Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
sdellsperger
Contributor
Jump to solution

Are there any implied rules on SMB appliances and can I show them?

Hi guys,

We used to configure "standard rules" for gateways, something like this:

SourceDestinationApplicationServiceActionComment
This GWInternetAnyNTPallow
This GWInternetAnyDNSallow
This GWInternetAnyICMPallow
This GWInternetAnyHTTP(S)allow

The goal was to allow the gateway to set up connections for the update service, license service, etc.

Now I tried the connections withous these rules above and it worked without any problems.

I'd like to know:

Are there any implied rules on the SMB appliances, which allow the gateway to connect to the update service, get time updates, etc?

Are there any possibilities to display them?

Thank you.

Best Regards

Severin Dellsperger

1 Solution

Accepted Solutions
HristoGrigorov
6 Replies
HristoGrigorov
sdellsperger
Contributor

This is what I searched for Smiley Happy

Unfortunately I couldn't find any definition for NTP.

Does someone know, where to find the implied NTP rule?

0 Kudos
HristoGrigorov

I checked how it is in centrally managed appliances and there is the following rule:

Perhaps there is similar one when locally managed, not explicitly for NTP?

sdellsperger
Contributor

Yes it could be, thanks for helpSmiley Happy 

0 Kudos
G_W_Albrecht
Legend Legend
Legend

NTP (UDP 123) is not listed explicitly in implied_rules.def - but if you look inside the file you will see rather complex macros that generate the implied rule base. Just as an addition, we also have this one here: sk119497: Implied rules are generated but not displayed in the Implied Rules view.

CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
sdellsperger
Contributor

Thanks for the info, as long as it works it's fine for me.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events