I work in IT for a K12 institution. We recently began using WatchGuard on our network and are using WebBlocker as our content filter. I am attempting to set up a deny exception that will block access to YouTube Shorts without blocking access to the rest of YouTube. I have tried entering few different patterns with no luck. Some of the patterns I have tried include: youtube.com/shorts/* youtube.com/shorts*/* https://www.youtube.com/shorts/ Opens a new window* Anyone on this forum know how to successfully write an exception that will deny access to YouTube Shorts, but allow access to the rest of ..read more

Hi there, I am having an issue with trying to allow a computer to connect to a certain ip like 168.10.10.5 using outbound port 80 whereas having outbound port 80 blocked for other ip I have tried blocking port 80 in firewall outbound rules As such, I would like to seek advice on how can this be done ..read more

I have a Fortinet Firewall and a Fortinet EMS Server.  I want to know why I should, or should not connect them through Fabric Security. I tried to find the answer on the Interwebs, but I came up with a lot of sales pitches about how Fabric Security is good for my infrastructure. Fortinet explains HOW, but not WHY, without stating the obvious reason. I want to hear from someone who has actually done this.  ..read more

I'm setting up a new enterprise CA in our AD environment. The CRL will be published on a separate server running IIS and will be available at a publicly routable domain name. the CRL must be accessible over an HTTP (not HTTPs connection). I have two options for accomplishing this: Make the CRL available on port 80 and make it accessible through Microsoft Entra Application Proxy Opens a new window with passthrough authentication. Make the CRL available directly (probably at a port other than port 80) and protect it using an inbound HTTP proxy on our WatchGuard firewall Opens a new window(Fire ..read more

If you use SSL VPN on your Fortigate firewall you're probably affected: https://www.fortiguard.com/psirt/FG-IR-24-015 Opens a new window ..read more

So last fall, we moved to Palo Alto hosted firewall. Ever since then, we've not been able to access our NEC server which is on a 192.168.0 network. It hasn't been a big deal as I've not needed to log into it or it's web GUI's...until now. I've been trying to work with my hosted support team but they have not been quick to reply back. Our IP Cameras are also on the 192.168.0 network and I've had a chain reaction of cameras going down because of possible IP Conflicts...so it in the past, I'd go to the NEC server, list the phone's by IP, log into that phone and change the IP. But I cannot get int ..read more

Hey all, Sorry if this a noob question but my Google Fu is failing me.  Let's say I have an IPSec S2S VPN setup between Azure and on prem Firewall. The Azure side is basically a DMZ where the internet facing sites are not part of the domain. They are all in their own workgroups. If one of these internet facing web servers is compromised and the attacker traverses the VPN tunnel back to the on prem firewall, would the on prem firewall offer any kind of security?  Or will it not care since the site 2 site VPN is established and it will simply trust all traffic through it ..read more

Hi All, I have set up SNMP monitoring server I have successfully connected our clients firewalls. however I am wanting to be able monitoring of switches & Server ILOs where possible. I understand that an access rule and NAT Policy needs creating and wanted to confirm if possible that I have right settings ACCESS RULE Source Source zone - WAN Destination Zone - LAN Source Address - SNMP monitoring IP Destination address - Client Public IP port\service - SNMP port (ILO is set to 165) Destination - SNMP port (ILO is set to 165) NAT RULE Source - Monitoring public IP Translated source - Origi ..read more

I picked up 2 old Edgerouter Lite 3 units (approx 5+yo). Was going to replace a VERY old Sonicwall I have in my house. I factory reset them then tried to connect. No browser will connect because the interface does not meet security requirement of the browser. So some questions because I know very little about these little beasties. are they even worth the hassle? Is there any browser that will let me connect or way to trick them to do so? Is there any other way to config (telnet, etc)? If so, please provide instructions Thank you ..read more

Hi I have repurposed a HP Mini PC and want to use it for a opnsense router. The PC has 2 Ethernet ports. I have installed VMware on the machine. Created the VM for opnsense and given it both Ethernet adaptors. Installed opnsense and ran through the wizard LAN1 - this is also the management network for VMware LAN2 - This is the WAN port. My ISP modem plugs into this Opnsense configured to give out DHCP on LAN which works fine. Just not getting no internet traffic. Can’t ping out to google. Used opnsense diagnostics to see if the vm can ping out directly and no joy Can’t see what I’m miss ..read more