topic Re: Application control & URL Filtering 77.30 in Firewall and Security Management

Application control & URL Filtering 77.30

Javad_Nicou — Wed, 02 May 2018 03:46:44 GMT

Hi Guys ,

I have r77.30 and not sure why incoming traffic from internet are going through this blade .

Re: Application control & URL Filtering 77.30

PhoneBoy — Wed, 02 May 2018 21:32:38 GMT

First of all, how do you know this is happening?

Second of all, do you have any App Control rules where the destination is not "Internet" but, say, "Any"?

Those are my initial guesses.

Re: Application control & URL Filtering 77.30

Javad_Nicou — Wed, 02 May 2018 22:37:46 GMT

Re: Application control & URL Filtering 77.30

PhoneBoy — Wed, 02 May 2018 23:16:12 GMT

That answers the first question, how about the second?

Re: Application control & URL Filtering 77.30

Javad_Nicou — Thu, 03 May 2018 00:24:32 GMT

Re: Application control & URL Filtering 77.30

PhoneBoy — Thu, 03 May 2018 04:35:35 GMT

Internet is determined by topology.

Which means the egress interface for the traffic from the gateway would be out an "external" interface for this to match.

Can you confirm this is the case?

(Of course, if you're also doing IPS on this gateway, you're taking the Medium Path hit already for the traffic going to your server anyway...)

Re: Application control & URL Filtering 77.30

Javad_Nicou — Thu, 03 May 2018 05:08:39 GMT

Hi Mate ,

Thanks for your time . I checked my topology and interface is leading out to Internet . I have internet facing firewall and then that firewall send traffic to the second firewall which is connected to reverse proxy and web server .

Re: Application control & URL Filtering 77.30

PhoneBoy — Thu, 03 May 2018 05:57:43 GMT

So the traffic is flowing like this:

Internet > FW > (Out external interface) > Other FW > Reverse Proxy > Web Server

If that's the case, it's expected behavior, as I said.

With R80.10 it would be possible to exclude this traffic from App Control with an appropriately designed policy.