Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 26 subscribers
  • Views 2359 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

OpenVPN Firewall Regel

MLeidinger

Hallo Community,

wir haben eine SG135 neu.

Wo finde ich bei den Firewall-Regeln die Einträge für die OpenVPN-Zugänge? Also z.B. dass Port 1193 freigegeben ist nach extern, etc.

Hintergrund ist, dass wir gerne feste Tunnel auf die IP-Adressen einschränken wollen. Auch wollen wir die Standardports ändern.

besten Dank!

Michael

 



This thread was automatically locked due to age.
Parents
  • +1

    Hallo Michael,

    Erstmal herzlich willkommen hier in der Community !

    (Sorry, my German-speaking brain isn't creating thoughts at the moment. [:(])

    If you look at #2 in Rulz, you'll see an implication that there are many firewall rules created automatically by WebAdmin.  For example, when you configure SSL VPN Remote Access to use TCP 1443 on External (Address), a (hidden) firewall rule is created allowing that traffic to be accepted.

    If there's an OpenVPN server that you want your colleagues to reach from behind the UTM, you will need to create an explicit firewall rule.

    All traffic is blocked by the UTM firewall unless there is an implicit, explicit or automatic Allow rule created.  The firewall is stateful, so, unlike the Windows firewall, responses to traffic allowed by a firewall rule will be automatically accepted by the connection tracker.  Again, refer to #2 in Rulz.

    MfG - Bob (Bitte auf Deutsch weiterhin.)

Reply
  • +1

    Hallo Michael,

    Erstmal herzlich willkommen hier in der Community !

    (Sorry, my German-speaking brain isn't creating thoughts at the moment. [:(])

    If you look at #2 in Rulz, you'll see an implication that there are many firewall rules created automatically by WebAdmin.  For example, when you configure SSL VPN Remote Access to use TCP 1443 on External (Address), a (hidden) firewall rule is created allowing that traffic to be accepted.

    If there's an OpenVPN server that you want your colleagues to reach from behind the UTM, you will need to create an explicit firewall rule.

    All traffic is blocked by the UTM firewall unless there is an implicit, explicit or automatic Allow rule created.  The firewall is stateful, so, unlike the Windows firewall, responses to traffic allowed by a firewall rule will be automatically accepted by the connection tracker.  Again, refer to #2 in Rulz.

    MfG - Bob (Bitte auf Deutsch weiterhin.)

Children
No Data