Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 1 reply
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 580 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Automatic VPN Rule - this function is very dangerous

BerndFeist

Very nice functionality :-((

For our WAN and DMZ wer have several public IPs (in fact we have 3 DMZs and 3 WANs on two different providers. I created an IPSec tunnel to reach the LAN, DMZ and WAN on the central site from the remote site through the IPSec tunnel "from the inside/routed through the corporate network" in "Site-to-site" mode.

Configured the remote and local LANs on the central site.

Selected "Create firewall rule" in the IPsec Tunnel.

This created an active (!!) firewall rule with source zone Any, destination zone Any and all the company networks of DMZ,LAN,WAN in source and destination network. 

This is against everything security people tell you, of course the rule itself, but also how it is created and the mindset that is implemented on the GUI. 

(BTW I'd have expected that this would create a rule that is going into one direction)

I'd like to report this as a bug that should be removed ASAP ...


Regards,
BeeF



This thread was automatically locked due to age.
Parents
  • 0

    It will generate a firewall rule based on your Remote/Local Networks. Basically because it cannot find the Zone most likely in most scenarios. If you place those networks / IPs in remote/local networks, it will generate a FW Rule for this traffic.

    __________________________________________________________________________________________________________________

Reply
  • 0

    It will generate a firewall rule based on your Remote/Local Networks. Basically because it cannot find the Zone most likely in most scenarios. If you place those networks / IPs in remote/local networks, it will generate a FW Rule for this traffic.

    __________________________________________________________________________________________________________________

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?