Questions tagged [firewall]

For questions about or relating to firewall operations, configuration and troubleshooting.

Filter by
Sorted by
Tagged with
15
votes
3answers
6k views

Configure Cisco ASA in Transparent mode: Layer2 DMZ w/ Vlan translation

I am in the middle of a project to migrate some existing switched ethernet dot1q trunks behind an ASA firewall... these trunks have five vlans each (numbered 51 - 55). This is a simple drawing of the ...
11
votes
1answer
409 views

Is a FIN only segment legal?

It would be convenient to mark TCP segments with just the FIN flag set, as an intrusion (without tracking the reply). I have always assumed that a FIN without an ACK, while rude and rare, is legal, ...
3
votes
2answers
1k views

Implementing a DMZ and sharing data from the private network

I have recently sat in some networking lectures and have a few questions about DMZ. The example that I was given was: I have an office, in which it has a private network. In that private network, ...
5
votes
3answers
62k views

How to know at what OSI Layer(s) does a firewall operate

I understand that Firewalls may operate on different OSI layers depends on the firewall itself. but how can I know if I install specific firewall at what OSI Layer(s) it does operate ?
7
votes
2answers
14k views

Cannot get Cisco-ASA 5505 properly configured

I have been at this for 2 days, been through countless forums and tutorials as far as configuring my ASA-5505. I can't get out to the internet (even using ping from the ASA), I can't "see" the ASA on ...
4
votes
4answers
5k views

VLANS vs. subnets for network security and segmentation

What are the security implications when using subnets as opposed to VLANs for segmenting an enterprise network? We have strict security requirements surrounding the data we handle and need to ensure ...
4
votes
1answer
129 views

[L4, F/W]How can I deal with SPEED?

I have a problem about Speed when accessing web servers.. [Circumstances] Everything is OK, every packet flows well. However, now I have focused on the speed... That is, connection is ok [Issues] ...
0
votes
2answers
115 views

If you're behind a firewall and all the ports are blocked, how is your browser able to access the internet? [closed]

I'm behind a router and I'm able to run game servers on my home computer after forwarding ports or using the DMZ feature on the router. However, I still don't understand the underlying technology as ...
9
votes
1answer
3k views

Juniper SRX HA links passing through switch

it is necessary to join two srx650 in chassis cluster (Passive/Active) via two switches EX4200 . I need to choose one from three examples. Please , help to define correct choice and describe what the ...
6
votes
1answer
2k views

How can the SIP timeout on a Cisco PIX be increased for the REGISTER transaction type?

A client app that registers through a PIX to a 3rd party SIP provider shows a 0:03:00 timeout. The client automatically reregisters every 5 minutes and doesn't appear configurable. After 3 minutes, ...
5
votes
1answer
179 views

Connecting a firewall cluster to other appliance cluster

I have a network design with two NSA firewall clustered in HA mode and two SRA appliance also clustered in HA. My first approach for network design was this: NSA1-HA-NSA2 | | | | | ...
4
votes
0answers
11k views

Problem ipsec site to site ASA

I am receiving this error when I try to establish an ipsec site to site vpn: PSEC: Parsing PFKey GETSPI message IPSEC: Creating IPsec SA IPSEC: Getting the inbound SPI IPSEC: New embryonic SA created ...
2
votes
2answers
200 views

Wireguard protocol understanding source of the received packet

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
2
votes
2answers
4k views

Firewall Policies vs Firewall Rules

I just want to understand some concepts related to the firewall. Is there any difference between saying firewall policies and firewall rules? Can we say a firewall includes a set of policies each of ...
0
votes
0answers
91 views

ASA - communication between 2 tunnels

I have two IPSEC tunnels with an ASA in the middle Site A - 10.20.4.0 /24 (65.176.80.84) Site B - 192.168.142.0 /24 ASA - 10.99.206.0 /24 (95.12.22.33 Site A - 10.20.4.0 /24 can reach the ASA and ...