About Rayw

Rayw · ‎07-14-2023

We have a new CISO. he has created a new firewall policy that states all Internet connections first have to have a boundary router with ingress and egress filtering to protect against IP address spoofing and directed IP broadcasts. Then a firewall that does IDS, ACLs and all the firewall protection. Is this truly a best practice. Does have one have a router then a firewall?

Rayw · ‎07-14-2023

Do any of you have a policy requirement that a boundary router will function as the network perimeter interface and accept traffic from the Internet Service Provider before the firewall? All boundary routers will also implement ingress and egress filtering to protect against IP address spoofing and directed IP broadcasts?

Rayw · ‎05-10-2022

I have a SCADA network that I have firewalled segmented off from the business network with a Meraki MX84. The business network is a large routed MAN over fiber. All private IP addressing. I now need to have a computer across the MAN access the SCADA network. Could I turn on VPN client on the MX84 and have the computer do a VPN over the inside MAN private IPs to the MX84 in order to create a secure tunnel?

Rayw · ‎03-10-2022

I made a simple port change on a MS switch and its been 45 minutes out of date. Anyone else not able to update MS config?

Rayw · ‎12-10-2021

I am blocking the country France and there is a website staff needs to access. How can I whitelist jsut a domain within France? Or do I have to take France off the deny list?

Rayw · ‎11-18-2021

I have an MX100 and am changing ISP so I will have a new set of public IPs. Is there a way I can configure all these changes to NAT rules and WAN interface a head of time to and then apply the changes to make the cut over faster rather than at time of cutover doing all the config changes then?

Rayw · ‎10-25-2021

Does anyone know can you run an OTDR fiber test with a Meraki switch still plugged in and running at the far end?

Rayw · ‎03-15-2021

I got kicked out of the dashboard and then couldnt get logged back in. Now I am getting a ton of email alerts about my VPN tunnels being down.

Rayw

Community Record

Badges

Re: Internet boundary router before firewall policy requirement

Internet boundary router before firewall policy requirement

MX84 proving internal network segmentation

MS config out of date

blocking by Country

MX100 changing ISP

OTDR fiber test

Re: Dashboard Issues?

Re: Dashboard Issues?