Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

For questions about or relating to firewall operations, configuration and troubleshooting.

0
votes
1answer
21 views

Leased 1GB fibre firewall with multiple IP LANS & tenants [on hold]

I’m in desperate need of some unbiased advice and suggestions. Everyone I ask seems to want to sell me a £2-5,000 firewall appliance and £1500+ per year of support/licencing. I have a 1gb leased ...
0
votes
0answers
16 views

Server with two NICs behind Ubiquiti ERX, connected to two separate private company networks with possible similar address spaces [closed]

We have a Ubuntu 18.04 Server running a web application that needs to be accessed by two companies. We have two NICs on the server, one goes to our local "shop floor" network (10.200.145.0/24) which ...
0
votes
0answers
26 views

Odd Connection State Firewall (?) Blocking Behavior

I am observing the following: jchan-mbp15:~ jonathan$ sudo nmap -oG - 192.168.55.0/24 -T5 -sn -n --max-parallelism 256 --min-parallelism 100 # Nmap 7.70 scan initiated Wed Oct 3 22:53:35 2018 as: ...
0
votes
1answer
27 views

Fortinet configuration translation

We have a small case of security breach in one of our sites, we have a contractor that is suppose to stay out of our firewall Fortinet, today i noticed these two paragraphs that look fishy. My site ...
0
votes
0answers
52 views

Redirect traffic destined to old server to an new server by ASA

There is a host that sends request to a server through a ASA (8.2) (in routed mode) the server's IP address is going to be changed the issue is that the new IP address cannot be changed on the host so ...
0
votes
1answer
29 views

Access an ASA via MGMT port

I'm working on an ASA 5520. I have given the MGMT port an IP address, I can ping it ... I have given it the name REMOTE nameif REMOTE and access level 100 ... Then I allowed HTTP server http ...
0
votes
1answer
38 views

Can't ping from firewall to Hosts and from Hosts to firewall and host to host

I have a network which consists of several networks. A Firewall is inside this Network and monitor and controle the traffic between the First Network and the Second Network. In my First Network are 3 ...
0
votes
1answer
27 views

TZ205W DNS Issue

I have a firewall that is setup but need to have all users inside the network to use a preset dns server. While I know that I can set up this in the DHCP it does not stop a user from changing it in ...
2
votes
1answer
46 views

Firewall Rule 'Both Ways'

I'd like to think I have a good understanding of NAT and Firewall rules at a basic level, though please correct me if I'm wrong at any point. I've seen many products list their firewall requirements ...
1
vote
1answer
43 views

Pass traffic from remote access to site to site tunnel

I have situation where remote access ipsec client have to connect to ASA firewall to send and receive traffic using site to site tunnel on the same ASA, in the logs I am seeing packets dropped as it ...
1
vote
0answers
61 views

Cisco ASA 5512 one download blocks all others until download finishes

My company has a 50 Mbps Down/Up connection. I just migrated from a PIX 515E to an ASA 5512. Previously, one user could download a large file from the internet and block all other users from accessing ...
0
votes
1answer
33 views

How to install firewall under a router [closed]

Recently purchased Sophos Xg 125 firewall, previously am using Cisco Rv325 router with 4 Vlan, My question about for configuration is that 1.how to configure my firewall under this router because ...
0
votes
0answers
63 views

IPv6 firewall configuration

Hello denizens of Network Engineering, for the life of me I can't figure out how to configure a firewall to correctly use IPv6. First, let me explain my setup. I have created a small test ...
0
votes
1answer
32 views

How to do remote testing of firewall rules that are location based

I have managed servers that I have access to. I requested firewall rules that are location based (like making sure nobody can SSH to a server unless they are connecting from a specific public IP. I'd ...
0
votes
1answer
29 views

Change firewall rules of a Cisco Router from network

I'm looking for ways, methods or workarounds to: Change firewall rules (WAN/LAN accept-deny) of a Router from networking, through Linux command or PHP script, can be a socket, or rest service, soap ...
0
votes
1answer
36 views

How does a firewall receiving an image file approve it?

I was recently told that a Firewall configuration for the WatchGuard device does not allow the user to login and alter the configurations. Instead, you send an encrypted image file containing the ...
6
votes
1answer
123 views

Is a FIN only packet legal?

It would be convenient to mark TCP packets with just the FIN flag set, as an intrusion (without tracking the reply). I have always assumed that a FIN without an ACK, while rude and rare, is legal, ...
0
votes
1answer
26 views

How can I use a firewall as Internet Breakout?

I am currently installing a firewall in my company (using OPNsense) but I was asked to use the same system as "Internet Breakout" as well. Does anyone know how to accomplish this? I understand that ...
0
votes
1answer
24 views

Separate network for test systems

I often read that you should put customer machines into a separate (testing) network like a DMZ. Is a layer 3 device (switch/router + firewall) a good option for this? Since some ports need to be ...
1
vote
1answer
295 views

How to block Whatpsapp, Imo, Viber etc from Router? [closed]

I want to block whatspp, viber or other chat apps as such. I have microtik router with RouterOS in it. But how would I block Viber or whatsapp? If I am to block domain, what's their domain though? If ...
0
votes
0answers
22 views

Cisco CPL class-map and object groups, address matching and other

I'm completely new to Cisco Zone Based Firewall concept. I was looking on couple of general tutorials, and I can not figure out following: Is it allowed to use object groups inside class-map ? I know ...
1
vote
2answers
180 views

Does each VLAN need a dedicated uplink port?

I am designing a network consisting of close 60 ports, via a managed switch. I intend to deploy multiple VLANs: one for servers, one for desktops, one for guests, etc. I intend to use the firewall ...
0
votes
0answers
96 views

https url logging (inspect) in cisco asa

Recently I'm started working on cisco ASA 5516 firewall. Now I need to enable logging for browsing URLs with internal IP's list. Able to done for http sites with below commands en conf t policy-map ...
0
votes
1answer
24 views

Why specify additional NAT rule

In watchguard's guide for NAT loopback when describing the additional nat rules required, they show this image: Why are those top two NAT rules necessary, ie aren't they already covered by the next ...
0
votes
1answer
87 views

IP is getting through from firewall although it was in Banned List

I am facing wearied scenario. We are having a SIP gateway in DMZ, yesterday I have observed malicious traffic hitting SIP gateway from the 212.x.x.209 IP. I immediately Banned this IP in firewall so ...
1
vote
0answers
23 views

Where can i find literature on how Firewall logs are generated? [closed]

How are firewall logs generated, I want to know how frequently (or how infrequently ) are logs generated from reading packet data if that is what it is. I want to detect anomaly on an enterprise ...
1
vote
3answers
157 views

How to check the ifIndex on a Fortigate 1500D?

What is the exact command to check the port ifIndex that is used by SNMP to reflect trap at SNMP host at 1500D Fortigate? The command diagnose sys device list root displays the index which isn't ...
1
vote
0answers
71 views

Frequent Internet Disconnection

Hello everyone! I am relatively new to this forum, and wanted to get some useful feedbacks and resolution from "network-PROs" on my problem.. I have a network with a main router connected to the ...
0
votes
0answers
43 views

Traceroute packets processing behavior

A traceroute initiate for NATed IP address 10.12.1.10 from a router that is outside from AS. This traceroute packet reaches at native BGP peer router where this NAT IP is configured at Firewall. ...
0
votes
0answers
55 views

Cisco ASA 5525 Configuration file

im working on a configuation review so im looking for a way to extract the config for the following equipment : Firepower version 6.2.3 in Cisco ASA 5525 ISE: Model SNS 3515k9, version 2.3 i already ...
0
votes
1answer
42 views

Are these hosts Live?

Situation : Along with other active hosts, our internal network scan shows an extra 9 IP addresses in the report (no reverse DNS, just IP addresses) with 0 vulnerabilities and 2 INFO INFO1 : Nessus ...
1
vote
1answer
130 views

Same subnet on two firewalls

I came across a network setup in this way: Cisco device provided by the ISP serving as a bridge between the fibre line and the LAN. Cable coming out from port eth0 of the Cisco above going to a ...
0
votes
1answer
108 views

What is a “back to back” firewall configuration?

I've found some guides talking about "back to back" (or back2back) configuration but I can't find an explanation of such configuration. Can somebody explain what is meant by "back-to-back"?
1
vote
1answer
63 views

Event manager applet not getting recognized for Cisco ASA ver8.0

I need help as Event manager applet not getting recognized for Cisco ASA ver8.0. But for cisco ASA ver 9.6 it is working properly. Please advise BnglASA/pri/act(config)#Event manager applet ...
0
votes
0answers
175 views

Why ASA might not be logging all connections that are denied by an ACL

For some reason I am unable to see all connection attempts I try through the ASA generate a log for each which what my client is requesting. For instance, I have tried 48 times a telnet session to 8....
5
votes
3answers
232 views

Cisco ASA 5510 - ACL Config Question

My company's email server is under attack from the following IP address blocks 92.63.193.0 5.188.9.0 Here are the corresponding WHOIS records for each network % This is the RIPE Database query ...
0
votes
0answers
16 views

Sonicwall SSL VPN Lab Setup

I would like to setup a lab, and was wondering if anyone knew if a Sonicwall VPN iso can be downloaded just like a Cisco router's iso can downloaded and ran virtually.
1
vote
3answers
54 views

Check physically inaccessible computer on local network

If a physically inaccessible computer attached to your local network segment is firewalling all IP traffic, how would you find out if it is up or not?
1
vote
1answer
35 views

Is an ACL needed when using PAT (dynamic nat)?

We have a single router (4331) that connects to our ISP. We do PAT (dynamic nat) to give users internet access. Now typically we'd have an OUTSIDE-IN ACL that blocks traffic from the internet. My ...
0
votes
0answers
123 views

How to Connect FMC(management center) in Cisco FirePower firewall

I launched a new Cisco FirePower firewall in My AWS account. I followed Cisco Firepower Management Center Virtual for the AWS Cloud Quick Start Guide steps to launch the firewall. Once the ...
3
votes
1answer
88 views

How to connect servers from different Datacentres via firewall

really need help since I am still new in firewall. I have 2 firewall located in two separate Datacentres. I need to make a connection for the servers from these 2 DCs. One firewall is running pfsense ...
0
votes
0answers
156 views

Cisco ASA with FirePOWER - Monitor HTTPS traffic

I'm trying to monitor https traffic entering and exiting the outside interface of my Cisco ASA 5508-x. The current versions are: ASA: 7.9(1) FirePOWER: 5.4.1-211 First and foremost, is it possible ...
0
votes
1answer
28 views

How to check the network performance for smooth transferring of huge data?

We have cisco network setup and we often find that we are having issues while transferring huge amount of data between our database, Is it possible to check the network performance and any latency ...
1
vote
1answer
240 views

Cisco ASA IP object vs TCP/UDP object wrt VPN Filters

When it comes to managing access rules in Cisco ASAs I always use ASDM because it's easier for me to visualize, troubleshoot and manage. I recently created a VPN filter for a S2S IPsec VPN and ...
1
vote
1answer
186 views

Understanding how Cisco ASA with FirePOWER Services works

We recently installed a Cisco ASA 5508-x with FirePOWER Services. I am now getting around to setting FP up. I would like to understand how FP works before configuration. In terms of exposure, how ...
1
vote
1answer
168 views

Pix 6.3 to ASA 9.2 migration

I inherited a production Cisco Pix 6.3 firewall and an unconfigured ASA 5512 9.2. I'm reading up on converting the existing Pix config to an ASA-compatible config and there's mention of a migration ...
1
vote
1answer
154 views

ASA Inspection clarity

i want to make sure i get this because it's driving me a bit mad. class-map ftp match port tcp eq 21 class-map http match port tcp eq 21 [it should be 80] policy-map test class ftp ...
4
votes
1answer
83 views

Can I get what filters are applied to an interface via SNMP?

I have some firewall filters on juniper devices- ex3300s make up the majority of them. I've been looking for an oid that will let me associate an IFL with the filters that are on it, and I've yet to ...
2
votes
2answers
436 views

Cisco failover interface in waiting

I have following scenario, where i am getting 1G copper Cat6 cable from ISP and directly terminated on my Cisco ASA firewall on Gi0/8 interface and i have configured failover now my in failover output ...
1
vote
0answers
372 views

Configure pfSense VLAN Trunk

I have setup a pfSense box as a transparent firewall between my Cisco router and first Cisco switch: CISCO ROUTER - 10.10.1.253 ↓ PFSENSE - OPT1 BRIDGE - 10.10.1.252 ↓ CISCO CORE SWITCH - 10.10.1.250 ...