The reason I am asking is that there is an internet firewall in front of the UTM in my setup and I wanted to avoid having to reverse engineer the filter rules needed on the outer firewall. It seems that the default (factory set) network protection rules on the UTM are hidden from the GUI so I probably have to extract them directly from the OS if there is no documentation. Also I am trying to understand the name resolution as we have an upcoming redesign of our network that will involve new IP address ranges and probably also domain names. If the endpoints and the UTM both communicate with some Sophos web/broker-services and the address resolution and mapping happens within these services I probably do not have to worry about changes in my network, if there are any hard-coded configurations in the endpoints things may break. My approach here is to understand how things work first instead of ending up in hours of of trial and error activities. Cheers - Martin
↧