Search the Community
Showing results for tags 'firewall'.
-
http://i.snag.gy/yD2i9.jpg Link: The best kind of network protection : funny [Reddit]
-
Hi, new setup for work we're trying to do, however have had some problems. We've installed a new 2012 R2 setup with Remote Desktop and RemoteApp, Web Access, Gateway etc on different servers. Works great internally and we can publish Apps and access Desktops. Our internal domain is along the lines of "ad.contoso.com". Our office has a dynamic IP and we are using the .myfirewall.co domain provided by Sophos as a DDNS host which refreshes every 4 minutes. We want to publish RD Gateway for users over port 433, we're not worried about certificate errors as we can fix this by deploying the certificate via Group Policy. However, we are confused regarding the setup and how to get it all working over the internet. We want all RemoteApps/Desktops to be accessible over SSL over the internet, however forwarding port 433 to the gateway does nothing, as it's not on the same server as the web role. We are confused at the setup also, as our AD FQDN is internal only and doesn't resolve in the public DNS records for obvious reasons?! What do I have to do to get this working? You can be general with instructions, or specific to Sophos XG if you know! First time we're doing a setup like this, however want this to work. Any ideas you've got, let me know! Thanks, Whistler.
-
Morning all, we have been having problems for ages now and can't find what the problem is. We use Smoothwall for our filtering, and Watchguard for our Firewall. On a regular basis (daily, sometimes every other day), we loose connectivity from our smooth wall to our watch guard (shown in Smoothwall as "gateway failed"). After 18 minutes, the connection resumes. This resumes without touching Watchguard or Smoothwall - no reboots required. Luckily Smoothwall have set up a failover port, which kicks in and connects to a different port on the Watchguard during the outage so our end users at worse see a 20 second "blip" which is solved by a refresh. The dropouts happen around the same time of day when staff arrive / start to log on en-mass (between 8 and 9am). To cut a long story short, Watchguard say "they can't see anything wrong" and Smoothwall say "Watchguard are dropping DNS packets". I say this is crazy and we need it fixing! The dropouts only appear during term time, so for example over christmas break we didn't have any users logged on to our domain and we didn't see any dropouts in the logs. If i connect a laptop directly on the WAN link then there are no ping drops. So... could the problem be linked to a rogue machine logging in and doing something funky? Is it one user that runs a certain service which throws things off? Do I need to go and hit the Watchguard with a cricket bat and hope the problem goes away? On a separate note, but an example of weird stuff happening, years ago we had a machine running OS X Lion, and every time that machine connected to our SAN, it sent the SAN in to a panic. We patched the SAN and things seemed ok. Now I'm not saying this is SAN related, but it shows how such a small thing can cause a huge problem. ANY help would be muchly appreciated. -
Do you use the Windows Firewall in your environment on desktops or other windows clients? Doesn't matter what version of windows. Any input as to why you have enabled or disabled would be great.
-
Morning all, I'll be starting a "How To" series shortly covering Sophos Products, mainly XG, UTM & Cloud Antivirus. Happy to cover topics you would like also so if you have anything you would like covering in a short video - please do let me know and I'll provide Kind regards James
-
Palo Alto Networks will be running their first Cybersecurity Summit in London on the 21st March. It is free to attend. I wanted to let you all know, especially for those around London as this should be a great day. This day is for end-users only and provides a great opportunity to network with others and hear from some great speakers. Below is the outline of the session. To register and to find out more information, including the full agenda, you can visit their landing page: Palo Alto Networks Cybersecurity Summit This year's theme, "Disrupting the Cybersecurity Status Quo", acknowledges the rapid pace of change in cybersecurity in recent years and the readiness and need for market disruption. In a digital world where adversaries take advantage of increasingly affordable technologies and leverage automation, we’ve seen, in response, an explosion of cybersecurity product innovation to counteract attacks. A big challenge for enterprises constrained with a lack of skills, resources and budgets is that accelerating innovation in cybersecurity creates a paradox that makes the consumption and usability of that innovation more difficult. You will discover how Palo Alto Networks is leading the way in that disruption, and how your organisation will benefit. Speakers include: Nir Zuk, founder and chief technology officer, Palo Alto Networks Greg Day, CSO EMEA, Palo Alto Networks Attend to find out how Palo Alto Networks is disrupting the cybersecurity market to help customers consume and use innovation faster. Learn how Palo Alto Networks Next-Generation Security Platform, powered by automation and artificial intelligence, helps prevent successful cyberattacks. Get up to speed with the latest network, cloud and endpoint security innovations and leave with new ideas to better protect your business. -
Hi, the head of PE asked me to download some software called ‘Anki’ https://apps.ankiweb.net/ but even though the top level level domain is whitelisted in our Sophos web appliance, the software errors when trying to ‘sync’. Just wondered if anyone out there has any knowledge of this software and what you did to get it working? The error states that ‘A network error occurred’. os error 10061. Thanks -
We're running into some problems with our system and want to investigate different support companies (apart from B4B) to handle our Yeastar and firewall configuration. Likely this could be done remotely. I've drawn a blank on firms in Ireland who support Yeastar. Can anyone recommend a Yeastar-supporting phone company?
-
Moving away from LGFL Web filtering/Firewall
xicor posted a topic in London Grid for Learning (LGfL)
Hi All we have 3 sites with LGFL and so far we've been using LGFL web filtering but to be honest I'm getting fed up with web screen and the lack of any control over the firewall, some of you might have seen my previous threads about this and despite various promises from LGFL this issue remains several years later and web screen is still looks it was made by a graduate at uni So..... I've decided to slowly move away from my reliance on LGFL's web filtering and firewall and just get my own and have complete control, I'll set the LGFL connection to be completely unrestricted and just use my own firewalls/filtering etc. in your experiences what has worked very well with web filtering and firewall ? Thanks in advance! -
Codecademy Learn SQL behind Smoothwall
J_Worth posted a topic in Internet Related/Filtering/Firewall
Hello everyone, Trying to get Codecademy Learn SQL but it is refusing to work. Looking into it in more depth it would appear that our Smoothwall proxy is blocking WebSockets (both WS and WSS). How can I allow WebSockets through the Proxy? If I set my work computer to bypass the Guardian/Proxy then it functions as expected. Many thanks in advance. Kind regards, -
Hi, We use the YHGFL SMS vpn solution in our schools but I am unable to address the server by host name in a couple of our schools running Server 2012 R2 environments. Connection to vpn is successful but when trying to access drives mapped by \\hostname\Share fails with the following error. "The system detected a possible attempt to compromise security. Please ensure that you can contact the server that authenticated you"- I can access without issue by IP address only but I do not wish to use ip mappings in these schools A bit about the environment - single server 2012R2 DFL and FFL. Clients running Windows 7 with a host file entry for the server - server runs infrastructure services, ADDS, dhcp, dns, file and print etc. I stumbled across an article that suggested opening port 88 (udp & tcp) on the server firewall - this has been done - I also noticed that group policy updates etc fail due to lack of connectivity to the server and that the vpn adaptor uses an ip on a 24 bit subnet where as the schools are on 21bit. I digress, posting this in hopes that someone has seen and fixed this problem or one of the tech bod's at Y & H have the answer? Thanks in advance, Chris (MINT) -
Hi All, Just wondering if I could have some rough idea of the costs for a Firewall and Web Content filter management hardware solution. I've had a few quotes, but management believe "no one is paying that sort of money" and that "everyone else is getting it much cheaper". Specs to include, Firewall for approximately 300 people, Web content to include layer 7 and Bandwidth management on a 3 year deal. How much per year? -
Has anyone got one, are they as good as all the calls I get claim?
-
Hi Wasn't sure which area to post this one in as it's Windows but also CC3 and firewall related. Let me know if I need to move it :-) I have a teacher using Moodle but on his laptop he gets problems where the RMSmartCache proxy stops him navigating around at seemlingly random points. E.g. he'll log in, be using it for 10 mins and then when tries to move to another page within Moodle, the proxy/firewall error reports he cannot get to the page. This is not the RM blocked warning, just the smartcache box reporting no access. The Laptop is set up on XP using CC3 and on IE7. Any ideas? I'm stumped at the moment. Cheers Nozza
-
So, I'm having a play with IPTables, with the aim of getting rid of our ISA box (there's no need to pay for a proxy!) The thing that is odd about our network is this - it is a single port 'firewall', as we are on a WAN. So, what I'd like to do is this, port forward all requests for port 80 to another web server. I have the following rules in the iptables.up.rules file in /etc/ (created via webmin): -A PREROUTING -p tcp -m tcp --dport 80 -j DNAT --to-destination 10.5.143.125:80 -A FORWARD -p tcp -m tcp -d 10.5.143.125 --dport 80 -j ACCEPT Yet, when I navigate to the that machine in a browser, nothing happens. It just hangs. Any ideas?
-
We have a Sonicwall TZ210 which refers web requests to a Websense server to check if the request is permitted, etc. I am trying to replace the old websense server (crashy, no disk space 2003 P2V conversion) with a new 2008 vm. However the sonicwall refuses to 'see' the websense server - simply states "server is not responding" I am fairly new to both Sonicwall and Websense, and whilst there seems to be lots of documentation on both, there seems to be very little on using them together. The instructions seem to be - put in the websense ip address into sonicwall and turn on for zone. But not much help when it goes wrong. Is there anyone who uses these products together who could give me a place to start. My install is new (7.7 web security) and pretty much defaults all the way. Any suggestions appreciated! -
I'm receiving the following on my Firewall log, an entry every second. It's been happening since upgrading from Glamis to Inverness-8 approximately a week ago. Time Inbound interface Outbound interface Source IP Destination IP Protocol Source Port Destination Port Rule Action 1:31:24 PM Port 2 (EXTERNAL) N/A (DA Server) (SW Ext Iface) TCP (6) HTTPS (443) 53233 Bad external traffic Reject The weird thing is that traffic from the Direct Access server is being blocked at the *external* smoothwall interface, to which it shouldn't have a route except through the internal interface. Any idea if this is typical, or if I have a bad rule somewhere? The bizarre thing is that from the look of my Helpdesk queue, Direct Access still works! -
Our school is bringing in a laptop scheme, where our students buy the device, we set it up and then distribute it, however the device is essentially the students'. Obviously I can't add it to the school domain, but what GPO can I change to secure the devices when they come onto our site? They will mostly be using remote desktop connections to access the school's network. What do I need to look out for? What can I implement? To prepare the laptops to make them as secure as possible before distribution?
-
This is more of a tip than ask for help. I spent four hours yesterday trying to figure out why I couldn't add a new server to the domain. After wrestling with dns and tcp-settings the penny dropped...the only change made since previously adding machines to the domain was turning on the window's firewall. Even though I am following the advice given in the kb article below I am still having problems when the firewall is running. I will have to continue to look into port exceptions for 2003. I am also left wondering if part of my problem is adding server roles before turning the firewall on. Should the exceptions be added automatically i.e. when you add AD with dns, or are they always added manually. Hopefully, this saves someone a few hours :-) Service overview and network port requirements for the Windows Server system
-
In a simmilar protest to the one performed by New Zealanders last year a protest is scheduled for Australia day, blacking out the backgrounds of prominant Australian sites to protest their overreaching firewall. Internet filter protesters set to fade websites to black on Australia Day | News.com.au The Great Australian Internet Blackout The blackout uses a script so that it can be easily undone with a single click to allow reading of the site. Hopefully this will have the same affect of convincing the Australian government to reconsider its rather cloak and dagger filtering activities before they are abused further than they are now.
-
Right, so all somerset schools have been given a CachePilot (well, we got a Plus model) and as our ISA server is due for replacement, I am trying to configure it to take over. So, can anyone tell me how I get the blooming thing to forward an RDP port? Ie. I have remote desktop set up as a service, but there doesn't seem to be any way to get it to actually do the port forwarding - from the internet. Any ideas? Or should I simply tell my boss that it is time we got our VPN set up instead? EDIT: Also, it is running V5.1 of the software.
-
We have a smoothwall multi tenant build across our MAT: 1 x Parent S15 in secondaries 1 x Child S10 in secondaries 15 x Child S1 in primaries In the past been a big advocate of their solution in education however, Our secondaries are split-site so we depend on internet breakout and smoothwall VPN for some essential services, for example our canteen civica cashless system, papercut and Peice of Sh* Financials (PSF) Until our suppliers offer a proper cloud based solution for these services, we are at the mercy of the VPN mutli tenant build solution provided for by smoothwall We seem to be facing issues on regular basis, VPN control randomly failing, web content filter service not working, system logs getting full despite settings telling logs to recycle. A handful of S1 boxes where handed over to us with default username and password along with SSH access so got comprimised, we where blamed for this by the installations team for not changing them after they where the ones who had configured the multi tenant build. Kids have been unable to eat as we are cashless and cannot checkout at the tills, our examination officer has been unable to download papers this morning, when printing goes down, the guy who sells pitchforks to the staff mob around the corner rubs his hands together in glee, it's becoming so disruptive I'm now no longer an advocate of their solution and looking for alternatives Yes we have backup procedures but still its not ideal when i or the senior techs are offsite trying to implement them remotely on a last minute basis What alternatives are their for a MAT build, i realise every company has its flaws, i just want to keep options open when it comes to renewal
-
Assuming cost come back equal, which firewall + web filter would you deploy in your organisation tomorrow: Sophos XGS WatchGuard Fortinet Palo Alto Other We are currently investigating the list of vendors above for a multi site firewall project. If your chosen firewall provider isn't listed above, which would you choose and why? We would need the following functionality: Usual Firewall + Web Filtering Layer 7 App control DHCP server RADIUS accounting SD-WAN (site to site VPN) Interested to know everyone's thoughts. * disclaimer We are currently a Sophos XG house and we aren't unhappy with it, but we are not investigating the market to see if there is anything worth investigating. I'd be very interested to hear comments from those that moved from Sophos XG to something else and how they found the alternative. Usual grass isn't always greener...
-
Hi All, I've recently had our firewall moved over from Sonicwall to Smoothwall and our BYOD Wireless has stopped working and I'm after some advice. Smoothwall is acting as a DHCP server for the BYOD VLANS (MAT). When the device connects through the Smoothwall RADIUS (Authenticates fine). The Device asks for an IP address, Smoothwall then assigns it an IP address, then the device asks again for an IP Address...Then it just loops and then eventually times out. It's like the end device is not accepting the IP address it has been given. I've tried setting a static IP address and no luck either. Ruckus are adamant everything is working fine on their end and so is Smoothwall but I can't find what the issue is with the devices not accepting the IP address...Any ideas will be hugely grateful as I'm pulling my hair out with this one! Thanks -
Hi All, I am currently trying to install the O365 apps to do away with Office 2019, I have tested the O365 setup install in task manager on 2 pcs, one connected to our firewall and one that just goes straight out to the internet, the pc which goes straight out installed office however the PC which was going through our firewall didnt, has anyone has this before , what IP/sites should I whitelist in order to install the o365 package Thanks in advanced
