Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

Filter by
Sorted by
Tagged with
0
votes
0answers
7 views

Filter access to certain URL patterns on internal network from outside [closed]

It's quite common that you can restrict users in accessing certain URLs. But is there the "other way round" i.e. in up to date firewall products, and if yes, is there a special term for that?...
0
votes
0answers
4 views

VPN's Killswitch on Linux with UFW - LAN access [closed]

I implemented a very basic Killswitch on Linux for a commercial VPN, using UFW. To setup the Killswitch I followed the steps that are explained in a Comparitech article: https://www.comparitech.com/...
0
votes
1answer
59 views

EdgeRouter X select one out of two WANs according to target IP range

I am using IPSET to define the interested IP range. I want to direct packets to one out of two WAN connections according to an IP range. Here are my conditions. A specific IP range. It is defined by ...
1
vote
1answer
34 views

Does UDP can be exposed to stateful analysis?

From protocol theory we know that TCP is stateful protocol. Different stateful packet filters do filtration based on connection state. I.e. it can distinguish responses and replies. It's obviously for ...
0
votes
0answers
15 views

panic:integer divide fault Message Observed on SRX 5800 Routine Engine

We are running 2 x Juniper SRX 5800 Firewalls in a cluster environment. Node 0 got rebooted and Node 1 took over the master role. Node 0 came back online after reboot. The reasons for Node 0 to reboot ...
2
votes
0answers
62 views

Communication between subnets on Sonicwall firewall

I have a Sonicwall TZ-350. X0 is the default LAN with IP 192.168.10.1, and X1 is the WAN. I've set up a second local subnet on X2 with IP 192.168.20.1 for a single NAS device (no switch; the device is ...
0
votes
1answer
35 views

Adding Second Interface with Different Public IP for Same Internet Connection

We have a situation that I'm not sure how to proceed correctly. This location is currently utilizing two different firewalls - a Sophos XG 310 and a Sonicwall NSA 3500. The way this was originally ...
1
vote
1answer
56 views

WatchGuard Geo Location for restricting access to VPN and “Access Portal”

Problem We want to use WatchGuard's Geo Location to restrict access to our "Access Portal" and "Mobile VPN" connections, but see no options and the corresponding "Firewall ...
2
votes
2answers
83 views

Where should I locate F5 Load Balancer in Network Segmentation?

I segmented my network and locate some important servers behind of firewall. So, I restricted traffic LAN (no segmentation between LAN clients, LAN servers) to/from important servers. These servers ...
0
votes
2answers
42 views

Bridge mode or straight replacement?

Let's assume the ISP is malicious. They have remote access to their own gateway/router. No way to remove that remote access. But ISP allows using a different gateway/router. Security-wise, what is ...
1
vote
1answer
158 views

How to find invalid sessions on Juniper SRX 5800 series Firewall

In Juniper SRX 5800 series Firewall , when we run the command 'show security flow session summary node 0' , we see that it shows large numbers of sessions as invalidated. But we don't know ...
0
votes
0answers
36 views

Packet loss at irregular intervals

We have had significant packet loss issues since switching from Sophos UTM SG 310 to the Barracuda Cloud Gen F380 firewall. This has a big impact on live applications like telephony. It is noticeable ...
5
votes
1answer
23 views

Unable to Communicate from server to other servers after migrating from existing firewall to new firewall

In our existing environment we had migrated old firewall with new firewall after this activity . we had faced connectivity issue . From servers unable to reach other servers . Post clearing ARP table ...
3
votes
1answer
21 views

Let me assume two firewall are connected in active -active mode ,how load sharing happen among two

i wants to know when two firewalls are connected in active -active mode for example A1 and A2 are connected in active -active . if session is initiated from A1 reverse traffic of this session will ...
0
votes
1answer
29 views

What is the difference between these two different network security devices?

I have a choice between these two network security appliances, however the only difference I can see is the year and I don't know what that year means. SONICWALL TZ300 WIRELESS-AC SECURE UPGRADE PLUS ...
0
votes
0answers
23 views

How to configure ZPF with Tunnel?

I am trying to configure ZPF in a Cisco 4331 router in Packet Tracer. I have a tunnel interface for GRE tunnel in this router. But I am not being able to assign this tunnel interface to any zone due ...
1
vote
1answer
45 views

Is it possible to configure DHCP on a router or UTM firewall for the multiple VLANs on L3 Switch?

I'm working on expanding our office network to accommodate more users/devices. Currently we have the DHCP configured on a UTM firewall(cyberoam ing50) device(cum router) providing IP addresses for ...
0
votes
0answers
33 views

Adding a route that changes source IP

I am failing at trying to create a rule for the F5 to change the origination IP address based on the destination IP address. Scenario - There is a web server that has three IP addresses assigned to it....
1
vote
2answers
205 views

Is TLS/SSL inspection throughput important while sizing a Firewall?

Our firm is planning on purchasing a Firewall solution, but are confused with the sizing requirement. We currently have 5 wired internet connections which make a total throughput of 500 Mbps (each ...
2
votes
0answers
58 views

Looking for sanitized Palo Alto FW Config

This may sound a bit unusual, but I'm looking for someone who can answer with a sanitized Palo Alto FW text configuration with the following features used: address-groups & service-groups global-...
0
votes
0answers
33 views

PaloAlto Application ID Signatures, 7-byte Regex Workaround

I'm in the process of creating some custom Application ID signatures, to give control over some in-house applications. In a nutshell, I've created signatures to match HTTP traffic using the http-req-...
1
vote
0answers
162 views

Cisco ASA 5585-x Failover Virtual MAC address

I have configured Cisco ASA 5585-x with Active/Standby mode, cisco best practice saying you should use Virtual MAC address on interface to avoid traffic disruption when you do failover. now question ...
0
votes
2answers
32 views

How to find the client's application port during communication [closed]

After reading firewall rules about inbound and outbount I have some questions and the most sources focus on the server's ports. What happens to the client side when is trying to make a connection to ...
1
vote
0answers
151 views

How to redistribute BGP routes learned from AWS in one VR into another BGP running in another VR in Palo Alto firewall?

I have about 1000+ prefixes I am learning from AWS on Palo Alto through a BGP. This is on the secondary VR. Main VR is where my core routing is situated along with another BGP instance pointing to ...
3
votes
3answers
609 views

What is the difference between an ASA firewall and UTM firewall?

How do ASA firewalls and UTM perimeter firewalls differ?
1
vote
4answers
99 views

How common it is to see unknown IPs in logs?

I have a server that streams video to YouTube/Twitch. I see [UFW BLOCK] entries in logs. One IP is 220.133.236.166, the other is 194.26.25.8. Is it a common thing that a server is connecting to my ...
0
votes
1answer
23 views

answer packages rejected between mangle/prerouting and nat/prerouting

I am currently configuring a ubiquity edgerouter for our network. We have one uplink port (eth2) and two internal ports (eth0; with vlan 1) and eth3 (with vlans 2,3 and 4). uplink and vlan 1 have ...
1
vote
1answer
237 views

Cisco NAT - Overload PAT and Static nat from one inside to two outside interfaces

i have following setup Cisco ISR4k Router with one inside LAN interface and two outside Interfaces. ---- WAN1 (NAT outside) LAN (NAT inside) -- ISR4k | ...
2
votes
2answers
38 views

Understanding IPV4 address range [duplicate]

I do have basic understanding of IP Address which is unique address for each System either in an organization or over the internet. But i want to understand what is IP address range Lets Say we have ...
0
votes
0answers
71 views

Cisco CML 2.0 strange ASA trunking issue

I am seeing very strange issue and now i am losing my mind so thought ask you folk. I have following two components connected point to point on Cisco CML 2.0 [nxos-9000v]--------------------[ASAv] ...
2
votes
3answers
1k views

Cisco SG-350 Switch and Fortigate Firewall Configuration

I'm not what you would call a Network Engineer, but right now i have a (somewhat) complex network problem that i have to solve. I must configure a SG-35028p cisco switch and a fortigate 60f firewall ...
0
votes
0answers
26 views

How much additional processing time is needed for a combination DMZ configuration?

Please consider the DMZ configuration shown below. (Image source: Testing Web Security: Assessing the Security of Web Sites and Applications by Steven Splaine) And then let us consider the following (...
0
votes
1answer
28 views

Public IP address does not work in internal network [closed]

I have configured port forwarding to my system from the router configuration menu, when I try to access the public IP address in the internal network it does not respond but it is accessible outside ...
0
votes
1answer
2k views

How to forward port 80 and 443 on pfSense to a (internal) nginx webserver?

Yesterday we did a "big bang" firewall switch in our company. Our new firewall is a pfSense server. Lets say our external ip is 84.1.1.1, pfSense is 192.168.1.1 and our web server ip is 192.168.1.2. ...
1
vote
2answers
92 views

How Does a Firewall (pfSense) Check Packets Against Rules

For packet rule testing, legacy 5 tuple based techniques employ decision tree, decomposition or hardware (usually TCAM) based approaches. What specific technique do pfSense firewalls employ to test ...
0
votes
1answer
140 views

NTP Sync issues between Palo Alto 3260 and Juniper MX10003

I'm using a Microsemi S650 as the primary ntp server and a Juniper MX10003 as the secondary ntp server. I have the palo alto 3260 configured as follows: [edit deviceconfig system ntp-servers] ...
1
vote
4answers
623 views

Firewall placement

Most diagrams I come across are as follows: ISP > router > firewall However, wouldn't you want a firewall before the router to protect the router? E.g ISP > firewall > router
2
votes
0answers
102 views

Why can't i reach devices in the other network?

I have 2 networks and want to connect them with each other. It should be possible that all devices in network A can communicate with devices on network B and other way round. 1 network is "managed" by ...
0
votes
3answers
380 views

Why cant i reach the other network while i have added the routes and firewall rules to allow traffic? (Pfsense/USG200)

I have 2 networks, the current one and the new one. The current one is not configured by me and one big mess and contains heavily out dated hardware (especially servers). I want to be able to access ...
1
vote
1answer
891 views

Cisco anyconnect VPN router specific public IP via tunnel

I have fully functional cisco Anyconnect VPN running on Cisco ASA5585-X and today i got requirement that there are some remote public sites we need to whitelist our VPN public IP to access them over ...
1
vote
0answers
35 views

How can one detect TLS inspection as a user with an enterprise managed device? [closed]

Let's assume Alice is an employee of the Company Chuck. Alice likes to communicate with Bob, a server somewhere in the internet. Chuck being a security orientated company, inspects all TLS connections ...
1
vote
1answer
153 views

VLAN Subinterface Removal - CISCO ASA

The below are the configuration of the subinterfaces in Cisco ASA firewall and currently sub-interface 0/1.1 is only passing traffic and I need to remove 0/1.2 configuration from here as it is unused. ...
1
vote
2answers
123 views

Palo-Alto Interconnection

I am a novice with PaloAlto networks. For testing purposes, I have connected two PA-220 with each other. I configured the IP addresses from the same subnet. For me, like routers, these devices should ...
1
vote
1answer
36 views

NSA 2650 - traffic capped [closed]

I have an NSA 2650, firmware v 6.5.4.5-53n. Running only a few of the security services including content filter, gateway AV, IP, RBL filter, GEO-IP, and botnet filter (no DPI-SSL!). I'm trying to ...
1
vote
1answer
835 views

How to route traffic via firewall in EVPN + VxLAN

This is what i am trying to design new network, this is just on paper nothing finalized and i am sure it has lots of issue like firewall should be on leaf not border leaf etc. so that is why i am here ...
0
votes
3answers
75 views

Best ports to use for proprietary protocols that might get inspected/blocked by firewalls

We use software from Genesys that uses its own proprietary protocols (all TCP) and we often run into issues with customers firewalls. The ports we are using are 2000, 2200 and 3010 - I'm not sure ...
0
votes
0answers
776 views

Cisco ASA and missing logs to syslog server

I would like to have some help with sending syslogs from a Cisco ASA 5555-X to a syslog server, graylog 3.2.1. When running the following settings I could see a lot of information in the buffer with ...
1
vote
1answer
943 views

2FA Setup for FortiGate SSL VPN

Just wanted to inquire if there is a way with FortiGate 60E to setup 2FA without setting-up a Forti-Authenticator or any additional costs? We are currently using this FW for our SSL VPN in our small ...
0
votes
3answers
196 views

Two 100mb ports on different networks on FortiGate 110C

If you allow me I have a quite far fetched question... I have a fortigate 110C with a gigabit WAN port, 100mb LAN ports and a 200mb modem connected to the Fortigate. Therefore I cant have 200mb/s ...
0
votes
0answers
10 views

Ipsec connection and nat only one site [duplicate]

There are two companies and two of them connected to each other with İPsec vpn. Company A has a server and company B want to reach to company A server. Which company need to configure nat on its ...

1
2 3 4 5
12