This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Generally Accepted Safe/Best Practice Inbound/Outbound Rules?

Hey fellas,

The firewalls I recently replaced with UTMs performed no outbound filtering. I love the new UTMs but I am finding the administrative burden of creating a rule for every bit of traffic is killing me. For example, I allowed Pandora via Application Control, but the UTM still blocks the iPhone app, which then requires its own rule.

Are there any generally accepted safe rules that most admins put in their UTMs firewall rules? I don't want to blanket allow all outbound/inbound traffic, but it just seems nuts that I need 60 rules for basic internet/app usage.

Thanks!
Jim

This thread was automatically locked due to age.

Parents

0 BarryG over 11 years ago

You'll need to watch these logs:
HTTP Proxy aka Web Protection
Firewall
IPS
Application Control

If the Web Protection is blocking, you may need to create exceptions.
Post entries from the logs.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Jimstigator over 11 years ago in reply to BarryG

Excellent, will do. Headed to that site Monday with an iPAD to dig deeper.

Thanks!
Jim
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Jimstigator over 11 years ago in reply to BarryG

Excellent, will do. Headed to that site Monday with an iPAD to dig deeper.

Thanks!
Jim
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Jimstigator over 11 years ago in reply to Jimstigator

Barry,

Here are some lines out of the Web Protection log.  WP seems to be whats causing the errors - when I turn it off, the iDevices have no issues.  I went on site and confirmed my laptop and Android phone work fine, but all Apple devices have issues.  Kind of blows my mind this isn't a problem everyone has.

Anyway, I added a very basic exemption for "www.cnn.com" which kind of helps... gives errors during advertisements but then plays the actual video.  There has to be a better method.  Do people really add in hundreds of websites to get their iPhones working with Web Protection turned on

As for the WP config, very basic.  Turned on, AV is on.  Block "Suspicious" websites, and Nudity.  I use "Transparent mode".  Confirmed "Bypass content scanning for streaming media" is checked.

Really appreciate the help!
-Jim

log.zip
Cancel
Vote Up 0 Vote Down

Cancel