Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

0
votes
1answer
30 views

Access Localhost (Ubuntu -VM) from Windows [closed]

I use Ubuntu in my virtual machine and start from there my code projects. These project when active can be run under localhost:3000. Now when i execute in Ubuntu ifconfig I get following result: If ...
4
votes
2answers
86 views

Cisco ASA 5585X Internal-Data0/1 interface errors

I have noticed on Cisco ASA 5585 (SSP-20) interface error counter going up specially overrun but so far we haven't seen any production impact or issue, error rate is low so its not noticable but would ...
4
votes
2answers
66 views

Stop Memcrashed amplification DDoS attack

DDoS is essential part of my life so i am back with more question, Yes we started getting memcache based UDP amplification attacks, all source ports are 11211 coming from many random source IPs, we ...
0
votes
2answers
40 views

How does pfSense control network traffic when plugged into a switch?

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
3
votes
0answers
127 views
+100

Is a TCP segment with FIN but not ACK ever encountered today?

A fin-scan involves sending a TCP segment with FIN and no other flags other than (possibly) PSH and/or URG. Are such packets ever legitimately encountered in 2019? Note that in Is a FIN only segment ...
1
vote
1answer
37 views

Cisco ASA 5505- My subnet mask is different from Show Route

While I was troubleshooting a DNS issue on my 10.10.10.0/30 subnet, I noticed the Local (L) and Connected (C) has different values. I configured the 10.10.10.0 network to use 255.255.255.252 has the ...
2
votes
0answers
27 views

TCAM utilization on Nexus 9396 switches

I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic. I am reading about TCAM and wanted to ...
0
votes
1answer
34 views

How are a firewall and DMZ positioned in a network?

How are a firewall and DMZ positioned in a network? From Computer Network by Tanenbaum What is the device (let me call it "A") between the DMZ and the internet? Is it the main router of the LAN for ...
1
vote
1answer
63 views

Firewall and VPN configuration?

I've been reading a lot of different Q&As on here and other forums about firewall positioning in relation to the DMZ and the appropriate place to put a VPN server. I've made the following logical ...
1
vote
2answers
42 views

Unable to access Server over VPN behind 2 Fortigate Firewalls; however ping is working

Client -> VPN -> FG1 -> FG2 -> Server Created a VPN tunnel with remote IP 10.20.30.4/32 and local ip 10.20.30.40/32 on FG1, NAT/VIP is established with VIP as 10.20.30.40 and server IP as 192.168.2.6 ...
0
votes
0answers
22 views

Huawei USG6000 Firewall Captive portal

I don't know if I'm asking this in right place. I am working on a Huawei USG6000 device to make a hotspot solution (External Captive portal), this is the schema of my working: WAN IP :10.10.0.7 ...
0
votes
1answer
32 views

What is the reason for encrypting Identity field under IPsec phase1?

Why Identity fields are encrypted in IPsec phase 1 around packet 5/6 ? provided that the Identity field contains IP of either end. Does it has any significance ? Does it holds anything different then ...
1
vote
0answers
88 views

DNS not resolving through VPN

Looking for some help with our Office's VPN that I can't seem to solve... I am trying to remote desktop to the Work PC from Home PC via the DC ASA 5506-x VPN. I can only connect to the Work PC with ...
0
votes
0answers
52 views

ASA - communication between 2 tunnels

I have two IPSEC tunnels with an ASA in the middle Site A - 10.20.4.0 /24 (65.176.80.84) Site B - 192.168.142.0 /24 ASA - 10.99.206.0 /24 (95.12.22.33 Site A - 10.20.4.0 /24 can reach the ASA and ...
2
votes
1answer
57 views

Cannot Ping Firewall After Changing SFP

I am currently working on an issue that has me stumped... I have a network 172.16.144.0/20 which is connected to our fortigate 300D firewall via an Cisco 3850 external switch. Due to hardware ...
0
votes
1answer
52 views

Measurable performance impact of port mirroring on a firewall\security device?

I am setting up a network monitoring device which recommends that I create a mirror interface on my firewall/security appliance and send all packets to the monitor for sniffing, logging, and ...
1
vote
0answers
18 views

Why is static route being blocked by firewall? [closed]

I've been trying to get router to send specific traffic over to my server to go through an OpenVPN connection. The OpenVPN connection is working fine; and I can use the server as a gateway with no ...
1
vote
0answers
62 views

Cisco ISR Zone Based Firewall dual stack not matching returning traffic for ipv6

I have a bit of a problem with my Cisco 1921 ISR config. I have ipv4 (obviously) and also native ipv6 connectivity in my home lab. I am trying to set up the zone based firewall. With ipv4 traffic, the ...
0
votes
1answer
100 views

Access to a server behind the SonicWall from the LAN using Public IP addresses

We have a SonicWall TZ 400 with a Comcast Modem in Bridge Mode. Everything works fine, except the fact that the exposed services on the LAN couldn´t be reached using the public IP of the WAN from the ...
0
votes
0answers
39 views

Migrate from Zyxel Firewall to Next-Gen Firewall [closed]

we have a ZyWall 1100 in our office, managing all our Zyxel access points and functions as a router. We now decided to swap to a Sonicwall NSA 4650. To do so, we configured the SonicWall 1:1 like the ...
0
votes
0answers
74 views

Flow is Denied by Configured Rule on Cisco asa 5520

Recently I upgraded my firewall hardware from an ASA 5505 to an ASA 5520. Since I am a small startup company on a tight budget, I have purchased a used firewall. Unfortunately, the firewall runs on ...
2
votes
2answers
37 views

Wireguard protocol understanding source of the received packet

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
2
votes
1answer
57 views

Wireguard protocol understanding where the packet got sent

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
1
vote
2answers
50 views

AWS site-to-site VPN and multiple account VPC connections

I've configured a site-to-site VPN from our firewall (watchguard) to AWS. Now, how can I connect Account A with Account B? I've already an OpenVPN server in account A to which account B connects (...
5
votes
0answers
172 views

ASA5515 - QM FSM error / failed to establish L2L SA when transferring large files

I was hoping someone could help me with a problem I’m having - a little clarification or advice would be much appreciated: The Issue: I have set a new backup server and I want to back up data from ...
2
votes
2answers
508 views

How many pps (64Byte each) i can receive in 1Gbps throughput modem / firewall

I need help with this: If i have 1Gb/s throughput. I can receive how many pps in 64Byte each packet / s? Let's say I can send (Packet / Second - 64Byte) 450,000, meaning I would not only have 230.4 ...
1
vote
1answer
158 views

Urgent: how to configure different interface using same ip subnet in asa 5506?

Scenario is in old asa firewall 5505 I have switch port access vlan command in different interface. Just like below: interface Ethernet0/0 ! interface Ethernet0/1 switchport access vlan 2 ! ...
4
votes
3answers
261 views

Cisco ASA logging to remote syslog question

I have Cisco ASA and i have setup graylog logging server and i am seeing no logs coming on remote syslog so this is what i did.. Current config: asa-fw1-010101-2-7/pri/act(config)# show run logging ...
0
votes
1answer
105 views

In one organization having two ISP which configured on fortigate firewall ? How can we do the failover for internet?

Organisation don't have AS number .As of now we are doing manually route for any ISP at a time. when default Internet link is go down that time making second link enable on firewall. I saw the some ...
1
vote
2answers
38 views

My ip address changes daily. How can I setup port filtering so that I can access my VM via RDP without adding the new ip everyday?

So I have a VM in Azure. I would like to ensure that only I can access it. I setup port filtering so that only my IP is accepted, and only from port 3389. The next day my IP changed, but only the ...
3
votes
1answer
86 views

Need help/advice on basic network setup involving security cameras, guest access, and VLANs

At some point, I'd like to move from a single, flat, network to having a more secure network using VLANs. I have an idea of what I would want, I just don't fully understand some details of Native ...
3
votes
1answer
139 views

Spine Leaf L3 TOR DMZ Design for Virtual Environments

I have a question regarding DMZ design in our DC. Let me give you some background. We have 1 rack 2 Spines 2 leafs L3 TOR connected to each spine ESXI hosts connected to the leafs 1 Palo ALto ...
1
vote
2answers
63 views

ASA5520 to 2960X setup

I am setting up a new remote office setup with an ASA5520 to a Cisco 2960X switch. I subinterfaced the the ASA inside to allow the Wired and Wireless subnets. On the 2960 I created a Vlan 100 for the ...
1
vote
1answer
202 views

Firewall on a stick for Intranet and static routing

I have a question about possible problems that can occur with this network design. If I have an intranet with a firewall on a stick design, multiple switches with layer 2+, is this setup fine? or ...
1
vote
1answer
48 views

Cisco anyconnect 4.6 client disable some security feature

Last 3 year we are using cisco anyconnect with client version 4.5 and everything is good but recently i have install client 4.6 which has tons of additional feature which i am not interested and want ...
6
votes
1answer
117 views

Can a Firewall be deployed on a L2 device defined Network?

I have just started my new job as a network engineer and have come across an unusual request I have an L2 network defined, the LAN is behind a Layer 2 switch, which is then connected to the WAN/MPLS ...
2
votes
1answer
84 views

Opening Port 3283 in Cyberoam Firewall to allow Apple Remote Desktop

I am fairly new to networking. I would like to open port 3282 in Cyberoam firewall to allow Apple remote desktop. Is the source port and destination port the same? How do I create a firewall rule ...
2
votes
1answer
868 views

Just can't get ASDM to run

I've spent two weekends googling and trying every suggestion I can find, but still, when I try to connect to my ASA, the launcher accepts my credentials, the "updating software" bar goes to 20%, and ...
2
votes
1answer
117 views

Missing crypto options on Cisco 5540 firewall?

ASA 5540 VPN Premium license. Version 9.1(7) asa01(config)# crypto key generate rsa label sslvpnkey ^ ...
1
vote
0answers
43 views

What could block two simultaneous connections on one device to the same IP/port? [closed]

My company develops and sells a system where one or more client devices are deployed in the customer's network, and they establish two websocket (TCP) connections on port 443 to the cloud server. ...
0
votes
1answer
32 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
0
votes
1answer
40 views

Fortinet configuration translation [closed]

We have a small case of security breach in one of our sites, we have a contractor that is suppose to stay out of our firewall Fortinet, today i noticed these two paragraphs that look fishy. My site ...
0
votes
1answer
42 views

Access an ASA via MGMT port

I'm working on an ASA 5520. I have given the MGMT port an IP address, I can ping it ... I have given it the name REMOTE nameif REMOTE and access level 100 ... Then I allowed HTTP server http ...
1
vote
1answer
121 views

Can't ping from firewall to Hosts and from Hosts to firewall and host to host

I have a network which consists of several networks. A Firewall is inside this Network and monitor and controle the traffic between the First Network and the Second Network. In my First Network are 3 ...
1
vote
1answer
32 views

TZ205W DNS Issue

I have a firewall that is setup but need to have all users inside the network to use a preset dns server. While I know that I can set up this in the DHCP it does not stop a user from changing it in ...
2
votes
1answer
66 views

Firewall Rule 'Both Ways'

I'd like to think I have a good understanding of NAT and Firewall rules at a basic level, though please correct me if I'm wrong at any point. I've seen many products list their firewall requirements ...
1
vote
1answer
57 views

How TCP and firewall handle security?

I'm a newbie in networking, still don't quite understand about security. Let's say a person A uses TCP to establish a TCP connection with a server. And there is a hacker B who is sniffing, so B ...
2
votes
1answer
91 views

Pass traffic from remote access to site to site tunnel

I have situation where remote access ipsec client have to connect to ASA firewall to send and receive traffic using site to site tunnel on the same ASA, in the logs I am seeing packets dropped as it ...
1
vote
0answers
122 views

Cisco ASA 5512 one download blocks all others until download finishes [closed]

My company has a 50 Mbps Down/Up connection. I just migrated from a PIX 515E to an ASA 5512. Previously, one user could download a large file from the internet and block all other users from accessing ...
0
votes
1answer
36 views

How to install firewall under a router [closed]

Recently purchased Sophos Xg 125 firewall, previously am using Cisco Rv325 router with 4 Vlan, My question about for configuration is that 1.how to configure my firewall under this router because ...