topic Re: lumeta, firemon scans in Firewall and Security Management

lumeta, firemon scans

Daniel_Kavan — Thu, 03 Mar 2022 13:11:04 GMT

https://lumetadocs.firemon.com/download/attachments/5472372/SPEC-120618-1711-80%20System%20and%20Config%20Fundamentals.pdf?version=1&modificationDate=1554758054000&api=v2

Hi everyone,

My ISSO wants to start scanning with Lumeta, now owned by Firemon -- for IP discovery. It does quite a bit more. Anyway, one of the ports I need to open up for this is port 0. The dashboard won't let me create a service with TCP port 0 so I'm not getting very far.

Is this a limitation? Any other comments on Lumeta? Thanks!!

Re: lumeta, firemon scans

the_rock — Thu, 03 Mar 2022 14:42:45 GMT

Never tried that before in 15 years dealing with CP stuff, but I will try : - ). By the way, port 0 us reserved port, so it would make sense why it wont let you create it, though Im fairly certain that its also invalid port number, so you could not even connect to it, but could send packets to it. Let me play around in my lab and see what options there are. I will update you here.

Re: lumeta, firemon scans

the_rock — Thu, 03 Mar 2022 17:22:23 GMT

To update you quick, I tried so many things, but no luck, sorry. You can confirm with TAC about this, but Im 99.99% sure its not possible to create service with port 0.

Re: lumeta, firemon scans

PhoneBoy — Thu, 03 Mar 2022 18:59:53 GMT

You can try a service of type Other with the following in the Match field: tcp, dport=0
However I think we block this in the firewall kernel and there may a kernel parameter to allow this traffic.
Reconmend a TAC case.

Re: lumeta, firemon scans

the_rock — Thu, 03 Mar 2022 19:06:03 GMT

Learned something new today, had no clue that was even possible!