Guest User!
You are not Sophos Staff.
hello,
we have SG330 (SFOS 18.5.2 MR-2-Build380) , and we discover that we can access the firewall with broadcast address, how we can desactivate it .
any help
thanks
Hi,
I assume you are talking about 10.10.10.255:4444 in a /24 network? Please post the log entries showing this and then the firewall rule being used?
Ian
hi,
you are right, we can access it with our local broadcast IP address . and we don't have any access related to this access,
we allow access with administration > device access
any advice !!!
please post a logviewer entry showing this and also your network interface configuration in expanded form with critical information blocked out.
Hi ,
hereafter the interface configuration
the access to the broadcast address
the logs show the traffic is dropped, however, access is allowed
any idea !!!
BR,
Hello there,
Most likely you have a bypass of the Firewall.
SSH into the XG and run the following command from the Advanced Shell:
# cishconsole> show advanced-firewall
Regards,
More than likely you have a network mask allowing the 255 address to be valid somewhere your configuration eg /23.