using two VyOS images as Firewalls in gns3, to which I have connected two routers, one from an inside network and another from an outside network. I configured NAT in both for the internal ...
dyxcvi's user avatar
  • 11
1 vote
1 answer
104 views

My Fortinet Firewall shows 100Mbps (100%) bandwidth usage in the BD dashboard but Fortiview sources do not show much usage. Facing connectivity issue!

I am working with a Fortinet FG-60F firewall. It has 2 WAN sources and both have a maximum link speed of 100Mbps. Throughout the day, I am repeatedly getting downstream bandwidth spikes of 100Mbps+ on ...
WishIWasACoder's user avatar
0 votes
1 answer
177 views

Problem with Configuring Selective DNAT for HTTP Traffic on Fortigate Firewall

I'm currently in the process of setting up a new Fortigate Firewall and have run into an issue while configuring DNAT. From what I understand, this is done through Virtual IPs in Fortigate. My goal is ...
Mischa-H's user avatar
1 vote
1 answer
445 views

How can I view the bandwidth usage of a specific interface over a period of time on Fortinet without using a FortiAnalyzer instance?

My company utilizes a Fortinet firewall, but we currently do not have a FortiAnalyzer. We are seeking to obtain statistics on the usage of an internet interface's bandwidth, specifically over a 24-...
Asma B's user avatar
  • 51
0 votes
0 answers
142 views

palo alto firewall dynamic address group is not working

I am testing a simple dynamic address group (DAG) based on policy tag matching...but the when I add the DAG to the policy all traffic stops and no IPs ever populate the DAG. I verified the LFP ...
rolinger's user avatar
  • 101
0 votes
1 answer
46 views

Protect public network with virtual firewall w/o control over the gateway

I have a public network, 123.123.123.0/28, and a local network, 192.168.1.0/24. My ISP gateway for the public network is 123.123.123.1. My virtual firewall and router (pfsense) is running inside ...
Demiler's user avatar
1 vote
1 answer
650 views

How to use 5 static ip addresses with virgin media broad band

I have installed virgin media business broadband and the package comes with 5 static ips. These IP are GRE tunnels from the HITRON router to virgin. the IP addresses are for example 66.66.66.65 - 66....
funkimunky's user avatar
0 votes
1 answer
459 views

Router to Wireless router (Packet Tracer)

Hi, Can anyone help why I can't ping from my pc in office network to my laptop in guest network or wireless network. It is possible to ping from guest network to office but failed vice versa. Main ...
eccentric learner's user avatar
0 votes
1 answer
48 views

How to prevent a user from using YouTube while connected to my network [closed]

i need to restrick specific user from using youtube and other socialmedia during job time
Kapala's user avatar
  • 1
0 votes
1 answer
239 views

Juniper SRX, workstation on SRX switch port cannot ping reth interface

I have a SRX345 firewall that has a workstation hanging off one of its ethernet ports. The workstation cannot ping the SRX reth interface, reth1.50 (its default gw) even though the ethernet port is ...
Jeff Todd's user avatar
0 votes
1 answer
203 views

DMZ cannot send traffic to INSIDE (Cisco ASA 5505)

Have a nice day, everyone. I have a question while working with Cisco ASA 5505 firewall. I want to create a interface/VLAN for DMZ. To do this: int vlan 3 no forward interface vlan 1 nameif dmz ...
Penguin's user avatar
  • 27
0 votes
1 answer
510 views

Why does pfSense require a DNS access list entry when all interfaces are selected?

Netgate 4100 v23.05-RELEASE The DNS Resolver was only working on LAN 1 but not LAN 3 (physical nics, not vlans). I added an access list rule as suggested here to grant LAN 3 access and now ...
user2864874's user avatar
0 votes
1 answer
71 views

Allow active connections in firewall on multiple BGP connected routers

We have a network on its own AS with 2 routers connected to 2 AS via BGP (full routes). The routers also both have a firewall on board that by default drops all traffic, except the one allowed. We ...
wimg's user avatar
  • 103
0 votes
1 answer
39 views

ACLs block connection

Here is my configuration on ISP router: interface GigabitEthernet0/0/0 no ip address duplex auto speed auto ! interface GigabitEthernet0/0/0.10 encapsulation dot1Q 10 ip address 192.168.10.1 255....
Penguin's user avatar
  • 27
1 vote
1 answer
260 views

Route traffic from firewall tunnel interface to server in Azure [closed]

Situation: On premise is a NAS that users access for file storage. Their AD server for authentication and GPO resides in Azure and is connected with a LAN to LAN VPN. For remote workers, they have a ...
David Sain's user avatar
0 votes
1 answer
187 views

How To get active vpn(site tot site) count from cisco FTD using ansible

I have been trying to get active VPN count from FTD firewalls using ansible, I tried the same on ASA and it have been running successfully. But when comes to FTD ansible, As it uses httpapi instead of ...
Eniyan's user avatar
  • 13
0 votes
2 answers
2k views

connect two private network using pfsense

I have two pfenses (say p1 and p2) in two separate networks. Each has a public IP. There is an internal network on each side (say n1 and n2). I want to connect these two networks through these two ...
horny hacker's user avatar
2 votes
4 answers
467 views

Difference between Zero Trust Architecture and VPN + MitM Access Rights Management at Gateway

I am currently evaluating Next-Generation Firewall concepts and features and remembered about the Zero Trust networking model. I do find the notion of "trust nothing" in the context of ...
alex's user avatar
  • 167
1 vote
0 answers
1k views

Cannot access to Fortigate FW through mgmt port after forming HA

The two FW are Fortigate WiFi 60E, OS v7.2.0 build1157. The HA connection on the two FortiWifi60E was like PC1-----Fortigate FW1-----Fortigate FW2-----PC2 PC1 IP:192.168.1.100 PC1 default gateway:192....
jacky chong's user avatar
0 votes
1 answer
203 views

Blocking traffic means can't access that server?

I know this is a super newbie question. I recently learn about firewall and you would know there is security levels. The higher levels can send the traffic but cannot get it from the lower one. I am ...
Myung Seok Kang's user avatar
1 vote
1 answer
106 views

We want to see where the traffic is going on a Cisco 1140 firewall.. is there a way to do this? Need more than hitcounts [closed]

looking to see if there is a way to find out where traffic is going and coming from on a Cisco 1140 running FTD .... We need more than just a hit count...
Johnny 's user avatar
2 votes
1 answer
1k views

Cisco NGFW FTD NAT/PAT pool exhaustion monitoring

We have a customer, who rarely experiences NAT/PAT pool exhaustion on their Cisco Firepower NGFW 4110. While syslog will helpfully notify us that there's an immediate problem, we would really like to ...
Cow's user avatar
  • 1,732
3 votes
1 answer
178 views

Valid uses for IPv4 Options [Community-Wiki]

Engineers building firewall rules often block all IPv4 packets with IPv4 Options set in the header. However, there are a few common and valid use-cases for IPv4 Options. This Q&A is intended to ...
Mike Pennington's user avatar
0 votes
0 answers
30 views

Is it possible to create an IPS rule to Checkpoint 5200 PB-20 Firewall for Mysql packets

Is it possible to create an IPS rule to Checkpoint 5200 PB-20 Firewall that assesses the content from incoming packets for Mysql database server (port 3306)? If the packet is according to real Mysql ...
user3637971's user avatar
0 votes
1 answer
19 views

Is this possible? Adding a local device of my home network in client network without firewall configuration at client side (VPN?) [closed]

Let me explain what I want to achieve, but keep in mind that my networking knowledge is limited. I want to login at a clients network to do some remote troubleshooting. And I want to use (for example) ...
Dimitri's user avatar
4 votes
4 answers
2k views

Do I get any security benefits by NATing a network that's already behind a firewall?

I'm deploying a new network for IOT devices, this new network will be behind a firewall. I've been suggested to also get the network natted to further improve security. Does this really add any ...
Gaston539's user avatar
0 votes
1 answer
179 views

High availability vs network mac/arp config

Currently I test firewall HA settings and we observe some delays despite its active/passive config. Usually there should not be any interruption.Vendor explains this based on some configuration MAC/...
hakkican's user avatar
  • 145
0 votes
1 answer
79 views

Where are the GCP Firewall logs?

It's a little tricky to find GCP Firewall logs the first time you look for them. Where are they?
Mike Pennington's user avatar
1 vote
1 answer
571 views

Cisco ASA not accepting external traffic without NAT configuration

First of all, I am quite newie in the cisco world, so this could be some easy stuff that I'm missing. My first problem is trying to understand why a Cisco ASA5585 does not show traffic while doing a ...
adrianlzt's user avatar
  • 121
0 votes
1 answer
150 views

Routing VLANs to Firewall Ports

My network has 3 VLANs: 10, 11, 12, and their address spaces are 10.0.X.0/24 where X is the VLAN ID. Their default gateway is a virtualized pfSense (even though it's virtual, I will use terminology as ...
Jeremy's user avatar
  • 3
0 votes
1 answer
1k views

VLAN and firewall interconnection

I'm encountering some difficulties to connect some VLANs to a physical firewall. In details I have a core network with a L3 switch as a router and some L2 switches as access network. The network is ...
rouilleart's user avatar
0 votes
3 answers
422 views

Is it best practice to restrict access from non-DMZ hosts to DMZ hosts? [closed]

I know that access should be restricted from DMZ hosts to non-DMZ hosts where possible (i.e., my web servers should only be able to talk to other internal resources where necessary). But is it best ...
sfarbota's user avatar
  • 101
5 votes
3 answers
4k views

Difference between firewall and ACL

I have found many answers to this question, none of which satisfy me due to lack of detail. Can someone please explain in detail what is a firewall and what is its purpose, and what is an ACL and what ...
GalSuchetzky's user avatar
1 vote
4 answers
1k views

What is the difference between having a firewall inside vs outside the network?

I am trying to better understand the firewall's placement for a secure & nominal operation with efficient traffic flow. The Question: What would the use case scenario be for firewall outside vs. ...
13months's user avatar
  • 131
0 votes
1 answer
788 views

TCP segment with flags ACK, PSH, URG

Can a TCP data segment with a 1 byte length have, at the same time, the flags ACK, PSH, URG set ? Is it conform or not to the TCP protocol ? Thank you.
fa7xtpy's user avatar
1 vote
1 answer
264 views

ARP cache in firewalls and difference from an end point device

Imagine a device A (192.168.32.5/24). Then two hosts, B and C, connected to the same interface (through a switch) having the same IP address (192.168.32.8/24) configured statically. No fancy tools/...
user2984629's user avatar
1 vote
1 answer
333 views

Inherent flaw in stateless firewalls?

I am but a lowly (software) developer dabbling with setting up a network in AWS and am having trouble understanding the fundamentals of stateless firewalls, or Network ACLs as they're also referred to ...
parmsib's user avatar
  • 13
2 votes
1 answer
100 views

Which ranges of IPv6 and IPv4 do requests to the local network and the host?

I'm looking for the range of IP address that is bound to the local network or the host itself. So far for IPv4 I found: 10.0.0.0 - 10.255.255.255 172.16.0.0 - 172.31.255.255 192.168.0.0 - 192.168.255....
Jimmy's user avatar
  • 23
1 vote
1 answer
92 views

Does a Transparent Firewall need a Default gateway if directly connected to a layer 3 device that is actively performing routing?

Good folks of the Network Engineering stack! I have a question that I assume most people could answer in their sleep. To better illustrate my question, I've provided a sketch of my network below. In ...
Jason's user avatar
  • 13
0 votes
1 answer
88 views

Gateway with multiple VLAN IPs on one NIC [closed]

I would like to separate several hosts from the local network and put them behind a firewall. I would like to use VLANs to "physically" separate them instead of using just different subnets. ...
user236012's user avatar
1 vote
0 answers
63 views

Pros and cons of directly interconnecting routers and firewalls vs via switch in an enterprise-network? [closed]

In a medium-sized enterprise network, let's say you have a pair of datacenter switches, a pair of distribution switches, a pair of internal core routers, a pair of firewalls, and a pair of edge ...
Steve Osmond's user avatar
3 votes
1 answer
418 views

Juniper SRX 340 route lookup failed

I've a strange issue on my Juniper; I've a policy to allow all traffic to a specific address behind it and, in effect, the policy works correctly. All the traffic I send reach the destination, except ...
Gianluca's user avatar
  • 371
1 vote
1 answer
802 views

Turning Off SPC card on Juniper SRX5800 series Firewall

We are running SRX5800 in a cluster. Each Node has FPCs as well as SPCs installed. Due to some maintenance downtime , we were required to power off FPCs as well as SPCs on a backup node , not in a ...
Nabeel's user avatar
  • 1,130
1 vote
0 answers
882 views

SOLVED: Check Point firewall log format through syslog [closed]

I receive logs from a series of Check Point firewalls that I don't manage and they are very thorough, containing every possible information about the communication. They're also formatted like field:&...
mfloris's user avatar
  • 195
-1 votes
1 answer
63 views

Holding session option in Fortiweb

I have Frotiweb installed as my WAF and it is connected to FrotiSandbox for behavioral detection. In the WAF' File Security Policy, I have the "Hold Session While Scanning" turned off and &...
Dan's user avatar
  • 1
1 vote
1 answer
471 views

NAT in ASA (5505) Firewall is not working for VLANs configured in Layer3 Switch?

Toplogy: Tool Used: Cisco Packet Tracer Scenario: NAT for hosts in any of the VLANs of Layer3-Switch not working. Ping requests reaches outside server, but NAT is not working so ISP Router can't ...
Rajan's user avatar
  • 121
0 votes
1 answer
2k views

How to configure NAT in Cisco ASA Firewall for all VLANs connected to layer 3 switch? [closed]

Topology: How to set up NAT in Cisco ASA Firewall (in Packet Tracer), when there are VLANs in the network? In the current approach, NAT is not working to reach the server (8.8.8.8) from any of the ...
Rajan's user avatar
  • 121
1 vote
1 answer
176 views

Configure AAA on a router - Extended ACLs

How do I write a named extended ACL which will allow for traffic between a DNS from a LAN (IP address) to a DNS server at (IP address), ping from a host PC (IP address) to any destination and allow ...
maggiejmyers1973's user avatar

1
2 3 4 5
12