Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 3 subscribers
  • Views 6559 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Do I not need a default deny firewall rule to block WAN traffic?

WilliamHoy

I have much experience with other firewalls, specifically Sonicwall appliances.  With those devices, I will typically have a default deny rule like this:

Is this not necessary in a UTM 9?  Everything seems to work fine with only a NAT rule, it just seemed odd to me.  Is all traffic blocked unless otherwise configured, I.E. it wouldn't know what to do with that traffic?

Thanks!



This thread was automatically locked due to age.
Parents
  • 0

    Hi William,

    Interesting question, we do not block WAN to LAN communication via a Firewall Rule. But we must take care of few things like your Global DNS server should not be exposed to ANY network, SSH access should be allowed on a particular IP address and there should be explicit IPS policies in place to prevent attacks.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Reply
  • 0

    Hi William,

    Interesting question, we do not block WAN to LAN communication via a Firewall Rule. But we must take care of few things like your Global DNS server should not be exposed to ANY network, SSH access should be allowed on a particular IP address and there should be explicit IPS policies in place to prevent attacks.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

Children
No Data
Unfiltered HTML