Software Firewalls Help

Hello - we upgraded from a 5510 ASA to a 5516 recently. On our old 5510, the home page of the ASA would present the ASDM tool. the 5516 does not do this. After spending an hour reading the Getting Started guide and online, I find lots of information about how the ASDM works - but hardly any help on how to actually launch the tool. Need some help from the experts. thanks

5 Comments

Get 15 Days FREE Full-Featured Trial

LVL 1

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

We are looking to confirm some settings on ClearOS 6.9.0 Professional installed on a HP ML310 with multi NIC card installed.

It is currently working fine but the customer site is moving location at the weekend and also changing WAN provider. We currently have the following setup on the ClearOS login from the console (Example IP used)

eth0 external - static - 192.168.14.2 (Link Yes)
eth1 lan - static - 10.7.1.1 (Link Yes)
eth2 external - Static - 10.2.1.3 (Link Yes)
eth3 external - Static 10.3.1.133 (Link No)
eth4 external - Static - 213.100.109.98 (Link Yes)

On eth4 which is physically connected x2 to the router - we can see the following config

Eth4
Role - External
Connection Type - Static
IP Address - 213.100.109.98
Netmask - 255.255.255.248
Gateway - 213.100.109.97

We would like to confirm that
1. The new WAN provider will supply new gateway address (router)
2. We will supply IP address on same LAN as GW address as above
3. SNM will stay the same or as advised by WAN provider

Do we need to change any other networks for the internet route to work? Everything is staying as is, we can see that Eth3 is not connected but do any of the other networks need to know about the changes to the WAN/External change.

We do not have any previous experience with ClearOS, we have used SonicWALL before and presuming that the concept is the same. The CLearOS login on the console does not show an awful lot, neither does the CLI.

Any suggestions from ClearOS…

4 Comments

Hi Experts,

I am currently looking for a managed, software or hardware firewall option for a business grade internet connection and WAN. I don't know much about firewalls beyond what is available on your average home computer and I am a little unsure where to start.

Please can you tell me your thoughts on what is best for a business.

If I were to purchase a unit, is this something that can easily be learned, administered and managed in house or is this something that requires a real specialist?
Should I use a software, hardware firewall, or a managed offering?
What sort of costs can I expect for a reasonable solution?
What should I look out for?

Any expert advise would be most appreciated.

Thank you

Jim

6 Comments

Abstract Network traffic is volume of data moving across the system at any given time. The traffic encapsulates in packets to provide load, it effect organization network resources by assisting to ensure good quality in service. Data is important resources of any business organization; its security

0 Comments

Add Comment

I plan to move somewhere where Google FIber is offered and host a website using a server I bought.

I'm reading three books on Ubuntu Server, and I'm assuming I should buy a business firewall.

Can someone explain how they work compared to software firewall, if you should run both, and link to some possible products that would be good for a web server.

Thanks.

8 Comments

Post by

Alix Postan

2017-07-05Edited

When your boss asks if the you’re protected against Petrwrap or WannaCry, you can say that you’ve taken these 5 steps to reduce the risk of harmful malware.

http://www.uzado.com/blog/5-steps-to-basic-vulnerability-and-remediation-management

5 Steps to Basic Vulnerability and Remediation ManagementWhen your boss asks if the you’re protected against Petrwrap or WannaCry, you can say that you’ve taken these 5 steps to reduce the risk of harmful malware.

6 Comments

load previous comments (4)

Expert Comment

by:Pierre Ammoun2017-07-09

Where can I find basic guidelines to "educate the users" on being careful about malware ransomware ?

Author Comment

by:Alix Postan2017-07-10

Hi Pierre! That's a great question! Here are some links to some articles that I think would help educate users about being careful about malware:

1) 7 Things About Information Security Your Boss Wants to Know: http://www.uzado.com/blog/7-things-about-information-security-your-boss-wants-to-know

2) 7 Tips for Dealing with Internet Security Threats: http://www.uzado.com/blog/7-tips-for-dealing-with-internet-security-threats

3) 5 Best Security Blogs You Should be Reading: http://www.uzado.com/blog/five-best-security-blogs-you-should-be-reading

Hope that helps! Let me know if you need more articles!

Add Comment

Is there a way to block an entire folder including the .exe everything inside a folder from connecting to the internet? If Windows 10's Firewall can't is there another Firewall that can?

5 Comments

I have a group of PCs in a domain environment that we want to lock down except for a few applications. I am using Group Policy to configure firewall exceptions to allow these applications to work.

One of the allowed applications is Outlook. We have a CASARRAY, and currently when I try to access Outlook it says that Exchange is offline and won't let me configure a new account.

In the GPO, I have rules configured for DNS & AD Domain Services. For Outlook I created a rules that allow access to the CASARRAY with the following:

Outbound:
"389/TCP/UDP (LDAP)
3268/TCP (LDAP GC)
88/TCP/UDP (Kerberos)
53/TCP/UDP (DNS)
135/TCP (RPC netlogon)
80/TCP
443/TCP (SSL)"

Inbound
"TCP End Point Mapper (TCP/135)
Dynamic RPC port range (6005-59530)"

I am still unable to configure Outlook. What am I missing? Is there a different approach I should be taking?

2 Comments

I have a Windows 7 PC that we are trying to lockdown. I have a group policy that puts a firewall rule in place to only allow 2 IP addresses to initiate RDP connections. We have tested this successfully from the 2 IPs while all others are denied. When the PC reboots, they 2 IPs can no longer RDP to it.

So far, the only thing I've found that will reestablish the ability to RDP from the 2 IPs is to remove the PC from the domain and re-add it back in.

Any suggestions on the cause and possible resolution?

Thanks!

2 Comments

I had this question after viewing Wifi issue with asa 5506.

How to you return from AP>. Prompt to the asa prompt (cisco asa> )?

I sessioned into the cisco 702 AP but can't get out it

4 Comments

Free Tool: Port Scanner

LVL 9

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

hello , i need allow skype on sonicwal and block all proxy and signature id 5 or 7 . Is it possible.

Software Firewalls

1 Comment

Recently we added a new TPG IPVPN Connection (MPLS Network with Hosted Firewall) to eth2 on our watchguard but cant get it to work properly (see attached picture)

For some reason i cannot ping any Sydney LAN IP Addresses (on 10.50.2.0/24 network) from QLD Office to Sydney Office.

What do i need to enable / configure on the wathguard so i can ping internal lan addresses from qld office ?

QLD Office LAN is on 10.4.26.0/24 network.
Sydney office LAN is on 10.50.2.0/24 network

From QLD office I can ping 210.10.228.14,210.10.228.13, 10.252.0.6, 10.252.0.5 OK, but if I try to ping the Watchguard LAN IP Address 10.50.2.90 or another device in the same Sydney network from QLD Office it times out. Any ideas ???

Sydney Office Watchguard Configuration is as follows:

I have 3 interfaces setup on my Watchguard x750e firewall with following parameters:

Eth0: IP: 210.10.228.14 (External) - This is connected to a ISP Managed Cisco 1900 Series Router. This is a routed subnet services TPG NBN Conneciton.
Gateway: 210.10.228.13
NetMask:255.255.255.252

Eth1: IP: 10.50.2.90 (Trusted)
Netmask: 255.255.255.0

Eth2: IP: 10.252.0.6 (External) - This is connected to a TPG NTU and is a IPVPN Connection. This also requires RIPv2 and has dynamic routing setup.
Gateway: 10.252.0.5
Netmask: 255.255.255.252
Dynamic Routing Configuration:
1. Enabled Dynamic Routing is enabled.
2. Enable RIP is enabled
Rip Configuration :
router rip
network 10.252.0.4/30
network …

0 Comments

I have been seeing quite a bit of traffic attempts from a specific ip address to access the above described firewall
how can I block this specific ip address without just blocking all?

3 Comments

Hi, we are preparing the rules for Zone-based Policy Firewall on Router c3925, however we need to confirm which traffic usually pass through a router, so that the rule will not block/allow any useful/bad traffic. So can we have a method to see it?

Is there a way other than: "show ip cache flow", "sh ip traffic" ?

Many thanks in advance,

3 Comments

LVL 2

Question by

Spac3_Pirat3

2017-06-11Solved

Deploying pfSense Firewall

Hi, we are having Router Cisco 3925 between LAN and WAN, however it seems like the money is required for AnyConnect VPN on Cisco 3925. We found that pfSense (Free) can be deployed to serve VPN connections however we need to understand its pros and cons.
-So can anyone explain please?
-Should we deploy it or purchase license for AnyConnect?
-Do you know any free Cisco VPN solution that we can configure inside our C3925?

Our priority is:
- Compatible with current environment with minimum impacts to about 400 users
- Easy to configure and troubleshoot
- Price

Many thanks in advance,

6 Comments

Question by

LesmanyNunez

2017-06-08Solved

OMG PFsense

I have a new customer the VPN going straight to the customer was working fine with Comcast crappy router, I install a pfsense and created a rule under nat for VPN, setup server with a static IP etc. somehow this does not work. any help greatly appreciated

6 Comments

Hello experts-exchange, can the ASA 5520 be configured for SMTP Gateway relay use?
Thank you,
Nina

Software Firewalls

1 Comment

Question by

LesmanyNunez

2017-06-07Solved

pfsense

hi I need some assistance setting up the wan on a new pfsense appliance, I followed the instructions somehow I still can't browse.
how do I setup the wan on this, most tutorials show an older version of pfsense and honestly I'm a total noob on pfsense.

4 Comments

ASUS Router RT AC3200
NETGEAR MODEM C7000-100NAS

Typically, when you bridge a modem it loses any wifi broadcasting abilities & you can no longer directly hardwire your PCs ethernet cable to it - you now must plug in directly into the router. In addition you lose the ability to use 192.168.0.1 to see your modem's GUI anymore. It's still there, I just need some kind of router permission, tweak, programming, firewall allowance, setting enabled, call it what you want, to be able to use 192.168.0.1 again. I know there's a way through the router just need help.

Any ideas?

13 Comments

LVL 7

Question by

gudii9

2017-06-06Solved

how to add book mark in IE11 favorite tool bar

Hi,

I have added few folders(say abc, def) as favorite tool bar in Internet explorer 11.

when i try to save a link to one of favorite tool bar folder called abc it is not allowing me.

there is no save option there.

please advise

3 Comments

Question by

LesmanyNunez

2017-06-06Solved

PFSense

HI I am kind of new to this of sense firewall, I have the latest release, my question is about the subnetting for 255.255.255.252 I have to use /30 if I'm not mistaking. also if I'm setting up a VPN server inside the network were do I open ports for this. I look into the nat and configure some things there but I can't be sure.

6 Comments

what is the best to have the selection criteria for Firewall and Endpoint security in the TC level . most of the firewall and the end point security has the similar common features . so that very difficult to select the over another . some are saying we are in the top 3 in the that report , some are saying we have the gateway level syn . with the end point , like wise

please give me the best approach on this . we don't want to have the most expensive product

7 Comments

Hello,

We have a Windows Server 2008 R2 configured as a NAT Server. Currently we have limited bandwidth, so I would like to monitor usage per user. Is it possible to monitor usage via Windows somehow? If not can anyone advise a freeware solution?

Best Regards,

Tolga

2 Comments

I've just installed a pfSense 2.1.5 on a VM for a migration purpose. This psSense vm will be on a Private vswitch talking to another vm (a testing pc) on the same private vswitch. While I tried to start pfSense up for the first time I found I can't get passed WAN setup --it asks for WAN interface name, which I don't know. (I actually need to set up LAN, but I now cannot even get over WAN setup.) Can you help please?

Here is error I am getting:
VLAN Capable interfaces:
No interfaces found!
No VLAN capable interfaces detected.
*NOTE* pfSense requires *AT LEAST* 1 assigned in....
..*WILL NOT* function correctly.

If you do not know the names of your interfaces, you may choose to use auto-detection. In that case, disconnect all interfaces now before hitting 'a' to initiate auto detection.

Enter the WAN interface name or 'a' for auto-detection:

If I hit 'a',
Connect the WAN interface now and make sure that the link is up.
Then press ENTER to continue.

I get:
Warning: Invalid argument supplied for foreach() in /etc/inc/config.console.inc on line 447
No link-up detected.

Enter the WAN in....

1 Comment

Hello Experts,

#########################

The system includes

Server
IP: 10.99.200.97
OS: Win2012R2

3G router (VPN SIM Card)
Interface ppp0 IP: 10.1.0.1
Interface usb0 IP: 192.168.1.1
OS: ARM Linux

Client PC
LAN IP: 192.168.1.100

#########################

3 of them connect by

Server <---> 3G router <----> PC Client

#########################

The 3G Router is basic linux with nothing but iptables command. I tried several command option but did not work so far.

Such as,
/mnt/nand1-1/ap/iptables -t nat -A PREROUTING -p tcp -i ppp0 --dport 21 -j DNAT --to-destination 10.0.0.100:21

PS. PC client can Ping 3g Router IP: 10.1.0.1 but cannot Ping 10.99.200.97
Will you have any ideas?
Thank you.

20 Comments

Course Of The Month

Software Firewalls

Related Topics

Software Firewalls

Related Topics