Access with broadcast IP address

Hi,

I assume you are talking about 10.10.10.255:4444 in a /24 network?  Please post the log entries showing this and then the firewall rule being used?

Ian

hi,

you are right, we can access it with our local broadcast IP address . and we don't have any access related to this access, 

we allow access with administration > device access 

any advice !!!

Hi,

please post a logviewer entry showing this and also your network interface configuration in expanded form with critical information blocked out.

Ian

Hi ,

hereafter the interface configuration

the access to the broadcast address

the logs show the traffic is dropped, however, access is allowed

any idea !!!

BR,

Hello there,

Most likely you have a bypass of the Firewall. 

SSH into the XG and run the following command from the Advanced Shell:

# cish
console> show advanced-firewall

Regards,

More than likely you have a network mask allowing the 255 address to be valid somewhere your configuration eg /23.

Ian

hello;

bellow the output of the cmd

Hello,

Thank you for the screenshot.

Please take a screenshot of your interfaces, only fade the Public IPs, not need to fade the internal ones, and also take a screenshot of your SSL VPN "Show VPN settings" it looks your range is overlapping with your subnet as the traffic you’re mentioning is coming from tun0 interface.

Regards,

Hello,

Thank you for the screenshot.

Please take a screenshot of your interfaces, only fade the Public IPs, not need to fade the internal ones, and also take a screenshot of your SSL VPN "Show VPN settings" it looks your range is overlapping with your subnet as the traffic you’re mentioning is coming from tun0 interface.

Regards,

Hello,

Thank you for your response

I check the config , but I didn't any overlapping between  VPN and LAN network .

NB: Just to clatify I did the test from VPN network .

Best regards ,

Hello there,

I have sent you a PM.

Regards,