Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

Filter by
Sorted by
Tagged with
-3
votes
0answers
7 views

FortiGuard firewall on mac. not sure how to delete [closed]

My highschool must have installed this awhile back. It's been a year since I graduated but it still remains on my laptop. I have even tried returning the laptop to the factory settings but this ...
0
votes
0answers
15 views

WatchGuard Geo Location for restricting access to VPN and “Access Portal”

Problem We want to use WatchGuard's Geo Location to restrict access to our "Access Portal" and "Mobile VPN" connections, but see no options and the corresponding "Firewall ...
0
votes
0answers
10 views

Can someone recommend some open source tcp proxy/firewall for diploma project? [closed]

I'm working on a diploma about finding malware in encrypted TCP traffic and the goal of my project is to create some firewall-tool that could block TCP traffic that I would flag as malicious. I'm ...
0
votes
0answers
11 views

How to forward port 8080 on pfSense to a (internal) nginx webserver? [closed]

Yesterday i installed a pfSense firewall switch on a company. The pfSense is connected directly to another modem from the internet provider. This modem receives the internet. Lets say my external ip ...
0
votes
1answer
14 views

Connect to application hosted in private network on a private DNS from outside world

I have an application hosted in a 2 VMs in a private network. Out of which one application is accessible from the outside world and the other one required private DNS. So outside users are not able to ...
0
votes
2answers
35 views

Bridge mode or straight replacement?

Let's assume the ISP is malicious. They have remote access to their own gateway/router. No way to remove that remote access. But ISP allows using a different gateway/router. Security-wise, what is ...
0
votes
1answer
1k views

How to forward port 80 and 443 on pfSense to a (internal) nginx webserver?

Yesterday we did a "big bang" firewall switch in our company. Our new firewall is a pfSense server. Lets say our external ip is 84.1.1.1, pfSense is 192.168.1.1 and our web server ip is 192.168.1.2. ...
0
votes
1answer
70 views

Design of 2 Lans Connected to a Watchguard m570 firewall

I have this architecture (without the firewall). I bought a Watchguard M570 as Firewall to add it in my network. My Question is : Could i use my watchguard and connect this one to my 2 LoadBlancers ...
2
votes
2answers
67 views

Where should I locate F5 Load Balancer in Network Segmentation?

I segmented my network and locate some important servers behind of firewall. So, I restricted traffic LAN (no segmentation between LAN clients, LAN servers) to/from important servers. These servers ...
3
votes
2answers
239 views

What is the advantage of Supervised Machine Learning over Deep Packet Inspection in Network Traffic Classification?

As per the definition of Deep Packet Inspection (DPI), it uses signatures for packet filtering. Supervised Machine Learning can help put a label on a packet which does not get identified by Deep ...
1
vote
1answer
43 views

How to find invalid sessions on Juniper SRX 5800 series Firewall

In Juniper SRX 5800 series Firewall , when we run the command 'show security flow session summary node 0' , we see that it shows large numbers of sessions as invalidated. But we don't know ...
2
votes
2answers
29k views

The VPN connection failed due to unsuccessful domain name resolution

We are having trouble when test the VPN remote-access with the above error. It returned domain name successfully when we run nslookup "router_IP" in window CMD but it keeps prompting the error window ...
0
votes
0answers
34 views

Packet loss at irregular intervals

We have had significant packet loss issues since switching from Sophos UTM SG 310 to the Barracuda Cloud Gen F380 firewall. This has a big impact on live applications like telephony. It is noticeable ...
0
votes
2answers
220 views

Why cant i reach the other network while i have added the routes and firewall rules to allow traffic? (Pfsense/USG200)

I have 2 networks, the current one and the new one. The current one is not configured by me and one big mess and contains heavily out dated hardware (especially servers). I want to be able to access ...
2
votes
1answer
2k views

Sonicwall TZ105 Site to Site VPN Created can ping gateways but can't ping network from other site

Need help here Site B TZ105 x0 Lan 192.168.162.1 X1 WAN 64.x.x.x X2 LAN 10.0.3.1 Site A TZ300 X0 LAN 10.0.1.1 X1 WAN 69.x.x.x VPN tunnel set up as VPN SITE TO SITE and is Green From Site A I ...
2
votes
1answer
20 views

Unable to Communicate from server to other servers after migrating from existing firewall to new firewall

In our existing environment we had migrated old firewall with new firewall after this activity . we had faced connectivity issue . From servers unable to reach other servers . Post clearing ARP table ...
3
votes
1answer
20 views

Let me assume two firewall are connected in active -active mode ,how load sharing happen among two

i wants to know when two firewalls are connected in active -active mode for example A1 and A2 are connected in active -active . if session is initiated from A1 reverse traffic of this session will ...
0
votes
1answer
28 views

What is the difference between these two different network security devices?

I have a choice between these two network security appliances, however the only difference I can see is the year and I don't know what that year means. SONICWALL TZ300 WIRELESS-AC SECURE UPGRADE PLUS ...
0
votes
0answers
18 views

How to configure ZPF with Tunnel?

I am trying to configure ZPF in a Cisco 4331 router in Packet Tracer. I have a tunnel interface for GRE tunnel in this router. But I am not being able to assign this tunnel interface to any zone due ...
4
votes
2answers
1k views

SonicWall TZ210 PPPoE on WAN interface, need transparent bridging to DMZ

I've got a SonicWall TZ210 which connects to the WAN via PPPoE on the X1 interface. I've got a /29 subnet routed into the box, and everything is running fine. Now, I need to route one of the WAN IP ...
1
vote
2answers
109 views

Palo-Alto Interconnection

I am a novice with PaloAlto networks. For testing purposes, I have connected two PA-220 with each other. I configured the IP addresses from the same subnet. For me, like routers, these devices should ...
3
votes
3answers
223 views

Why have a router upstream of your firewall

I have been coming across a lot of network topologies that look like this: ISP ! Router ! Firewall ! Inside network ! And I don't see the purpose of the router in this situation. You can do ...
0
votes
1answer
160 views

Cisco NAT - Overload PAT and Static nat from one inside to two outside interfaces

i have following setup Cisco ISR4k Router with one inside LAN interface and two outside Interfaces. ---- WAN1 (NAT outside) LAN (NAT inside) -- ISR4k | ...
1
vote
1answer
42 views

Is it possible to configure DHCP on a router or UTM firewall for the multiple VLANs on L3 Switch?

I'm working on expanding our office network to accommodate more users/devices. Currently we have the DHCP configured on a UTM firewall(cyberoam ing50) device(cum router) providing IP addresses for ...
0
votes
0answers
33 views

Adding a route that changes source IP

I am failing at trying to create a rule for the F5 to change the origination IP address based on the destination IP address. Scenario - There is a web server that has three IP addresses assigned to it....
1
vote
2answers
892 views

Allow port 8080 in on Cisco 1841

Having problems configuring an 1841 to allow outside access in mapping some ports to internal addresses. Need to allow the following: External IP: port 8080 to 192.168.3.50 External IP: port 8081 to ...
1
vote
3answers
4k views

What are the advantages of a firewall over a Layer-3 switch?

From my understanding, a Layer 3 switch can handle cross-communication between separate LANs and VLANs, as well as fine-tuned ACL control between VLANs. Despite this, I know a Layer 3 switch should ...
4
votes
4answers
6k views

Layer 3 Switch Routing vs Router on a Stick

CORE: Dell N4032 (6.3.0.18) Access: Dell N2048 (6.3.1.13) We are in the process of setting up a serviced office that will serve multiple businesses. Each "customer" will naturally be on their own ...
1
vote
3answers
26k views

FortiGate HA (A/A) Cluster: How can I manage the slave unit from the web GUI?

I am confused to what happened to the slave's IP address. Before I set both my units to Active/Active cluster, I could reach each of them with their own IP. Now, I can still reach the master unit with ...
2
votes
3answers
2k views

How can I find which natted private IP address is communicating on Cisco ASA 5508

Normally we are facing abnormal traffic targeting specific servers. My question is How can I know which private IP address is targeted since we are using Dynamic NAT on Cisco ASA 5508 Firewall? ...
1
vote
2answers
945 views

Fortigate 300C : Web-Filter not working

I have fortigate 300C firewall. I have create the web-filter policy for one department, I have added only websites which are allowed (around 1200 websites) rest all I want to block. But somehow ...
1
vote
3answers
69 views

My ip address changes daily. How can I setup port filtering so that I can access my VM via RDP without adding the new ip everyday?

So I have a VM in Azure. I would like to ensure that only I can access it. I setup port filtering so that only my IP is accepted, and only from port 3389. The next day my IP changed, but only the ...
0
votes
2answers
524 views

In one organization having two ISP which configured on fortigate firewall ? How can we do the failover for internet?

Organisation don't have AS number .As of now we are doing manually route for any ISP at a time. when default Internet link is go down that time making second link enable on firewall. I saw the some ...
0
votes
2answers
71 views

How Does a Firewall (pfSense) Check Packets Against Rules

For packet rule testing, legacy 5 tuple based techniques employ decision tree, decomposition or hardware (usually TCAM) based approaches. What specific technique do pfSense firewalls employ to test ...
0
votes
2answers
116 views

If you're behind a firewall and all the ports are blocked, how is your browser able to access the internet? [closed]

I'm behind a router and I'm able to run game servers on my home computer after forwarding ports or using the DMZ feature on the router. However, I still don't understand the underlying technology as ...
0
votes
2answers
76 views

Is it possible to see the NAT or PAT mapping from the firewall logs?

Is it possible to see the NAT or PAT mapping from the firewall logs? For example a Fortigate. Thank you This is my previous question which I cannot edit. But here I am posting a precise question. ...
0
votes
2answers
227 views

Cisco ASA and a Router?

I'm trying to understand networking and when looking at the different routers, firewalls and switches, I came across Cisco ASA which many use for firewall and routing abilities, so if you use an ASA ...
0
votes
3answers
60 views

Best ports to use for proprietary protocols that might get inspected/blocked by firewalls

We use software from Genesys that uses its own proprietary protocols (all TCP) and we often run into issues with customers firewalls. The ports we are using are 2000, 2200 and 3010 - I'm not sure ...
1
vote
2answers
3k views

Why traffic shape/police ingress traffic?

Pardon me for my ignorance. I have not tried QoS nor traffic shaping/policing before. I have been pondering on whether can/why would we want to shape/police ingress traffic if you have no control ...
1
vote
2answers
192 views

Network bandwidth management and priority

I'm trying to understand the mechanism by which bandwidth is consumed so that I can set the appropriate QoS and/or priority policies on the firewall. Here's the scenario: Our setup is a Fortigate ...
2
votes
3answers
2k views

Routing VLAN out to internet on a Cisco 3750G

I have a WAN port (firewall, 192.168.70.1/24) plugged into port 24 of a Cisco 3750G. interface GigabitEthernet1/0/24 no switchport ip address 192.168.70.2 255.255.255.0 I have my default route ...
2
votes
4answers
6k views

Subinterfaces on ASA5506-X doesn't communicate with the switch or computer

We are upgrading from ASA5505 to ASA5506-X, but unlike the ASA5505, the new firewall ASA5506-X doesn't have switch ports and does not support vlans on physical interfaces. So, I'm creating vlans on ...
1
vote
2answers
146 views

Is TLS/SSL inspection throughput important while sizing a Firewall?

Our firm is planning on purchasing a Firewall solution, but are confused with the sizing requirement. We currently have 5 wired internet connections which make a total throughput of 500 Mbps (each ...
1
vote
2answers
1k views

Firewall on a stick for Intranet and static routing

I have a question about possible problems that can occur with this network design. If I have an intranet with a firewall on a stick design, multiple switches with layer 2+, is this setup fine? or ...
0
votes
3answers
202 views

Configuring a network for 100% isolation (for security)

I'm configuring a LAN for an office. It's a new setup, and therefore there are desktops but no servers and no PC-to-PC communications - everything is on the cloud. The exception to this are several ...
5
votes
2answers
16k views

pfSense 2.3 How to setup each Lan traffic goes only over specific gateway

I am running a pfSense 2.3 box with 4 NICs. Now i have 2 different ISPs (one Cable & one DSL). How Can i configure, that all traffic from LAN1 goes ONLY over WAN1, and all traffic from LAN2 goes ...
0
votes
3answers
166 views

Two 100mb ports on different networks on FortiGate 110C

If you allow me I have a quite far fetched question... I have a fortigate 110C with a gigabit WAN port, 100mb LAN ports and a 200mb modem connected to the Fortigate. Therefore I cant have 200mb/s ...
4
votes
8answers
19k views

How I can block Psiphon?

I have a Sonicwall firewall. I want to block the Psiphon mobile and PC applications. I denied access on these ports: 51,5242,4244,5243,9785,1701,47,443,500,4500,1080 Most VPNs are closed but the ...
2
votes
0answers
53 views

Looking for sanitized Palo Alto FW Config

This may sound a bit unusual, but I'm looking for someone who can answer with a sanitized Palo Alto FW text configuration with the following features used: address-groups & service-groups global-...
0
votes
0answers
24 views

PaloAlto Application ID Signatures, 7-byte Regex Workaround

I'm in the process of creating some custom Application ID signatures, to give control over some in-house applications. In a nutshell, I've created signatures to match HTTP traffic using the http-req-...

1
2 3 4 5
11