topic Re: traffic flow in General Topics

traffic flow

simsim — Mon, 15 May 2017 17:24:30 GMT

Hi,

I have two zone (trust and trust),

for trust to untrust traffic flow and untrust to trust , do I need to create two security rules ?

Thanks

Re: traffic flow

TranceforLife — Mon, 15 May 2017 17:55:26 GMT

Yes, l would keep the policies separate. More secure and more granular control. But you still can use the below example (not the greatest one :D):

Re: traffic flow

Remo — Mon, 15 May 2017 18:31:28 GMT

From a swcurity perspective there is no difference between one or two rules (assuming that you really want to allow the same from trust to untrust and the other way). Just make sure you use ruletype "interzone".
But actually I would also do it like @TranceforLife and create two seperate rules.

Re: traffic flow

simsim — Mon, 15 May 2017 18:34:01 GMT

Hi,

The screenshot shows from trust to trust and untrust to untrust ?

My question is it really necessary a reverse policy (from untrust to trust ) since it is a stateful firewall .

Thanks

Re: traffic flow

Remo — Mon, 15 May 2017 18:46:53 GMT

Short and simple: No, it's not necessary

Re: traffic flow

TranceforLife — Mon, 15 May 2017 19:11:47 GMT

l think l didn't understand a question properly or the question itself was not clear 😄

Anyway, it all depends from where you are initiating your traffic. With the stateful firewall return traffic is permitted (stateful firewall as you have mentioned already)

Re: traffic flow

simsim — Mon, 15 May 2017 19:56:01 GMT

Hi,

Sorry for the confusion .

If the traffic is originating from the trust to untrust , we have to create a rule (rule1) like source 'trust' and destination 'untrust',

(The return traffic from the same

If the traffic is originating from the untrust to trust ,we have to create a rule (rule2) like source 'untrust' and destination 'trust',

Correct mf If I am worng ?

Thanks

Re: traffic flow

TranceforLife — Mon, 15 May 2017 20:07:45 GMT

Correct 😉