topic Re: ssh terminates at firewall in General Topics

ssh terminates at firewall

Daniel_Kavan — Tue, 06 Feb 2024 21:15:21 GMT

I'm being asked

Is every connection to an external network terminated at a firewall? I think the answer is no. I mean we do allow some ssh connections thru the firewall, then it would terminate at server X for example not the firewall. If it's idle or not closing in a certain amount of time then the firewall would terminate the connection. Or if a linux admin was on server X they could kill the connetion. So, I don't think I can say EVERY ssh connection is terminated on the firewall. Agreed? Or am I reading the question wrong?

Re: ssh terminates at firewall

Daniel_Kavan — Tue, 06 Feb 2024 21:55:24 GMT

This looks like a commonly asked question. https://networkengineering.stackexchange.com/questions/70734/what-does-terminating-incoming-connections-mean-and-what-does-it-imply-for-net It looks like the word "terminate" can be ambiguous. It can mean as a filter or as a tunnel.

Re: ssh terminates at firewall

PhoneBoy — Tue, 06 Feb 2024 23:36:37 GMT

The only connections outbound that would terminate on the firewall, in most cases, is when proxy mode or HTTPS Inspection is used.
Even with SSH Inspection (not enabled by default), that applies only to inbound connections (not outbound ones).

Re: ssh terminates at firewall

the_rock — Tue, 06 Feb 2024 23:58:53 GMT

The answer is 100% no, as you indicated. What @PhoneBoy said makes total sense.

Best,

Andy