Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall rule for internal web server access

Hi,

Looking for a bit of help, I have an XG210 firewall in place and need to access a webserver via port 80 on the internal network which listens on port 8040.

Currently, with the rule in place, I can see the webpage appearing slowly with some elements just spring to load. When I look at the logs I can see my request coming in and is accepted translating to port 8040  but on the outbound, there is a drop which I think is causing the issue. The following is the detail from the drop rule. I have tweaked the rule to no ends but nothing. 

2021-06-19 21:55:40Firewallmessageid="01001" log_type="Firewall" log_component="Invalid Traffic" log_subtype="Denied" status="Deny" con_duration="0" fw_rule_id="N/A" nat_rule_id="0" policy_type="0" user="" user_group="" web_policy_id="0" ips_policy_id="0" appfilter_policy_id="0" app_name="" app_risk="0" app_technology="" app_category="" vlan_id="" ether_type="IPv4 (0x0800)" bridge_name="" bridge_display_name="" in_interface="" in_display_interface="" out_interface="" out_display_interface="" src_mac="" dst_mac="" src_ip="10.0.62.25" src_country="R1" dst_ip="81.97.0.54" dst_country="GBR" protocol="TCP" src_port="8040" dst_port="2281" packets_sent="0" packets_received="0" bytes_sent="0" bytes_received="0" src_trans_ip="" src_trans_port="0" dst_trans_ip="" dst_trans_port="0" src_zone_type="" src_zone="" dst_zone_type="" dst_zone="" con_direction="" con_id="" virt_con_id="" hb_status="No Heartbeat" message="Could not associate packet to any connection." appresolvedby="Signature" app_is_cloud="0"



This thread was automatically locked due to age.
Parents Reply Children
No Data