Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About DannyR76
DannyR76
Here to help
Member since Feb 21, 2022
Jun 28 2023
Community Record
15
Posts
3
Kudos
1
Solution
Badges
Jun 13 2023
2:22 PM
No rule blocking this traffic. It almost sounds like you want to access a SQL server (somewhere on the internet) from inside your network. If that is the case the default L3 rules I believe are allow all (unless you are denying outbound). If you do not have a L3 rule denying then you should be good to go accessing any services. You also do not need an inbound rule for this traffic as the FW is stateful and will allow that same traffic (initiated from internal network) inbound. Yes, that's exactly what I'm wanting. My problem is I have to "prove" it isn't working. And yes, I wouldn't want a SQL server exposed in any way shape or form. What I wish I knew for sure are the pots required for ODBC. And what protocol(s) It sure seems like it should be working.
... View more
Jun 13 2023
1:02 PM
@PhilipDAth I thought you only had to do port forwarding if it was not the main interface IP address.... Clients will be connecting through ODBC through the firewall (internet) to a URL of the SQL server.
... View more
Jun 13 2023
11:55 AM
Yes, that's what I had. I just wanted to be sure I was doing it correctly. Thanks. I just am never sure about it.
... View more
Jun 13 2023
11:40 AM
Yes, public IP. I have blocking rules but nothing to do with this address and nothing to do with port 1433 (this is what the vendor told us to use - but I'm wondering if you need more for ODBC)
... View more
Jun 13 2023
10:54 AM
Can someone show me what a rule to allow outbound and inbound traffic from a specific IP for an ODBC connection from a remote SQL Server? I can get the connection to work fine from home but not through the firewall at work on the corporate network. We were told port 1433 for this traffic but I'm not sure if that's correct or not.
... View more
Feb 1 2023
5:03 PM
I did. I didn't like the answer and thought I would check here to see if anyone else had run across this.
... View more
Jan 30 2023
9:26 AM
I usually block all but a very few countries using the geo-blocking feature on the MX-84. It has greatly cut down malicious traffic - (to the best of my knowledge). I will say at the outset that firewalls are not my greatest skill set. I have explained that to my users, so if they are going out of country (outside the US) they will tell me and I will unblock that country. It has worked well so far. I have two questions: I have a user going to Sint Maarten, the Dutch side of St. Martin island. There is a geo-block choice for the french side of St. Martin but not for the Dutch side. How do I block/unblock Sint Maarten? Or is it even being blocked in the first place? [I have the IP ranges for both sides but it is a very scattered list.] Is this the best way to geo-block? Or should I even bother? It seems like it stops a lot of traffic (geo-blocking) and I've got only the countries we need allowed in. I figured the more I can close the "window" so to speak the less that can get through that I don't want in.
... View more
Labels:
- Labels:
-
Firewall
Oct 13 2022
6:04 PM
On an MX-84 will a Layer 3 Firewall Rule trump a Layer 7 Rule? For example: I want a certain address and port configuration in a country that I block with a Layer 7 rule to work, so can I create a Layer 3 Firewall Rule to accomplish that? Or do I still have to "allow" the country in the Layer 7 Rule?
... View more
Labels:
- Labels:
-
Firewall
Apr 22 2022
7:18 AM
2 Kudos
@PhilipDAth yes, I actually figured that one out on my own a long time ago. But very good call of course. I think for now I will just make Layer 7 rules to block these until something breaks. Just makes me nervous when it says allow - and the AP is at the other end. Thanks.
... View more
Apr 20 2022
2:33 PM
1 Kudo
My firewall has IDS alerts for a few addresses, it's marking them as "OS-MOBILE Android Stagefright MP4 buffer overflow attempt", and it is allowing them. All on port 80. Why is it allowing this traffic if it shows up as an IDS? The AP is a Meraki AP33
... View more
Mar 21 2022
11:56 AM
Yes, this particular would be open to the Internet and not a limited number of public IPs. Just curious, how are the rules & usage any different on a 1:1 NAT than the firewall. I mean the traffic has to be filtered either way. My comment is curiosity not being a jerk. I just want to learn more.
... View more
Mar 21 2022
11:21 AM
In a small environment with an MX84 what would be the risks of using 1:1 NAT over DMZ. We only have two outside facing servers/IPs. And I'm going to do everything I can to one of them to move it to a cloud application. Do I really "need" the complication of a DMZ? If the application on the server is secure and the 1:1 NAT rules are correct what is the real difference? (I'm not talking about definitions, more just practicality in a small environment)
... View more
Feb 21 2022
10:56 AM
I have configured layer 7 geo blocking rules. There is one server in Germany that I need to allow access and I'm not sure how to go about it. Or I should say what the best way to go about it is. I mean I can always unblock Germany but that's not what I would like to do. I know the server's URL/domain, the ports, and the IP address. What's the best option? A layer 3 rule or a layer 7 rule? What would the rule look like? I should mention I use Umbrella (OpenDNS) but I can't see that would affect anything. Firewalls and rule writing are not my strongest abilities...
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 457 | Feb 1 2023 5:03 PM |
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 2 | 894 | |
| 1 | 967 |
© 2024 Cisco Systems, Inc.
