Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 10202 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Business Application Rule - Bidirectional

SophosNewby

Hello, I have another question regarding the business rule creation, when created does this rule automatically create a bidirectional rule by default or must I check "Create Reflexive Rule" to allow traffic to flow in both directions? Also when would you use "Rewrite source address ( Masq).

 

Thank you.

 



This thread was automatically locked due to age.
Parents
  • +1

    Hello,

    If you are hosting server like Webserver, Email server,, you don't need to create any Reflexive Rule.

    XG is a stateful inspection firewall, it will allow all response traffic from the same business rule.

    You should use NAT or Masa when you what to communicate between Public and Private IP network or  you don't have the correct routing table on system or server.

    Good luck!!!

    Regards, Ronak.

  • 0 in reply to SophosNewby

    I am probably going to ask a lot of really dumb questions as I am setting up this device, do Business Application Rules also need to have an accompanying User/Network Rule? If I am setting up admin access to a database on our private LAN is it best to create a Business Application Rule or User/Network rule? I have a specific IP address of the user connecting who needs to manage a Linux server on port 22.

    Thank you.

  • 0 in reply to SophosNewby

    Hello,

     

    As per my earlier post Business rule do not need any additional rules to work.

     

    If your server is on private IP and user who is going to access is on internet you will have to create only Business rule. Network and User rule wont work.

     

    If you want to allow specific IP address to access your server, you need to add all IP/Host in Source Allowed Client Networks in your business rule.

     

    Good Luck!!!

     

    Regards, Ronak.

     

     

Reply
  • 0 in reply to SophosNewby

    Hello,

     

    As per my earlier post Business rule do not need any additional rules to work.

     

    If your server is on private IP and user who is going to access is on internet you will have to create only Business rule. Network and User rule wont work.

     

    If you want to allow specific IP address to access your server, you need to add all IP/Host in Source Allowed Client Networks in your business rule.

     

    Good Luck!!!

     

    Regards, Ronak.

     

     

Children
No Data