Higher Education

last person joined: 25 days ago 

Got questions on how to enable mobility in education? Submit them here!
Back to discussions
Expand all | Collapse all

ACL Firewall Policy Question

This thread has been viewed 1 times

  • 1.  ACL Firewall Policy Question

    Posted Aug 31, 2015 03:55 PM
      |   view attached

    When adding policies to the ACL for any individual role, I am aware that they are read from the top down like any other ACL. What I seemed to have missed somewhere (as I have yet to find the answer), is there an implicit DENY ANY ANY at the end of this list or do I need to add one?



  • 2.  RE: ACL Firewall Policy Question

    MVP
    Posted Aug 31, 2015 03:59 PM

    There is an implicit deny any any.

    If you add a deny any any rule then denied data shows with a D flag in the session table.



  • 3.  RE: ACL Firewall Policy Question

    Posted Aug 31, 2015 04:24 PM

    Thanks Bob!

     

    So then following that logic, I should only need to add rules ALLOWING users to specific address ranges and whatnot, otherwise they are denied. Correct?

     

    Also, what about services like telnet (like anyone uses it anymore anyway) or SSH, are they denied as well or will I need specific statements to do so?



  • 4.  RE: ACL Firewall Policy Question

    Posted Aug 31, 2015 04:27 PM
    Everything is denied unless you specify what you want access to and that includes ports/protocols.