Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

0
votes
0answers
6 views

Computer in local network not seen by the firewall [on hold]

I'm in charge of a local network. We have a server at 192.168.1.4 and a firewall at 192.168.1.1. The problem is that I can't access a computer(192.168.1.18) within my local network from the firewall, ...
0
votes
0answers
21 views

Could not open two websites with Sonicwall [on hold]

Hello everyone We installed a new sonic firewall after installing we are now unable to access two websites one is www.complyworks.com.Lan port is connected to the unmanaged switch and all other pc are ...
1
vote
0answers
14 views

Why is static route being blocked by firewall? [on hold]

I've been trying to get router to send specific traffic over to my server to go through an OpenVPN connection. The OpenVPN connection is working fine; and I can use the server as a gateway with no ...
-2
votes
0answers
24 views

Accessing OpenVPN server from client on a home network [on hold]

I'm trying to access the OpenVPN server at my job from home. If I connect my home laptop to the wifi hotspot on my Huawei P20 Pro, it works fine. However, when I try the same on my home wifi, the ...
0
votes
0answers
8 views

How to connect alexa app to firewall protected network? [closed]

How to connect your Alexa app with firewall protected network
0
votes
0answers
12 views

any particular vlan setup with pfSense VM as main NAT gateway for a vm cluster? [closed]

I'd like to use a highly available pfsense virtual appliance in a proxmox KVM cluster as the main gateway to a blade cluster of 4x nodes each with 2 NICs. The WAN will be allocated a /29 with 5 usable ...
1
vote
0answers
43 views

Cisco ISR Zone Based Firewall dual stack not matching returning traffic for ipv6

I have a bit of a problem with my Cisco 1921 ISR config. I have ipv4 (obviously) and also native ipv6 connectivity in my home lab. I am trying to set up the zone based firewall. With ipv4 traffic, the ...
0
votes
1answer
40 views

Access to a server behind the SonicWall from the LAN using Public IP addresses

We have a SonicWall TZ 400 with a Comcast Modem in Bridge Mode. Everything works fine, except the fact that the exposed services on the LAN couldn´t be reached using the public IP of the WAN from the ...
0
votes
0answers
35 views

Migrate from Zyxel Firewall to Next-Gen Firewall

we have a ZyWall 1100 in our office, managing all our Zyxel access points and functions as a router. We now decided to swap to a Sonicwall NSA 4650. To do so, we configured the SonicWall 1:1 like the ...
0
votes
0answers
46 views

Flow is Denied by Configured Rule on Cisco asa 5520

Recently I upgraded my firewall hardware from an ASA 5505 to an ASA 5520. Since I am a small startup company on a tight budget, I have purchased a used firewall. Unfortunately, the firewall runs on ...
2
votes
2answers
24 views

Wireguard protocol understanding source of the received packet

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
2
votes
1answer
45 views

Wireguard protocol understanding where the packet got sent

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
1
vote
2answers
31 views

AWS site-to-site VPN and multiple account VPC connections

I've configured a site-to-site VPN from our firewall (watchguard) to AWS. Now, how can I connect Account A with Account B? I've already an OpenVPN server in account A to which account B connects (...
4
votes
0answers
90 views

ASA5515 - QM FSM error / failed to establish L2L SA when transferring large files

I was hoping someone could help me with a problem I’m having - a little clarification or advice would be much appreciated: The Issue: I have set a new backup server and I want to back up data from ...
2
votes
2answers
469 views

How many pps (64Byte each) i can receive in 1Gbps throughput modem / firewall

I need help with this: If i have 1Gb/s throughput. I can receive how many pps in 64Byte each packet / s? Let's say I can send (Packet / Second - 64Byte) 450,000, meaning I would not only have 230.4 ...
1
vote
1answer
90 views

Urgent: how to configure different interface using same ip subnet in asa 5506?

Scenario is in old asa firewall 5505 I have switch port access vlan command in different interface. Just like below: interface Ethernet0/0 ! interface Ethernet0/1 switchport access vlan 2 ! ...
3
votes
3answers
128 views

Cisco ASA logging to remote syslog question

I have Cisco ASA and i have setup graylog logging server and i am seeing no logs coming on remote syslog so this is what i did.. Current config: asa-fw1-010101-2-7/pri/act(config)# show run logging ...
0
votes
1answer
57 views

In one organization having two ISP which configured on fortigate firewall ? How can we do the failover for internet?

Organisation don't have AS number .As of now we are doing manually route for any ISP at a time. when default Internet link is go down that time making second link enable on firewall. I saw the some ...
1
vote
2answers
35 views

My ip address changes daily. How can I setup port filtering so that I can access my VM via RDP without adding the new ip everyday?

So I have a VM in Azure. I would like to ensure that only I can access it. I setup port filtering so that only my IP is accepted, and only from port 3389. The next day my IP changed, but only the ...
3
votes
1answer
69 views

Need help/advice on basic network setup involving security cameras, guest access, and VLANs

At some point, I'd like to move from a single, flat, network to having a more secure network using VLANs. I have an idea of what I would want, I just don't fully understand some details of Native ...
3
votes
1answer
98 views

Spine Leaf L3 TOR DMZ Design for Virtual Environments

I have a question regarding DMZ design in our DC. Let me give you some background. We have 1 rack 2 Spines 2 leafs L3 TOR connected to each spine ESXI hosts connected to the leafs 1 Palo ALto ...
1
vote
2answers
48 views

ASA5520 to 2960X setup

I am setting up a new remote office setup with an ASA5520 to a Cisco 2960X switch. I subinterfaced the the ASA inside to allow the Wired and Wireless subnets. On the 2960 I created a Vlan 100 for the ...
1
vote
1answer
121 views

Firewall on a stick for Intranet and static routing

I have a question about possible problems that can occur with this network design. If I have an intranet with a firewall on a stick design, multiple switches with layer 2+, is this setup fine? or ...
1
vote
1answer
39 views

Cisco anyconnect 4.6 client disable some security feature

Last 3 year we are using cisco anyconnect with client version 4.5 and everything is good but recently i have install client 4.6 which has tons of additional feature which i am not interested and want ...
6
votes
1answer
111 views

Can a Firewall be deployed on a L2 device defined Network?

I have just started my new job as a network engineer and have come across an unusual request I have an L2 network defined, the LAN is behind a Layer 2 switch, which is then connected to the WAN/MPLS ...
2
votes
1answer
63 views

Opening Port 3283 in Cyberoam Firewall to allow Apple Remote Desktop

I am fairly new to networking. I would like to open port 3282 in Cyberoam firewall to allow Apple remote desktop. Is the source port and destination port the same? How do I create a firewall rule ...
2
votes
1answer
456 views

Just can't get ASDM to run

I've spent two weekends googling and trying every suggestion I can find, but still, when I try to connect to my ASA, the launcher accepts my credentials, the "updating software" bar goes to 20%, and ...
2
votes
1answer
97 views

Missing crypto options on Cisco 5540 firewall?

ASA 5540 VPN Premium license. Version 9.1(7) asa01(config)# crypto key generate rsa label sslvpnkey ^ ...
1
vote
0answers
41 views

What could block two simultaneous connections on one device to the same IP/port? [closed]

My company develops and sells a system where one or more client devices are deployed in the customer's network, and they establish two websocket (TCP) connections on port 443 to the cloud server. ...
0
votes
1answer
30 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
0
votes
1answer
39 views

Fortinet configuration translation [closed]

We have a small case of security breach in one of our sites, we have a contractor that is suppose to stay out of our firewall Fortinet, today i noticed these two paragraphs that look fishy. My site ...
0
votes
1answer
42 views

Access an ASA via MGMT port

I'm working on an ASA 5520. I have given the MGMT port an IP address, I can ping it ... I have given it the name REMOTE nameif REMOTE and access level 100 ... Then I allowed HTTP server http ...
1
vote
1answer
83 views

Can't ping from firewall to Hosts and from Hosts to firewall and host to host

I have a network which consists of several networks. A Firewall is inside this Network and monitor and controle the traffic between the First Network and the Second Network. In my First Network are 3 ...
1
vote
1answer
31 views

TZ205W DNS Issue

I have a firewall that is setup but need to have all users inside the network to use a preset dns server. While I know that I can set up this in the DHCP it does not stop a user from changing it in ...
2
votes
1answer
57 views

Firewall Rule 'Both Ways'

I'd like to think I have a good understanding of NAT and Firewall rules at a basic level, though please correct me if I'm wrong at any point. I've seen many products list their firewall requirements ...
1
vote
1answer
52 views

How TCP and firewall handle security?

I'm a newbie in networking, still don't quite understand about security. Let's say a person A uses TCP to establish a TCP connection with a server. And there is a hacker B who is sniffing, so B ...
1
vote
1answer
67 views

Pass traffic from remote access to site to site tunnel

I have situation where remote access ipsec client have to connect to ASA firewall to send and receive traffic using site to site tunnel on the same ASA, in the logs I am seeing packets dropped as it ...
1
vote
0answers
102 views

Cisco ASA 5512 one download blocks all others until download finishes [closed]

My company has a 50 Mbps Down/Up connection. I just migrated from a PIX 515E to an ASA 5512. Previously, one user could download a large file from the internet and block all other users from accessing ...
0
votes
1answer
36 views

How to install firewall under a router [closed]

Recently purchased Sophos Xg 125 firewall, previously am using Cisco Rv325 router with 4 Vlan, My question about for configuration is that 1.how to configure my firewall under this router because ...
0
votes
1answer
35 views

How to do remote testing of firewall rules that are location based

I have managed servers that I have access to. I requested firewall rules that are location based (like making sure nobody can SSH to a server unless they are connecting from a specific public IP. I'd ...
1
vote
1answer
43 views

Change firewall rules of a Cisco Router from network

I'm looking for ways, methods or workarounds to: Change firewall rules (WAN/LAN accept-deny) of a Router from networking, through Linux command or PHP script, can be a socket, or rest service, soap ...
1
vote
1answer
43 views

How does a firewall receiving an image file approve it?

I was recently told that a Firewall configuration for the WatchGuard device does not allow the user to login and alter the configurations. Instead, you send an encrypted image file containing the ...
7
votes
1answer
162 views

Is a FIN only packet legal?

It would be convenient to mark TCP packets with just the FIN flag set, as an intrusion (without tracking the reply). I have always assumed that a FIN without an ACK, while rude and rare, is legal, ...
1
vote
1answer
62 views

How can I use a firewall as Internet Breakout?

I am currently installing a firewall in my company (using OPNsense) but I was asked to use the same system as "Internet Breakout" as well. Does anyone know how to accomplish this? I understand that ...
1
vote
1answer
33 views

Separate network for test systems

I often read that you should put customer machines into a separate (testing) network like a DMZ. Is a layer 3 device (switch/router + firewall) a good option for this? Since some ports need to be ...
1
vote
1answer
1k views

How to block Whatpsapp, Imo, Viber etc from Router? [closed]

I want to block whatspp, viber or other chat apps as such. I have microtik router with RouterOS in it. But how would I block Viber or whatsapp? If I am to block domain, what's their domain though? If ...
2
votes
2answers
909 views

Does each VLAN need a dedicated uplink port?

I am designing a network consisting of close 60 ports, via a managed switch. I intend to deploy multiple VLANs: one for servers, one for desktops, one for guests, etc. I intend to use the firewall ...
1
vote
1answer
29 views

Why specify additional NAT rule

In watchguard's guide for NAT loopback when describing the additional nat rules required, they show this image: Why are those top two NAT rules necessary, ie aren't they already covered by the next ...
1
vote
1answer
210 views

IP is getting through from firewall although it was in Banned List

I am facing wearied scenario. We are having a SIP gateway in DMZ, yesterday I have observed malicious traffic hitting SIP gateway from the 212.x.x.209 IP. I immediately Banned this IP in firewall so ...
1
vote
0answers
23 views

Where can i find literature on how Firewall logs are generated? [closed]

How are firewall logs generated, I want to know how frequently (or how infrequently ) are logs generated from reading packet data if that is what it is. I want to detect anomaly on an enterprise ...