Announcement: New Knowledge Base

4 June 2020: We are pleased to announce the launch of a new Knowledge Base, Changelogs for Business Security Products, where you can find more details, such as bugfixes or new features, about the most recent releases of our business-related products.

Firewall alias question

hyvokarhyvokar Posts: 166
in Business Security

Hi,

 

I need to create a rule for outgoing traffic where remote host is *local* ip address of the workstation itself (yeah, great design by Veeam .. ). The ip address is acquired from DHCP server.

 

How can I do that? It seems that I cannot use "localhost" or "127.0.0.1". Best solution I came up so far, is to use our dhcp range, but that's far from perfect.

 

Like

Comments

  • hyvokarhyvokar Posts: 166

    Also, I'd like to set my own aliases on FSPMC. Is this supported? For example [backupserver2] 192.168.1.20 ?

    This would come very handy, when you need to replace a server, and dont want to go through tens of rules, but simply change the IP on alias.

    Like
  • VadVad Posts: 1,048

    Hello hyvokar,

     

    Aliases are not supported in current PMC UI.

     

    Best regards,

    Vad

    Like
  • hyvokarhyvokar Posts: 166

    Is there a way to refer my dhcp ip address then?

    Like
  • MJ-perCompMJ-perComp Posts: 1,098
    V14- Firewall does accept DNS names for the remote host. So you might want to define the alias in DNS / AD.
    Like
  • hyvokarhyvokar Posts: 166

    I'm still at V13. V14 firewall seems like a huge disaster to me. 

    etomcat
    1Like
  • MJ-perCompMJ-perComp Posts: 1,098
    Without knowing that software in detail, please check this:

    - Is it possible to assign the same IP aggain via DHCP, then you could use that address.
    - If the server part of that machine is runing locally, how does the client side learn about it?
    - In V13 we still have the concept of trusted NICs...

    If you were running a windows firewall, how would that learn about the needs?

    Why do you want to limit the outgoing traffic, if you could just allow incomming traffic on that ports only?
    Like
This discussion has been closed.