<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to check if server is behind a firewall or not. in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/how-to-check-if-server-is-behind-a-firewall-or-not/m-p/2462034#M238207</link>
    <description>&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Hi Everyone,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;For one of our customer remote sites i need to open some specific ports between the servers.&lt;/P&gt;&lt;P&gt;For this i need to config the ACL on firewalls.&lt;/P&gt;&lt;P&gt;Say Source is 192.168.50.x&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Source is 172.16.10.x&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Source is 172.30.50.x&lt;/P&gt;&lt;P&gt;Destination is 172.16.10.x&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I do not know deatiled network topology at the remote site.&lt;/P&gt;&lt;P&gt;I know the servers default gateway and traffic from source server to&amp;nbsp; to destination goes via few firewalls.&lt;/P&gt;&lt;P&gt;Need to confirm if i need to track which firewalls traffic flows from source to destination server best way is to remote in to server gateway and&lt;/P&gt;&lt;P&gt;do the sh ip route 172.16.10.x? and check the next hop device if it is firewall or not?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Also in some case source and destination server have same subnet so in this case i can assume no ACL is needed as they are behind same network?&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;&lt;P&gt;Mahesh&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Tue, 12 Mar 2019 04:14:24 GMT</pubDate>
    <dc:creator>mahesh18</dc:creator>
    <dc:date>2019-03-12T04:14:24Z</dc:date>
    <item>
      <title>How to check if server is behind a firewall or not.</title>
      <link>https://community.cisco.com/t5/network-security/how-to-check-if-server-is-behind-a-firewall-or-not/m-p/2462034#M238207</link>
      <description>&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Hi Everyone,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;For one of our customer remote sites i need to open some specific ports between the servers.&lt;/P&gt;&lt;P&gt;For this i need to config the ACL on firewalls.&lt;/P&gt;&lt;P&gt;Say Source is 192.168.50.x&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Source is 172.16.10.x&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Source is 172.30.50.x&lt;/P&gt;&lt;P&gt;Destination is 172.16.10.x&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I do not know deatiled network topology at the remote site.&lt;/P&gt;&lt;P&gt;I know the servers default gateway and traffic from source server to&amp;nbsp; to destination goes via few firewalls.&lt;/P&gt;&lt;P&gt;Need to confirm if i need to track which firewalls traffic flows from source to destination server best way is to remote in to server gateway and&lt;/P&gt;&lt;P&gt;do the sh ip route 172.16.10.x? and check the next hop device if it is firewall or not?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Also in some case source and destination server have same subnet so in this case i can assume no ACL is needed as they are behind same network?&lt;/P&gt;&lt;P&gt;Regards&lt;/P&gt;&lt;P&gt;Mahesh&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2019 04:14:24 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/how-to-check-if-server-is-behind-a-firewall-or-not/m-p/2462034#M238207</guid>
      <dc:creator>mahesh18</dc:creator>
      <dc:date>2019-03-12T04:14:24Z</dc:date>
    </item>
    <item>
      <title>Mahesh,If your remote partner</title>
      <link>https://community.cisco.com/t5/network-security/how-to-check-if-server-is-behind-a-firewall-or-not/m-p/2462035#M238208</link>
      <description>&lt;P&gt;Mahesh,&lt;/P&gt;&lt;P&gt;If your remote partner is using the same private network addressing as you (172.16.10.0 network) then you will have to use some NAT to change how they appear to your sources. Otherwise they won't be able to distinguish the path to "your" 172.16.10.0 subnet from "theirs". You will also have to NAT your sources in the 172.16.10.0 network to appear as something else to them or else they will have the same problem.&lt;/P&gt;&lt;P&gt;There a couple of good external sites with examples of how this works. Please refer to t&lt;A href="http://www.packetu.com/2012/01/02/asa-vpn-with-address-overlap/"&gt;his packetu.com posting&lt;/A&gt; and &lt;A href="http://packetpushers.net/how-to-build-an-ipsec-vpn-with-cisco-asas-overlapping-address-space/"&gt;this packetpushers one&lt;/A&gt;.&lt;/P&gt;</description>
      <pubDate>Sat, 24 May 2014 14:53:16 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/how-to-check-if-server-is-behind-a-firewall-or-not/m-p/2462035#M238208</guid>
      <dc:creator>Marvin Rhoads</dc:creator>
      <dc:date>2014-05-24T14:53:16Z</dc:date>
    </item>
  </channel>
</rss>

