About rmathieson7

rmathieson7 · 05-22-2020

Hi,Has anyone had any issues with these rules allowing traffic they shouldn't be ? We've had this twice that we know of. The first time around someone added a rule that wasn't specific enough and didn't enable logging so there were lessons learned ...

rmathieson7 · 02-19-2019

Hi,I noticed that port scans had been querying all the internal hosts with bidirectional NATs defined which is obviously expected. But I also noticed that odd internal hosts that shouldn't be routable were also in scope on occasion. Further investi...

rmathieson7 · 06-01-2020

If the sites you want exposed to the public only listen on ports 81 & 444 then you could to this with a static NAT & just allow those ports through the firewall from the WAN to LAN ? Slightly less common ports so will prevent a little bit of sniffin...

rmathieson7 · 05-29-2020

You're right the encryption will stop the ASA from seeing the packet and therefore won't be able to dynamically open the ports. The passive FTP port range is configured on the server so you could contact whoever manages that, otherwise they tend to ...

rmathieson7 · 05-29-2020

They are access control rules that will need adding to your access control list, I presume the firewall is already configured and has ACLs you can add those rules to ? See the link below, remember to be specific and only allow the ports required to ...

rmathieson7 · 03-28-2019

Thanks, I have since tested this on a lab on an ASA and it behaves in exactly the same way. Happy to accept this as a solution, the more I thought about it the more sense it made and also sounded familiar. Thanks again for the explanation.

rmathieson7 · 03-13-2019

This is a dynamic unidirectional outbound Nat so there are no connections in the table inbound. Just many outbound that should allow traffic back in as per the state table, but I would argue only from ips that we have initiated connections with ?

Member Since	‎04-03-2018 04:32 AM
Date Last Visited	‎06-15-2020 08:41 AM
Posts	8
Total Helpful Votes Received	10

User Statistics

User Activity

Firepower URL / APP filtering

Firepower PAT bug ?

Re: Open Firewall Ports

Re: ASA, Passive FTP (Explicit FTP with TLS) does not work.

Re: Open Firewall Ports

Re: Firepower PAT bug ?

Re: Firepower PAT bug ?