Question

Please solve all 5 tasks. Thanks

SRC DST Zone DST Port DST Protocol Action Rule Port SRC Zone SRC Order UNIRUST 0.1.10.250 ANY MGMT ANY WEBAPP 101.550 | ANY IDB UNTRUST ANY USER İANYİANY |PERMIT 10.1.4.70 1433 UDP DENY ANY ANY ANY ANY İTCP PERMIT 10.1.1024, | ANY | UNTRUSTİ ANY 10.1.2.0/24 80 TCP PERMIT UNTRUST ANY ANY I WEBAPP | 10.1.5.50 | 80 TCP PERMIT | DENY | DB 10.1.4.70 | ANY İ WEBAPP 10.1.5.50 | AY | ANY Compliance with company policy requires a quarterly review of firewall rules. You are asked to conduct a review on the internal firewall sitting between several internal networks. The intent of this firewall is to make traffic more secure. Given the following information perform the tasks listed below Untrustedzone: 0.0.0.0/0 User zone: USR 10.1.1.0/24 User zone: USR2 10.1.2.0/24 DB zone: 10.1.0/24 Web application zone: 10.1.5.0/24 Management zone: 10.1.10.0/24 Web server 10.1.5.50 MS-SQL server. 10.1.4.70 MGMT platform: 10.1.10.250 Task 1) A rule was added to prevent the management platform from accessing the internet. This rule is not working. Identify the rule and correct this issue. Task 2) The firewall must be configured so that the SQL server can only receive requests from the web server Task 3) The web server must be able to receive unencrypted requests from hosts inside and outside the corporate network. Task 4) Ensure the final rule is an explicit deny. Task 5) Currently the user zone can access internet websites over an unencrypted protocol. Modify a rule so that user access to websites is over secure protocols only. Instructions: To perform the necessary tasks, please modify the DST port, SRC zone, Protocol, Action, and/or Rule Order columns. Type ANY to include all ports. Firewall ACLs are read from the top down. Once you have met the simulation requirements, click Save. When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

Answer 1

modifo To Comple te -this task, hle need to SRC Zone → MGMT DSI Zone UNTRUST x To accomplichs task, hle need to modi :Action → PERMIT TasK 3) Toaccomplish this, hle need to modift *To acomplish this, le need to modi CamScanner

Task *To complete this tack, We need to rearranqe the Order of sutes Total etutes ove there g 1, 2'4, 5.6, 3 Amange them as and modify -the Stuule 3 as beloo Pototocol-IP ActonDENY To accomplish this, modify the below gtule Original ule ANY, UNTRUST, ANY, &O, TCP PERMT Lo.2.0/24 Klodified ut USER, to..o/2y to 2.0J2t CS Scanned with CamScanner