Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

0
votes
0answers
11 views

In one organization having two ISP which configured on fortigate firewall ? How can we do the failover for internet?

Organisation don't have AS number .As of now we are doing manually route for any ISP at a time. when default Internet link is go down that time making second link enable on firewall. I saw the some ...
0
votes
0answers
22 views

Fortigate Firewall | Client not using SSL-VPN Tunnel IP when browsing internet through SSL-VPN as a remote user [on hold]

It is possible I'm doing it wrong, thus could someone guide me how to achieve this. I'm trying for the client to access the internet through the corporate VPN as a remote user, this part works, ...
0
votes
0answers
20 views

Pfsense firewall in front of router denies return packets on WAN interface

So I am trying to articulate this as accurate as possible and while I have a solution I think there is probably a better one. This is my network LAN ---> Router-LAN / Router-WAN ---> ...
0
votes
0answers
9 views

Problem with Open TCP port using CMD command [closed]

before asking thanks all of you in advance whos answers and advice me! I'm trying to open port 13000 using following CMD command: Netsh advfirewall firewall add rule name="defender port" dir=in ...
0
votes
0answers
12 views

who can explain this round robin algorithm in c++? [closed]

//ROUND ROBIN// include include using namespace std; void SearchStack01(int pnt,int tm); void SearchStack02(int pnt, int tm); void AddQue(int pnt); int at[50], bt[50], ct[50]={0}, qt, rqi[50]={0}, ...
1
vote
2answers
27 views

My ip address changes daily. How can I setup port filtering so that I can access my VM via RDP without adding the new ip everyday?

So I have a VM in Azure. I would like to ensure that only I can access it. I setup port filtering so that only my IP is accepted, and only from port 3389. The next day my IP changed, but only the ...
3
votes
1answer
52 views

Need help/advice on basic network setup involving security cameras, guest access, and VLANs

At some point, I'd like to move from a single, flat, network to having a more secure network using VLANs. I have an idea of what I would want, I just don't fully understand some details of Native ...
2
votes
1answer
52 views

Spine Leaf L3 TOR DMZ Design for Virtual Environments

I have a question regarding DMZ design in our DC. Let me give you some background. We have 1 rack 2 Spines 2 leafs L3 TOR connected to each spine ESXI hosts connected to the leafs 1 Palo ALto ...
1
vote
1answer
53 views

Firewall on a stick for Intranet and static routing

I have a question about possible problems that can occur with this network design. If I have an intranet with a firewall on a stick design, multiple switches with layer 2+, is this setup fine? or ...
1
vote
1answer
17 views

Cisco anyconnect 4.6 client disable some security feature

Last 3 year we are using cisco anyconnect with client version 4.5 and everything is good but recently i have install client 4.6 which has tons of additional feature which i am not interested and want ...
6
votes
0answers
63 views

Can a Firewall be deployed on a L2 device defined Network?

I have just started my new job as a network engineer and have come across an unusual request I have an L2 network defined, the LAN is behind a Layer 2 switch, which is then connected to the WAN/MPLS ...
2
votes
1answer
37 views

Opening Port 3283 in Cyberoam Firewall to allow Apple Remote Desktop

I am fairly new to networking. I would like to open port 3282 in Cyberoam firewall to allow Apple remote desktop. Is the source port and destination port the same? How do I create a firewall rule ...
2
votes
1answer
70 views

Just can't get ASDM to run

I've spent two weekends googling and trying every suggestion I can find, but still, when I try to connect to my ASA, the launcher accepts my credentials, the "updating software" bar goes to 20%, and ...
2
votes
1answer
89 views

Missing crypto options on Cisco 5540 firewall?

ASA 5540 VPN Premium license. Version 9.1(7) asa01(config)# crypto key generate rsa label sslvpnkey ^ ...
1
vote
0answers
35 views

What could block two simultaneous connections on one device to the same IP/port? [closed]

My company develops and sells a system where one or more client devices are deployed in the customer's network, and they establish two websocket (TCP) connections on port 443 to the cloud server. ...
0
votes
1answer
29 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [closed]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
0
votes
1answer
39 views

Fortinet configuration translation [closed]

We have a small case of security breach in one of our sites, we have a contractor that is suppose to stay out of our firewall Fortinet, today i noticed these two paragraphs that look fishy. My site ...
0
votes
1answer
41 views

Access an ASA via MGMT port

I'm working on an ASA 5520. I have given the MGMT port an IP address, I can ping it ... I have given it the name REMOTE nameif REMOTE and access level 100 ... Then I allowed HTTP server http ...
0
votes
1answer
47 views

Can't ping from firewall to Hosts and from Hosts to firewall and host to host

I have a network which consists of several networks. A Firewall is inside this Network and monitor and controle the traffic between the First Network and the Second Network. In my First Network are 3 ...
0
votes
1answer
28 views

TZ205W DNS Issue

I have a firewall that is setup but need to have all users inside the network to use a preset dns server. While I know that I can set up this in the DHCP it does not stop a user from changing it in ...
2
votes
1answer
52 views

Firewall Rule 'Both Ways'

I'd like to think I have a good understanding of NAT and Firewall rules at a basic level, though please correct me if I'm wrong at any point. I've seen many products list their firewall requirements ...
1
vote
1answer
56 views

Pass traffic from remote access to site to site tunnel

I have situation where remote access ipsec client have to connect to ASA firewall to send and receive traffic using site to site tunnel on the same ASA, in the logs I am seeing packets dropped as it ...
1
vote
0answers
80 views

Cisco ASA 5512 one download blocks all others until download finishes

My company has a 50 Mbps Down/Up connection. I just migrated from a PIX 515E to an ASA 5512. Previously, one user could download a large file from the internet and block all other users from accessing ...
0
votes
1answer
34 views

How to install firewall under a router [closed]

Recently purchased Sophos Xg 125 firewall, previously am using Cisco Rv325 router with 4 Vlan, My question about for configuration is that 1.how to configure my firewall under this router because ...
0
votes
0answers
76 views

IPv6 firewall configuration

Hello denizens of Network Engineering, for the life of me I can't figure out how to configure a firewall to correctly use IPv6. First, let me explain my setup. I have created a small test ...
0
votes
1answer
33 views

How to do remote testing of firewall rules that are location based

I have managed servers that I have access to. I requested firewall rules that are location based (like making sure nobody can SSH to a server unless they are connecting from a specific public IP. I'd ...
0
votes
1answer
35 views

Change firewall rules of a Cisco Router from network

I'm looking for ways, methods or workarounds to: Change firewall rules (WAN/LAN accept-deny) of a Router from networking, through Linux command or PHP script, can be a socket, or rest service, soap ...
0
votes
1answer
36 views

How does a firewall receiving an image file approve it?

I was recently told that a Firewall configuration for the WatchGuard device does not allow the user to login and alter the configurations. Instead, you send an encrypted image file containing the ...
6
votes
1answer
141 views

Is a FIN only packet legal?

It would be convenient to mark TCP packets with just the FIN flag set, as an intrusion (without tracking the reply). I have always assumed that a FIN without an ACK, while rude and rare, is legal, ...
0
votes
1answer
32 views

How can I use a firewall as Internet Breakout?

I am currently installing a firewall in my company (using OPNsense) but I was asked to use the same system as "Internet Breakout" as well. Does anyone know how to accomplish this? I understand that ...
0
votes
1answer
31 views

Separate network for test systems

I often read that you should put customer machines into a separate (testing) network like a DMZ. Is a layer 3 device (switch/router + firewall) a good option for this? Since some ports need to be ...
1
vote
1answer
604 views

How to block Whatpsapp, Imo, Viber etc from Router? [closed]

I want to block whatspp, viber or other chat apps as such. I have microtik router with RouterOS in it. But how would I block Viber or whatsapp? If I am to block domain, what's their domain though? If ...
0
votes
0answers
30 views

Cisco CPL class-map and object groups, address matching and other

I'm completely new to Cisco Zone Based Firewall concept. I was looking on couple of general tutorials, and I can not figure out following: Is it allowed to use object groups inside class-map ? I know ...
1
vote
2answers
516 views

Does each VLAN need a dedicated uplink port?

I am designing a network consisting of close 60 ports, via a managed switch. I intend to deploy multiple VLANs: one for servers, one for desktops, one for guests, etc. I intend to use the firewall ...
0
votes
0answers
163 views

https url logging (inspect) in cisco asa

Recently I'm started working on cisco ASA 5516 firewall. Now I need to enable logging for browsing URLs with internal IP's list. Able to done for http sites with below commands en conf t policy-map ...
0
votes
1answer
24 views

Why specify additional NAT rule

In watchguard's guide for NAT loopback when describing the additional nat rules required, they show this image: Why are those top two NAT rules necessary, ie aren't they already covered by the next ...
1
vote
1answer
140 views

IP is getting through from firewall although it was in Banned List

I am facing wearied scenario. We are having a SIP gateway in DMZ, yesterday I have observed malicious traffic hitting SIP gateway from the 212.x.x.209 IP. I immediately Banned this IP in firewall so ...
1
vote
0answers
23 views

Where can i find literature on how Firewall logs are generated? [closed]

How are firewall logs generated, I want to know how frequently (or how infrequently ) are logs generated from reading packet data if that is what it is. I want to detect anomaly on an enterprise ...
1
vote
3answers
296 views

How to check the ifIndex on a Fortigate 1500D?

What is the exact command to check the port ifIndex that is used by SNMP to reflect trap at SNMP host at 1500D Fortigate? The command diagnose sys device list root displays the index which isn't ...
1
vote
0answers
74 views

Frequent Internet Disconnection

Hello everyone! I am relatively new to this forum, and wanted to get some useful feedbacks and resolution from "network-PROs" on my problem.. I have a network with a main router connected to the ...
0
votes
0answers
44 views

Traceroute packets processing behavior

A traceroute initiate for NATed IP address 10.12.1.10 from a router that is outside from AS. This traceroute packet reaches at native BGP peer router where this NAT IP is configured at Firewall. ...
0
votes
0answers
72 views

Cisco ASA 5525 Configuration file

im working on a configuation review so im looking for a way to extract the config for the following equipment : Firepower version 6.2.3 in Cisco ASA 5525 ISE: Model SNS 3515k9, version 2.3 i already ...
0
votes
1answer
43 views

Are these hosts Live?

Situation : Along with other active hosts, our internal network scan shows an extra 9 IP addresses in the report (no reverse DNS, just IP addresses) with 0 vulnerabilities and 2 INFO INFO1 : Nessus ...
1
vote
1answer
230 views

Same subnet on two firewalls

I came across a network setup in this way: Cisco device provided by the ISP serving as a bridge between the fibre line and the LAN. Cable coming out from port eth0 of the Cisco above going to a ...
0
votes
1answer
234 views

What is a “back to back” firewall configuration?

I've found some guides talking about "back to back" (or back2back) configuration but I can't find an explanation of such configuration. Can somebody explain what is meant by "back-to-back"?
1
vote
1answer
90 views

Event manager applet not getting recognized for Cisco ASA ver8.0

I need help as Event manager applet not getting recognized for Cisco ASA ver8.0. But for cisco ASA ver 9.6 it is working properly. Please advise BnglASA/pri/act(config)#Event manager applet ...
0
votes
0answers
292 views

Why ASA might not be logging all connections that are denied by an ACL

For some reason I am unable to see all connection attempts I try through the ASA generate a log for each which what my client is requesting. For instance, I have tried 48 times a telnet session to 8....
5
votes
3answers
242 views

Cisco ASA 5510 - ACL Config Question

My company's email server is under attack from the following IP address blocks 92.63.193.0 5.188.9.0 Here are the corresponding WHOIS records for each network % This is the RIPE Database query ...
0
votes
0answers
24 views

Sonicwall SSL VPN Lab Setup

I would like to setup a lab, and was wondering if anyone knew if a Sonicwall VPN iso can be downloaded just like a Cisco router's iso can downloaded and ran virtually.
1
vote
3answers
62 views

Check physically inaccessible computer on local network

If a physically inaccessible computer attached to your local network segment is firewalling all IP traffic, how would you find out if it is up or not?