11.2.7 Configure a Perimeter Firewall

 You work as the IT security administrator for a small corporate network. You recently placed a web server in the DMZ. You need to configure the perimeter firewall on the network security appliance to allow access to the web server from the LAN and the WAN. You would also like to improve security by utilizing the attack security features provided by the firewall.

In this lab, your task is to:

  • Add an HTTP firewall rule that allows traffic from the WAN to the web server in the DMZ.
    ParameterSetting
    From ZoneUNSECURE (WAN)
    To ZoneDMZ
    ServiceHTTP
    ActionAllow Always
    Source HostsAny
    Internal IP Address172.16.2.100
    External IP AddressDedicated WAN
  • Add an HTTPS firewall rule that allows traffic from the WAN to the web server in the DMZ.
    ParameterSetting
    From ZoneUNSECURE (WAN)
    To ZoneDMZ
    ServiceHTTPS
    ActionAllow Always
    Source HostsAny
    Internal IP Address172.16.2.100
    External IP AddressDedicated WAN
  • Add a firewall rule to allow traffic from the LAN to the DMZ.
    ParameterSetting
    From ZoneSECURE (LAN)
    To ZoneDMZ
    ServiceAny
    ActionAllow Always
    Source HostsAny
    Destination HostsAny
  • Enable all the firewall attack checks.

Complete this lab as follows:

  1. Configure the firewall as follows:
    1. From the top menu of the Security Appliance Configuration Utility, select Firewall.
    2. From the left pane, select IPv4 Rules.
    3. In the right pane, select Add.
    4. Modify the firewall rule parameters.
    5. Click Apply.
    6. Repeat steps 1c–1e for each firewall rule.
  2. Enable firewall attack checks as follows:
    1. From the left pane, select Attacks.
    2. Select all the WAN security checks.
    3. Select all the LAN security checks.
    4. Select all the ICSA settings.
    5. Click Apply.

Comments

Post a Comment