Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

Filter by
Sorted by
Tagged with
0
votes
2answers
14 views

How to find the client's application port during communication [closed]

After reading firewall rules about inbound and outbount I have some questions and the most sources focus on the server's ports. What happens to the client side when is trying to make a connection to ...
1
vote
0answers
21 views

How to redistribute BGP routes learned from AWS in one VR into another BGP running in another VR in Palo Alto firewall?

I have about 1000+ prefixes I am learning from AWS on Palo Alto through a BGP. This is on the secondary VR. Main VR is where my core routing is situated along with another BGP instance pointing to ...
0
votes
0answers
17 views

What packets coming in on WAN is allowing IPv6 to work? [closed]

I am using pfSense 2.4.5 and have native IPv6 from Comcast. By default pfSense enables DHCPv6 for LAN IPv6 address configuration, but I am attempting to have my network use only SLAAC. To do this I ...
0
votes
2answers
42 views

Are perimeter firewalls and internal firewall different appliances? [closed]

I'm not a networking person but am being required to integrate some of my devices into a larger enterprise network. I'm trying to understand firewall lingo, and I'm starting to realize that firewall ...
2
votes
3answers
288 views

What is the difference between an ASA firewall and UTM firewall?

How do ASA firewalls and UTM perimeter firewalls differ?
0
votes
4answers
80 views

How common it is to see unknown IPs in logs?

I have a server that streams video to YouTube/Twitch. I see [UFW BLOCK] entries in logs. One IP is 220.133.236.166, the other is 194.26.25.8. Is it a common thing that a server is connecting to my ...
0
votes
1answer
15 views

answer packages rejected between mangle/prerouting and nat/prerouting

I am currently configuring a ubiquity edgerouter for our network. We have one uplink port (eth2) and two internal ports (eth0; with vlan 1) and eth3 (with vlans 2,3 and 4). uplink and vlan 1 have ...
0
votes
1answer
20 views

Cisco NAT - Overload PAT and Static nat from one inside to two outside interfaces

i have following setup Cisco ISR4k Router with one inside LAN interface and two outside Interfaces. ---- WAN1 (NAT outside) LAN (NAT inside) -- ISR4k | ...
1
vote
2answers
19 views

Understanding IPV4 address range [duplicate]

I do have basic understanding of IP Address which is unique address for each System either in an organization or over the internet. But i want to understand what is IP address range Lets Say we have ...
0
votes
0answers
18 views

Cisco CML 2.0 strange ASA trunking issue

I am seeing very strange issue and now i am losing my mind so thought ask you folk. I have following two components connected point to point on Cisco CML 2.0 [nxos-9000v]--------------------[ASAv] ...
1
vote
3answers
107 views

Cisco SG-350 Switch and Fortigate Firewall Configuration

I'm not what you would call a Network Engineer, but right now i have a (somewhat) complex network problem that i have to solve. I must configure a SG-35028p cisco switch and a fortigate 60f firewall ...
0
votes
0answers
22 views

How much additional processing time is needed for a combination DMZ configuration?

Please consider the DMZ configuration shown below. (Image source: Testing Web Security: Assessing the Security of Web Sites and Applications by Steven Splaine) And then let us consider the following (...
0
votes
1answer
22 views

Public IP address does not work in internal network [closed]

I have configured port forwarding to my system from the router configuration menu, when I try to access the public IP address in the internal network it does not respond but it is accessible outside ...
0
votes
0answers
98 views

How to forward port 80 and 443 on pfSense to a (internal) nginx webserver?

Yesterday we did a "big bang" firewall switch in our company. Our new firewall is a pfSense server. Lets say our external ip is 84.1.1.1, pfSense is 192.168.1.1 and our web server ip is 192.168.1.2. ...
0
votes
0answers
33 views

How Does a Firewall (pfSense) Check Packets Against Rules

For packet rule testing, legacy 5 tuple based techniques employ decision tree, decomposition or hardware (usually TCAM) based approaches. What specific technique do pfSense firewalls employ to test ...
0
votes
0answers
33 views

NTP Sync issues between Palo Alto 3260 and Juniper MX10003

I'm using a Microsemi S650 as the primary ntp server and a Juniper MX10003 as the secondary ntp server. I have the palo alto 3260 configured as follows: [edit deviceconfig system ntp-servers] ...
0
votes
4answers
108 views

Firewall placement

Most diagrams I come across are as follows: ISP > router > firewall However, wouldn't you want a firewall before the router to protect the router? E.g ISP > firewall > router
1
vote
0answers
86 views

Why can't i reach devices in the other network?

I have 2 networks and want to connect them with each other. It should be possible that all devices in network A can communicate with devices on network B and other way round. 1 network is "managed" by ...
0
votes
2answers
66 views

Why cant i reach the other network while i have added the routes and firewall rules to allow traffic? (Pfsense/USG200)

I have 2 networks, the current one and the new one. The current one is not configured by me and one big mess and contains heavily out dated hardware (especially servers). I want to be able to access ...
1
vote
1answer
94 views

Cisco anyconnect VPN router specific public IP via tunnel

I have fully functional cisco Anyconnect VPN running on Cisco ASA5585-X and today i got requirement that there are some remote public sites we need to whitelist our VPN public IP to access them over ...
1
vote
0answers
32 views

How can one detect TLS inspection as a user with an enterprise managed device? [closed]

Let's assume Alice is an employee of the Company Chuck. Alice likes to communicate with Bob, a server somewhere in the internet. Chuck being a security orientated company, inspects all TLS connections ...
1
vote
1answer
45 views

VLAN Subinterface Removal - CISCO ASA

The below are the configuration of the subinterfaces in Cisco ASA firewall and currently sub-interface 0/1.1 is only passing traffic and I need to remove 0/1.2 configuration from here as it is unused. ...
1
vote
2answers
84 views

Palo-Alto Interconnection

I am a novice with PaloAlto networks. For testing purposes, I have connected two PA-220 with each other. I configured the IP addresses from the same subnet. For me, like routers, these devices should ...
0
votes
0answers
31 views

Locating where an IP address lives

Without documentation or using console how can I locate a particular IP within my network? Specific issue is I have public IP sitting on a device at a datacenter. The IP address appears to be going ...
1
vote
1answer
30 views

NSA 2650 - traffic capped [closed]

I have an NSA 2650, firmware v 6.5.4.5-53n. Running only a few of the security services including content filter, gateway AV, IP, RBL filter, GEO-IP, and botnet filter (no DPI-SSL!). I'm trying to ...
1
vote
1answer
212 views

How to route traffic via firewall in EVPN + VxLAN

This is what i am trying to design new network, this is just on paper nothing finalized and i am sure it has lots of issue like firewall should be on leaf not border leaf etc. so that is why i am here ...
0
votes
0answers
56 views

Hub and spoke IPSec in pfsense

I have 9 different sites and one HQ site where all 9 remote sites connect to via IPSec VPN. All are pfsense firewalls. I want to allow traffic between site 2, 3 and 4. But I do not want to configure ...
0
votes
2answers
36 views

Best ports to use for proprietary protocols that might get inspected/blocked by firewalls

We use software from Genesys that uses its own proprietary protocols (all TCP) and we often run into issues with customers firewalls. The ports we are using are 2000, 2200 and 3010 - I'm not sure ...
0
votes
0answers
261 views

Cisco ASA and missing logs to syslog server

I would like to have some help with sending syslogs from a Cisco ASA 5555-X to a syslog server, graylog 3.2.1. When running the following settings I could see a lot of information in the buffer with ...
1
vote
1answer
613 views

2FA Setup for FortiGate SSL VPN

Just wanted to inquire if there is a way with FortiGate 60E to setup 2FA without setting-up a Forti-Authenticator or any additional costs? We are currently using this FW for our SSL VPN in our small ...
0
votes
3answers
65 views

Two 100mb ports on different networks on FortiGate 110C

If you allow me I have a quite far fetched question... I have a fortigate 110C with a gigabit WAN port, 100mb LAN ports and a 200mb modem connected to the Fortigate. Therefore I cant have 200mb/s ...
0
votes
0answers
10 views

Ipsec connection and nat only one site [duplicate]

There are two companies and two of them connected to each other with İPsec vpn. Company A has a server and company B want to reach to company A server. Which company need to configure nat on its ...
1
vote
1answer
41 views

ASA shows Action:Drop on packet-tracer, no reason or phase

I am doing a very simple lab with one asa and two computers. PC1 connected to dms PC2 connected to outside : Hardware: ASA5506, 4096 MB RAM, CPU Atom C2000 series 1250 MHz, 1 CPU (4 cores) : ASA ...
0
votes
1answer
32 views

How does ISP know which port to open for incoming answer from a site requesting, since sites answer in different ports from ones we ask? [closed]

I'm wondering how does ISP open door for incoming answer from a requesting site since the answer doesn't come from the requesting door, and how to achieve my computer IP since it's behind ISP firewall,...
0
votes
0answers
52 views

QoS over IPSec Site-to-Site VPN: Concerns and Questions

(For clarification purposes: Kbps = Kilobits per second for bandwidth, KB/s = Kilobytes per second for file / data transfer stuff. I'm using them separately because XG knows KBps but not Kbps - ...
1
vote
1answer
31 views

User Upload Quota Fortigate - 501E (6.2.1)

Im using a Fortigate 501E. my requirement is: Every user can’t upload more than 1 GB per day. is it possible to implement the above requirement. Thanks
0
votes
1answer
57 views

Unable to receive logs from a device to our SIEM Syslog server via TCP 514 [closed]

I want to collect logs from a security device (McAfee Email Gateway) to our SIEM Syslog server. This security device can forward logs only via TCP syslog on any port (in our case it is 514). We are ...
2
votes
1answer
61 views

When is the source address of ICMPv6 message types 133, 135 and 136 other than unspecified(::/128) or link-local(fe80::/10)?

According to rfc4861 the source address for Router Solicitation(ICMPv6 type 133), Neighbor Solicitation(ICMPv6 type 135) and Neighbor Advertisement(ICMPv6 type 136) can be an address assigned to the ...
0
votes
2answers
170 views

Configuring a network for 100% isolation (for security)

I'm configuring a LAN for an office. It's a new setup, and therefore there are desktops but no servers and no PC-to-PC communications - everything is on the cloud. The exception to this are several ...
3
votes
1answer
109 views

Cisco ASA5585-X replace SSP-20 with SSP-60

We have cisco ASA5585-X with SSP-20 running in production and we need more power so planning to replace SSP-20 with SSP-60 module but not sure we can just hot swap with SSP-20? Does ASA5585-X support ...
1
vote
2answers
59 views

Applying WAN Changes to Juniper Chassis Cluster

I have a Juniper SRX 340 in a chassis cluster state. I am looking to change the WAN IPs used by the firewalls as the ISPs will change. I have GE interfaces that have sub interfaces within them 1,2,20,...
1
vote
1answer
49 views

IP Routing and Switching Interface Speeds

I have a question that relates to routing and switches. I am looking to set up a new Firewall that will handle the routing for the network and attached to the Firewall will be a switch. Here are the ...
0
votes
1answer
65 views

Cisco Zone Based Firewall

I have Cisco 891F configured with ZBF from CBAC. Right now, router is wide-open SSH/443 or anything my public address is listening on, which is not what I intended. My intention was to only allow IMCP ...
3
votes
2answers
152 views

What is the advantage of Supervised Machine Learning over Deep Packet Inspection in Network Traffic Classification?

As per the definition of Deep Packet Inspection (DPI), it uses signatures for packet filtering. Supervised Machine Learning can help put a label on a packet which does not get identified by Deep ...
0
votes
1answer
123 views

Cisco ASA and a Router?

I'm trying to understand networking and when looking at the different routers, firewalls and switches, I came across Cisco ASA which many use for firewall and routing abilities, so if you use an ASA ...
0
votes
3answers
77 views

packet filtering using bridge vs router

I have a question about the bridge vs router packet filtering using firewalls. I know the basics of the router and bridge and on which layers they work. I just wanna know that on bridge how does ...
4
votes
3answers
2k views

How does Deep Packet Inspection work with encrypted packets?

I've been reading up on Deep Packet Inspection for Software Defined Networks. However, I know that some applications use encryption to evade Deep Packet Inspection. Is there any alternative (such as ...
0
votes
1answer
52 views

Design of 2 Lans Connected to a Watchguard m570 firewall

I have this architecture (without the firewall). I bought a Watchguard M570 as Firewall to add it in my network. My Question is : Could i use my watchguard and connect this one to my 2 LoadBlancers ...
0
votes
0answers
58 views

cisco zone-based policy firewall

How to limit the number of established connections for each host, that connect to the service? In the policy settings, I found only blocking by the number of half open connections. parameter-map type ...
0
votes
3answers
114 views

Access a pc web service with different ip/mask in on-site network

I tried to get a setup working to make the following scenario work: Access a pc web service hosted in a different IP range/mask than the rest on-site PCs. Details: We have a network setup with a ...

1
2 3 4 5
11