Default firewall rule question

Brock,

you need to create a default deny rule at the bottom and make sure that traffic is logged.

Regards

Thank for the help.

One more question is there any other changes I should make to make it more secure? This is just a simple domain network with one subnet.

For every firewall and security system in general, you should be as more restrictive possible.

Do not create a rule Lan to WAN where every service is allowed, web filtering is not set, ips, etc..

Regards

So regarding the ips policy. By default it's set to log only not Block.

Is it ok to use the lan_wan and log/drop ? I'm pretty new to ips right now. I know it will need some fine tuning.

Morning guys,

Hope you find this mail in good health , currently my setup has the below firewall by default, the networks i want to allow are

Is it OK to edit the default _network_policy ( which was created automatically ) or should i create a new one that allows above networks.

Also please advise on how to create a firewall that denies all other

Appreciate your cooperation as always

Thanks

Raj