Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

0
votes
0answers
11 views

Best settings for home network router [on hold]

what should I keep enabled and what should I disable for best performance. Now Im losing packets very often. Internet provider told me there is no problem on their side.. :/
0
votes
0answers
6 views

Mobile router with firewall or website blocking options [closed]

Looking for a mobile/WiFi router that can block access to certain IPs or websites. Any suggestions?
0
votes
0answers
13 views

Allow outside access to program while firewall is on [closed]

I have a pc that has a system that somehow I wanted to launch on the internet. To do this, I added a public ip to the pc. Then in my hosting, I adjusted the subdomain to reflect the IP Address of the ...
0
votes
0answers
18 views

How to do IP masquerading on MacOS (10.14+)? [closed]

I am looking for the equivalent Macos command to the linux: sudo iptables -t nat -A POSTROUTING -o en0 -j MASQUERADE The reason i want to do this is I have a VPN that has the default route, but i ...
0
votes
1answer
48 views

What can I use to block all the ports of the WAN in a Cisco router?

I have set up my small network using Cisco ISR C1111-8p and a Cisco Wireless AP C1832i. What can I use to block all the ports of the WAN? Is there any security advantage blocking them rather than ...
1
vote
2answers
73 views

Palo Alto monitor bandwidth usage using SNMP

I'm trying to monitor bandwidth usage on my Palo Alto firewall using SNMP. However only the ifInOctets & ifOutOctets counters of VLAN interfaces are updated. The counters for real interfaces are ...
0
votes
1answer
34 views

Access Localhost (Ubuntu -VM) from Windows [closed]

I use Ubuntu in my virtual machine and start from there my code projects. These project when active can be run under localhost:3000. Now when i execute in Ubuntu ifconfig I get following result: If ...
4
votes
2answers
120 views

Cisco ASA 5585X Internal-Data0/1 interface errors

I have noticed on Cisco ASA 5585 (SSP-20) interface error counter going up specially overrun but so far we haven't seen any production impact or issue, error rate is low so its not noticable but would ...
3
votes
2answers
69 views

Stop Memcrashed amplification DDoS attack

DDoS is essential part of my life so i am back with more question, Yes we started getting memcache based UDP amplification attacks, all source ports are 11211 coming from many random source IPs, we ...
1
vote
2answers
46 views

How does pfSense control network traffic when plugged into a switch?

I apologize for this n00b question, but I'm trying to learn networking to help at a non-profit where the old IT guy is no longer there. They have several Cisco switches and one pfSense instance that ...
4
votes
2answers
222 views

Is a TCP segment with FIN but not ACK ever encountered today?

A fin-scan involves sending a TCP segment with FIN and no other flags other than (possibly) PSH and/or URG. Are such packets ever legitimately encountered in 2019? Note that in Is a FIN only segment ...
2
votes
1answer
41 views

Cisco ASA 5505- My subnet mask is different from Show Route

While I was troubleshooting a DNS issue on my 10.10.10.0/30 subnet, I noticed the Local (L) and Connected (C) has different values. I configured the 10.10.10.0 network to use 255.255.255.252 has the ...
2
votes
0answers
40 views

TCAM utilization on Nexus 9396 switches

I have Cisco Nexus 9396 switch which is running L3 mode and i have configured bunch of IPv4 access-list in Ingress for firewalling to block certain traffic. I am reading about TCAM and wanted to ...
0
votes
1answer
38 views

How are a firewall and DMZ positioned in a network?

How are a firewall and DMZ positioned in a network? From Computer Network by Tanenbaum What is the device (let me call it "A") between the DMZ and the internet? Is it the main router of the LAN for ...
1
vote
1answer
68 views

Firewall and VPN configuration?

I've been reading a lot of different Q&As on here and other forums about firewall positioning in relation to the DMZ and the appropriate place to put a VPN server. I've made the following logical ...
1
vote
2answers
52 views

Unable to access Server over VPN behind 2 Fortigate Firewalls; however ping is working

Client -> VPN -> FG1 -> FG2 -> Server Created a VPN tunnel with remote IP 10.20.30.4/32 and local ip 10.20.30.40/32 on FG1, NAT/VIP is established with VIP as 10.20.30.40 and server IP as 192.168.2.6 ...
0
votes
0answers
23 views

Huawei USG6000 Firewall Captive portal

I don't know if I'm asking this in right place. I am working on a Huawei USG6000 device to make a hotspot solution (External Captive portal), this is the schema of my working: WAN IP :10.10.0.7 ...
0
votes
1answer
33 views

What is the reason for encrypting Identity field under IPsec phase1?

Why Identity fields are encrypted in IPsec phase 1 around packet 5/6 ? provided that the Identity field contains IP of either end. Does it has any significance ? Does it holds anything different then ...
1
vote
0answers
99 views

DNS not resolving through VPN

Looking for some help with our Office's VPN that I can't seem to solve... I am trying to remote desktop to the Work PC from Home PC via the DC ASA 5506-x VPN. I can only connect to the Work PC with ...
0
votes
0answers
53 views

ASA - communication between 2 tunnels

I have two IPSEC tunnels with an ASA in the middle Site A - 10.20.4.0 /24 (65.176.80.84) Site B - 192.168.142.0 /24 ASA - 10.99.206.0 /24 (95.12.22.33 Site A - 10.20.4.0 /24 can reach the ASA and ...
2
votes
1answer
64 views

Cannot Ping Firewall After Changing SFP

I am currently working on an issue that has me stumped... I have a network 172.16.144.0/20 which is connected to our fortigate 300D firewall via an Cisco 3850 external switch. Due to hardware ...
0
votes
1answer
63 views

Measurable performance impact of port mirroring on a firewall\security device?

I am setting up a network monitoring device which recommends that I create a mirror interface on my firewall/security appliance and send all packets to the monitor for sniffing, logging, and ...
1
vote
0answers
18 views

Why is static route being blocked by firewall? [closed]

I've been trying to get router to send specific traffic over to my server to go through an OpenVPN connection. The OpenVPN connection is working fine; and I can use the server as a gateway with no ...
1
vote
0answers
71 views

Cisco ISR Zone Based Firewall dual stack not matching returning traffic for ipv6

I have a bit of a problem with my Cisco 1921 ISR config. I have ipv4 (obviously) and also native ipv6 connectivity in my home lab. I am trying to set up the zone based firewall. With ipv4 traffic, the ...
0
votes
1answer
165 views

Access to a server behind the SonicWall from the LAN using Public IP addresses

We have a SonicWall TZ 400 with a Comcast Modem in Bridge Mode. Everything works fine, except the fact that the exposed services on the LAN couldn´t be reached using the public IP of the WAN from the ...
2
votes
2answers
48 views

Wireguard protocol understanding source of the received packet

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
2
votes
1answer
63 views

Wireguard protocol understanding where the packet got sent

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
1
vote
2answers
64 views

AWS site-to-site VPN and multiple account VPC connections

I've configured a site-to-site VPN from our firewall (watchguard) to AWS. Now, how can I connect Account A with Account B? I've already an OpenVPN server in account A to which account B connects (...
5
votes
0answers
224 views

ASA5515 - QM FSM error / failed to establish L2L SA when transferring large files

I was hoping someone could help me with a problem I’m having - a little clarification or advice would be much appreciated: The Issue: I have set a new backup server and I want to back up data from ...
3
votes
2answers
536 views

How many pps (64Byte each) i can receive in 1Gbps throughput modem / firewall

I need help with this: If i have 1Gb/s throughput. I can receive how many pps in 64Byte each packet / s? Let's say I can send (Packet / Second - 64Byte) 450,000, meaning I would not only have 230.4 ...
2
votes
1answer
210 views

Urgent: how to configure different interface using same ip subnet in asa 5506?

Scenario is in old asa firewall 5505 I have switch port access vlan command in different interface. Just like below: interface Ethernet0/0 ! interface Ethernet0/1 switchport access vlan 2 ! ...
3
votes
3answers
352 views

Cisco ASA logging to remote syslog question

I have Cisco ASA and i have setup graylog logging server and i am seeing no logs coming on remote syslog so this is what i did.. Current config: asa-fw1-010101-2-7/pri/act(config)# show run logging ...
0
votes
1answer
124 views

In one organization having two ISP which configured on fortigate firewall ? How can we do the failover for internet?

Organisation don't have AS number .As of now we are doing manually route for any ISP at a time. when default Internet link is go down that time making second link enable on firewall. I saw the some ...
1
vote
2answers
38 views

My ip address changes daily. How can I setup port filtering so that I can access my VM via RDP without adding the new ip everyday?

So I have a VM in Azure. I would like to ensure that only I can access it. I setup port filtering so that only my IP is accepted, and only from port 3389. The next day my IP changed, but only the ...
3
votes
1answer
101 views

Need help/advice on basic network setup involving security cameras, guest access, and VLANs

At some point, I'd like to move from a single, flat, network to having a more secure network using VLANs. I have an idea of what I would want, I just don't fully understand some details of Native ...
3
votes
1answer
163 views

Spine Leaf L3 TOR DMZ Design for Virtual Environments

I have a question regarding DMZ design in our DC. Let me give you some background. We have 1 rack 2 Spines 2 leafs L3 TOR connected to each spine ESXI hosts connected to the leafs 1 Palo ALto ...
1
vote
2answers
70 views

ASA5520 to 2960X setup

I am setting up a new remote office setup with an ASA5520 to a Cisco 2960X switch. I subinterfaced the the ASA inside to allow the Wired and Wireless subnets. On the 2960 I created a Vlan 100 for the ...
1
vote
1answer
250 views

Firewall on a stick for Intranet and static routing

I have a question about possible problems that can occur with this network design. If I have an intranet with a firewall on a stick design, multiple switches with layer 2+, is this setup fine? or ...
1
vote
1answer
59 views

Cisco anyconnect 4.6 client disable some security feature

Last 3 year we are using cisco anyconnect with client version 4.5 and everything is good but recently i have install client 4.6 which has tons of additional feature which i am not interested and want ...
6
votes
1answer
119 views

Can a Firewall be deployed on a L2 device defined Network?

I have just started my new job as a network engineer and have come across an unusual request I have an L2 network defined, the LAN is behind a Layer 2 switch, which is then connected to the WAN/MPLS ...
2
votes
1answer
102 views

Opening Port 3283 in Cyberoam Firewall to allow Apple Remote Desktop

I am fairly new to networking. I would like to open port 3282 in Cyberoam firewall to allow Apple remote desktop. Is the source port and destination port the same? How do I create a firewall rule ...
2
votes
1answer
1k views

Just can't get ASDM to run

I've spent two weekends googling and trying every suggestion I can find, but still, when I try to connect to my ASA, the launcher accepts my credentials, the "updating software" bar goes to 20%, and ...
2
votes
1answer
124 views

Missing crypto options on Cisco 5540 firewall?

ASA 5540 VPN Premium license. Version 9.1(7) asa01(config)# crypto key generate rsa label sslvpnkey ^ ...
1
vote
0answers
45 views

What could block two simultaneous connections on one device to the same IP/port? [closed]

My company develops and sells a system where one or more client devices are deployed in the customer's network, and they establish two websocket (TCP) connections on port 443 to the cloud server. ...
0
votes
1answer
34 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
0
votes
1answer
40 views

Fortinet configuration translation [closed]

We have a small case of security breach in one of our sites, we have a contractor that is suppose to stay out of our firewall Fortinet, today i noticed these two paragraphs that look fishy. My site ...
0
votes
1answer
42 views

Access an ASA via MGMT port

I'm working on an ASA 5520. I have given the MGMT port an IP address, I can ping it ... I have given it the name REMOTE nameif REMOTE and access level 100 ... Then I allowed HTTP server http ...
1
vote
1answer
132 views

Can't ping from firewall to Hosts and from Hosts to firewall and host to host

I have a network which consists of several networks. A Firewall is inside this Network and monitor and controle the traffic between the First Network and the Second Network. In my First Network are 3 ...
1
vote
1answer
32 views

TZ205W DNS Issue

I have a firewall that is setup but need to have all users inside the network to use a preset dns server. While I know that I can set up this in the DHCP it does not stop a user from changing it in ...
2
votes
1answer
67 views

Firewall Rule 'Both Ways'

I'd like to think I have a good understanding of NAT and Firewall rules at a basic level, though please correct me if I'm wrong at any point. I've seen many products list their firewall requirements ...