Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 8 replies
  • Answers 2 answers
  • Subscribers 40 subscribers
  • Views 2437 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IP-Adressen freigeben

Lubos Novy

Hallo zusammen,

in unserem Betrieb wurde heute ein EC-Zahlungsterminal von unsere Bank installiert. Ich muss für die Kommunikation bestimmte externe IP-Adressen mit Ports freigeben.
Das habe ich unten "Regeln und Richtlinien" erledigt. Irgendwo mache ich aber was verkehrt. Anbei Bild:

Unten "Zahlungsterminal_IP" sind die IP-Adressen von der Externe Quelle aufgelistet. Unter Dienste dann die Ports.

Ich habe auch schon eine Ausnahme bei "Web" hinzugefügt. Leider auch ohne Erfolg.

Vielen Dank im Voraus für Ihre Antworten. 

Viele Grüße

Lubos



This thread was automatically locked due to age.
Parents
  • 0

    Do we talk about external access or internal access?

    Your rule will allow the WAN Host to access a internal Ressource via NAT. 

    __________________________________________________________________________________________________________________

Reply
  • 0

    Do we talk about external access or internal access?

    Your rule will allow the WAN Host to access a internal Ressource via NAT. 

    __________________________________________________________________________________________________________________

Children
  • 0 in reply to LuCar Toni

    I need both direction, the terminal should send and receive from the ip-adress list. 

  • 0 in reply to Lubos Novy

    I am assuming, you do not need a DNAT Firewall rule.

    XG is a stateful firewall. That means, the connection will build up from a Client to a Server. You are doing this in a firewall rule (LAN-WAN). XG will take care, that the packets going out and coming back are allowed. 

    You do not need a firewall rule, allowing the server to reply. 

    __________________________________________________________________________________________________________________

Unfiltered HTML