topic Restricted access not working from fmc and ftd firewall in Network Security

Restricted access not working from fmc and ftd firewall

ShareefKooliyodan0444 — Sun, 20 Aug 2023 06:41:16 GMT

Dears,

I have issue with rules ,

i created 2 rules from fmc ,Rule1 deny all internet access for specific network or vlan for example server vlan 172 Network 192.168.172.0 and 172 192.168.173.0 .

and rule2 allow access network or vlan for example server vlan 172 Network 192.168.172.0 and 172 192.168.173.0 only for falcon.crowdstrike.com and windowsupdates.com .

I created rules like above ,rule1 deny is working blocking internet access for all servers but rule2 not working servers cant able to access falcon.crowdstrike.com and windowsupdates.com.

Could you Guyz please help me resolve the above issues.

Thank you

Re: Restricted access not working from fmc and ftd firewall

Marius Gunnerud — Sun, 20 Aug 2023 08:53:03 GMT

I had a little trouble following what your issue is. To my understanding it is the following:

Rule 1 deny rule works.
Rule 2 access from VLAN 172 to crowdstrike and windowsupdate does not work.

Do you have NAT configured for the traffic? Run a packet-tracer to see if traffic is actually allowed through the firewall, if it is not this should give you a reason for the drop.

Re: Restricted access not working from fmc and ftd firewall

ShareefKooliyodan0444 — Sun, 20 Aug 2023 09:15:47 GMT

Yes, nat policy is there, also has internet access for rest of VLan. i need to configure restricted access for above networks.

Re: Restricted access not working from fmc and ftd firewall

Marius Gunnerud — Sun, 20 Aug 2023 09:31:38 GMT

How have you confiugred the access rules then? using FQDN object or URL filtering? If using FQDN is the FTD able to resolve the URLS?

Re: Restricted access not working from fmc and ftd firewall

ShareefKooliyodan0444 — Sun, 20 Aug 2023 09:39:59 GMT

Please check attached , allowed from access policy as you said, but still not work .

Re: Restricted access not working from fmc and ftd firewall

Marius Gunnerud — Sun, 20 Aug 2023 09:45:28 GMT

So you are using both Network object and URL. As long as there are no redirections happening do other URLs, I would suggest removing the URL configuration and just use the Network object.

Re: Restricted access not working from fmc and ftd firewall

ShareefKooliyodan0444 — Sun, 20 Aug 2023 09:54:59 GMT

I removed URL , but the same cant access sites . if unblock from block rule it is working but getting full internet access

Re: Restricted access not working from fmc and ftd firewall

Marius Gunnerud — Sun, 20 Aug 2023 11:58:46 GMT

Could you post the block rule configuration please

Re: Restricted access not working from fmc and ftd firewall

ShareefKooliyodan0444 — Mon, 21 Aug 2023 07:21:10 GMT

Okay , please check attached ,its block rule.