Questions tagged [firewalls]

Concerned with software or hardware firewalls

Filter by
Sorted by
Tagged with
0
votes
2answers
3k views

Fortigate "WebRTC.Local.IP.Addresses.Disclosure" Event

We have a Fortigate perimeter firewall, and today I detected this event. What should I do to improve protection? How can someone obtain local IP address through a firewall? The following alert was ...
0
votes
1answer
140 views

Intercept network traffic with a hub [closed]

If I plugged a hub inbetween a switch and firewall, that also had a device running wireshark or similar capture software connected, due to the way a hub operates, would I be able to read ALL of the ...
0
votes
0answers
133 views

Web Site Access - Port Whitelisting

I am able to access a certain website https://buzzlightyear.acme.com:68080 from within a corporate network (Obviously the default https port 443 has been allowed in the windows firewall of the machine ...
1
vote
1answer
601 views

How to find a website behind a Firewall? [closed]

Some context for my question: I'm currently studying Information Security, and this is for an assignment from my teacher. For my assignment, I received two IP addresses. I did a port scan with nmap ...
-2
votes
1answer
221 views

Firewall can detect suspicious file over HTTPS [duplicate]

A firewall/router can intercept HTTPS traffic, analyse it and detect suspicious file download for example. From my understanding, it is acting as a proxy and/or a MITM device. If it is capable of ...
0
votes
0answers
122 views

IP Encryptor and Firewall

Firewalls implement IPsec VPN and perform packet filtering. IP Encryptor, on the other hand implements IPsec VPN and achieve security goals (confidentiality, integrity and authentication). What are ...
1
vote
1answer
245 views

Separation of devices for VPN / Firewall [closed]

Our company has two separate firewall devices from different vendors (Checkpoint / Cisco) for firewall and VPN access. We're currently evaluating the possibility of migrating to a newer, clustered ...
0
votes
1answer
113 views

Block a file from being accessed over the internet

I keep my client data in a password protected Excel file. For added security, I would like to block access to this file from potential hackers on the Internet. Is it possible to block access to a ...
1
vote
1answer
336 views

Why is Zone Alarm Blocking VMWare Virtual Network Editor?

I have version 15 of VMWare running on my Windows 10 computer. When I open the Virtual Network Editor and try to add a bridged connection, I get an error saying: Cannot change network to bridged: ...
0
votes
0answers
70 views

standards reference to perimeter security

I have the following problematic that I am currently dealing with. I have two zones/perimeters that need to be interconnected, some standards protocols have to be whitelisted such as HTTP, FTP, SSH ...
1
vote
2answers
183 views

Security measures to take upon acquiring a new laptop?

I'm planning on buying a regular HP laptop. However, I'm still a novice when it comes to information security. I'm planning on using this laptop to SOLELY login to my bank accounts and NO OTHER ...
0
votes
4answers
2k views

Is it a bad idea using two firewalls on the same PC?

If i'm using windows default firewall and a third-party firewall, is it represents a security issue or I have to worry just with possible conflicts? And what type of conflicts could exists?
0
votes
2answers
298 views

Security of next generation firewall

In recent years there's been a number of IndieGoGo or KickStarter projects for smart device protection, or next-generation firewalls. Some examples are: Anonabox, Cujo, Dojo, Firewalla, Keezel, ...
1
vote
2answers
885 views

How does TLS traffic impact firewalls?

If I have an open port on a firewall it means that I can receive traffic on that port. If it's unencrypted I assume that the raw data is just allowed through. If TLS is being used, does firewall ...
0
votes
1answer
120 views

Network diagram based on Cisco ACL and other firewall rules [closed]

Are there any tools for automated building network diagram from ACL rules or any other firewall rules?
3
votes
1answer
3k views

Ports Showing Closed/Filtered in Nmap Scans

hopefully this isn't a stupid question.. I am running some nmap scans and I get a list of ports that show closed. Why would they even show in the scan report? Can these be exploited further with other ...
1
vote
1answer
2k views

What is the difference between Anti - APT (Advanced Persistent Threat) and ATP (Advanced Threat Protection)?

Like the question says, is it the naming difference only or are they entirely different?
1
vote
1answer
411 views

Why would my firewall be blocking external source and external destination IP's that I dont own? [closed]

In my Cisco ASA firewall logs I'm seeing events being blocked with an external source IP and a external destination IP. This is happening in the same event log. An example would be: TCP access ...
2
votes
2answers
5k views

Firewalls vs DMZ

What's the difference between Firewalls and DMZs? These terms seem to overlap at time and I'm not clear on the difference. Maybe a DMZ is achieved using firewalls?
-1
votes
1answer
208 views

Detecting and blocking TCP VPN connections that bypasses existing VPN detection software

I help manage a small college campus network and students are not allowed to visit certain sites and download using torrents. Currently I'm able to block UDP VPN connections, but TCP VPN connections ...
0
votes
0answers
2k views

Windows Firewall blocking local access to SQL Server?

I have an AWS virtual machine running a web application on IIS that connects to a SQL Server database (on the same machine). Recently, I have noticed that there are a plethora of failed login attempts ...
0
votes
0answers
180 views

Windows Firewall - How do I know that I have completely blocked a program?

I have a specific software that I cannot let out to the internet but it is crucial that it has access to the local network. I can create an inbound and an outbound Block rule for the main application'...
1
vote
0answers
347 views

OpenAppID with Snort on pfSense [closed]

I'm using OpenAppID with Snort on pfSense, it actually work but when I view some script detector, it just detect by http pattern, which I can replace by using snort rule (with "content" option). So ...
0
votes
1answer
2k views

Difference between a behaviour-based security and traditional firewall?

Difference between a behaviour-based security and traditional firewall? As I have searched the web and honestly cannot find anything about it.
0
votes
1answer
99 views

Are there any alternative methods for reverse connections that bypass firewalls?

I'm doing a PenTest on a server. I have an RCE vulnerability on it, but when I try to do a reverse connection via netcat, the firewall blocks it. Is there any other methods used for reverse ...
2
votes
2answers
5k views

How do the CVE-2018-10562 and CVE-2018-10561 exploits work?

https://www.vpnmentor.com/blog/critical-vulnerability-gpon-router/ Firstly, the use of 'GPON' I find misleading because this vulnerability is to do with the routers and webservers and not the access ...
1
vote
0answers
231 views

Weak ciphers in TLS VPN

We have a firewall out of our firm network and administrators connect to this firewall by VPN over TLS. Scanning this firewall, the vulnerability scanner get us some warning as the 443 port allow weak ...
3
votes
1answer
209 views

Block Outbound Connections by Country

We want to reduce the number of phishing sites that our users can get to. Would it be useful or more problematic to block outbound connections by geo IP? We already block many inbound connections by ...
0
votes
1answer
393 views

Can Snort or Suricata *edit* packet on the fly?

I know that they can detect traffic by rules, but can they modify packets on the go? For example, not only detecting HTTP GET but also adding headers to the GET packet. If they can't, is there an ...
2
votes
0answers
82 views

Beginner UFW question about destination any

I'm learning about UFW with a Raspberry Pi and I don't a couple of things when it comes to UFW rules. Can anyone help me suss a couple things out? My first question is about the destination any. If I ...
3
votes
1answer
179 views

Providing access to Git repo behind a Firewall using Certs/Keys for Authentication

We have a Git repo sitting behind a firewall. As I see it, there are two ways of authenticating/accessing the Git repo: Add a Reverse HTTP Proxy in the DMZ that communicates with the Git repo. This ...
1
vote
2answers
161 views

In what situations should a node ping/not ping?

I was recently looking at a network in which the client-machines could access a webservice endpoint but could not ping it. And there are other machines that can ping the webservice endpoint, but which ...
0
votes
0answers
790 views

Filter/Block OpenVPN clients' access to a specific website

As stated in the title I would like to restrict VPN clients' access to specific websites. More specifically, I push the route for 5 websites to the clients via the server config. However, I would ...
0
votes
2answers
156 views

Why should I bother having a firewall on servers?

In the case of a server, the only applications that are running there are the ones that I've setup, so you don't just have random users downloading & running malware. The only ports that are open ...
0
votes
1answer
634 views

Country Blocking

I use a Meraki firewall and want to block outside attack attempts. Is there a list of countries that are known to be malicious? I want to load them into the system and GEO block them. I know that some ...
1
vote
2answers
328 views

Fortigate Creating Millions of DNS events to standard domains [closed]

I am trying to tune our SIEM and noticed that we are receiving millions of DNS records every day from the same domains. These are: update.microsoft.com swscan.apple.com softwareupdate.vmware.com ...
0
votes
1answer
315 views

Secure onion router setup [closed]

I would like to setup a Raspberry Pi as an onion router, but I have some questions about it. At home I am using a Fritz!Box to connect to the outer world (to the net of my ISP). Would it make any ...
0
votes
1answer
110 views

IPsec down with unusual SNMP traffic [closed]

Time to time IPSec tunnel status become down, with unusual SNMP Traffic. when I disable and enable port manually, it become normal. I am using 200E fortigate firewall. Have you any idea or previous ...
1
vote
1answer
160 views

Types of firewalls to implement to reduce DoS attacks in POS systems

Would you need an internal, external and a host-resident firewall for each POS client?
-1
votes
1answer
765 views

How to safely expose a computer to the Internet with a public IP

Our LAN is configured behind a load balancing router, in turn connected to a modem assigning public IPs to connected devices. I am required to randomly test the connection effective throughput, ...
1
vote
1answer
713 views

How do I configure a home router to block traffic to and from specific geographic regions? [closed]

My mom keeps typing in wrong URLs with typos and getting sent to Chinese typosquatting malware or fraud sites, so I want to configure my home router to block all traffic to and from China as much as ...
1
vote
1answer
1k views

Do I need two firewalls or is one enough?

We have a bunch of company devices (servers, desktops, laptops, company-issue phones, etc). All of these devices are company devices, every employee uses them just for business. All devices should ...
1
vote
1answer
717 views

Understanding port scanning with firewall enabled

My objective is to do a port scanner in windows and find the ports which are open. Suppose, I run an application which opens up a port 8000. Now I create a new inbound rule to block all incoming ...
2
votes
2answers
797 views

Do I have to block UDP ports when I launch my own server with a public IP?

I am trying to give better security to my Raspberry sever. When I installed UFW, I allowed just port 80/tcp and my own high port for SSH communication, and by default are all others ports "deny". ...
3
votes
1answer
163 views

Firewall Showing 1,000's Of Strange GET Parameters Being Sent To Login Page?

So I woke up today, and checked my Firewall Events on CloudFlare for my website like I do normally. Most of the time I'll just see thousands of failed SQL injection attempts, but this morning I was ...
1
vote
0answers
208 views

health check to test haproxy -- request deny with 200. good idea?

I have been working on a multi-provider redundant load balancing solution using HAProxy, AWS, and Cloudflare. I have a solution, and I believe it will be secure, but I am looking for further ...
0
votes
2answers
152 views

What is the thought process behind, Endpoint protection is better than firewalls?

I keep reading about, and seeing people post and recommend in the oddest places, that strong endpoint protection is better than having a in-service/supported/receiving security updates firewall. What ...
5
votes
1answer
573 views

How can Nmap bypass Windows Server firewall rules?

I need to block all communication (inbound/outbound) from server A to server B (all ports/all protocols). Server A should communicate with every machine except server B. I can't place firewall rules ...
-1
votes
1answer
77 views

Infection of malware

Lets say, My firewall is configured to block any incoming connections My browser doesnt allow any traces and scripts I have vpn on My browser always asks before downloading files My browser doesn't ...
1
vote
0answers
207 views

UFW (Uncomplicated Firewall) Question

I was wondering if there's any benefit of adding following rules to a Raspberry-Pi directly exposed to the internet: sudo ufw deny to 0.0.0.0/8 && sudo ufw deny to 169.254.0.0/16 && ...

1 2 3
4
5
22