[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 173
  • Last Modified:

Firewall Issue

Please refer to picture 1, that is the existing structure of network and picture 2 is the new firewall add in to this network. I facing the problem below now
1.      Wireless Device cannot access to LAN resource, but can access to internet
2.      My Firewall have built in function DDNS so that I configure the VPN in Firewall but I unable to connect to the site using the DNS given by checkpoint.
 
Question:
1.      Anything wrong in my network structure and what are need to improve to have a better performance and security
2.      How to allow my wireless device to access to my LAN
3.      How to use my all in one devices as a modem only
Picture-1-001.jpg
Picture-2-001.jpg
0
warriorsTeah
Asked:
warriorsTeah
  • 3
  • 3
  • 2
1 Solution
 
X-treemCommented:
1) the internet should be connected to the firewall, so that the firewall obtains the public (dynamic) IP and can be reached for VPN etc
this can also be obtained if your router supports bridge mode,  but not advised as it is an additional point of failure in the topology

2) the wireless router should be in your LAN or connected to the firewall, but not directly connected to the internet

3) what do you mean? all in one devices to act as a modem?
0
 
Fred MarshallCommented:
You might be able to hook up as you've shown.  But you should not need the router in front of the firewall router.  Use the firewall as the internet connection device at your end.

The firewall *is* "behind another device NAT".  That's for sure.

AT present, the gateway for the server should be 192.168.1.254; so that looks OK.

Wireless devices will need a wireless router or access point that is plugged into the LAN.
This can be as a "switch".  I've attached a paper on that.
Wireless-Router-as-a-Simple-Swit.pdf
0
 
warriorsTeahAuthor Commented:
please read carefully my picture my firewall does not support adsl so that i still need to use the old devices(wireless modem router) to connect internet.
0
 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

 
X-treemCommented:
can you put the router in bridge mode so that the firewall gets the public IP?
0
 
Fred MarshallCommented:
OK.  And, I note that the router is also the wireless access point.  You'll have to give up on that I'm afraid.  You'll need a separate wireless router on the LAN for LAN and internet access.

Bridge mode is a typical term so do look for that.  But, there might be other terms for that.
In routers the terms are "Gateway" and "Router".  Or it may be "NAT" and "No NAT" or NAT Disabled ...... something like that.
0
 
warriorsTeahAuthor Commented:
Base from my picture 1, if i add in the new firewall, can i just plug the dlink LAN port to Firewall LAN port so that, I just use the WAN port configuration in dlink router.If do this way, my firewall still can function well ?
0
 
Fred MarshallCommented:
No it won't likely still function well unless it has quite comprehensive LAN to LAN connection stuff.  That's not too likely.  It may have *some* but not what you're likely looking for.
For example: stateful packet inspection is sometimes available for LAN to LAN communications.  But then the firewall needs to be the gateway.  I suppose it can be the gateway to the hosts on the network and re route to the Dlink.  But I am rather skeptical regarding the functionality you'd get.
0
 
warriorsTeahAuthor Commented:
I will purpose my customer buy another ADSL modem and use as bridge mode,i plan to bring the existing (wireless modem router) as normal wireless AP only, please recommend what are the model for ADSL modem confirm can switch to switch mode .
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

  • 3
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now