WatchGuard Firewall Tech Communication with My Colleagues

WatchGuard Firewall Tech Communication with My Colleagues  

1. SOC

a. What is the SOC

Security Operations Center

b. SOC Main components 

Firewall                                       WATCHGUARD/FORTINET

IPS/IDS                                        WatchGuard/ESET

Anti-Virus                                    ESET

Vulumblitis Management           QUALYS

 SIEM                                             Not have it, Will build       Syslog

2. Firewall Basic Management (WatchGuard)

 a. How to connect to Firewall

i. Web UI

ii. WatchGuard System Management APP

b. User Authentication

i. AD Authentication

c. Sub Services

Firewall 

GAV

IPS

WebBlocker

DLP

Application Control

Botnet Detection

SpamBlocker

Geolocation

APT Blocker

d. Network Setting information

i. Interfaces IP Address

ii. DNS information

iii. Trusted Network IP address

iv. NAT 

lets you stretch the number of computers able to work off of a publicly routable IP and hide the private IP

1) Statics---Port Forwarding

2) Dynamic---IP Masquerading

3) One-To-One

v. Routes

vi. Dynamic Routing

3. Firewall Policy Setting

 a. Why need Policy (Identify allowed connectivity)

b. The Priority Order of Firewall Rules. 

The rules are applied from top to bottom, and the first rule that matches the traffic overrides all the other rules below. 

c. Security Zones(Aliases)

i. External(Untrusted)

ii. Internal(Trusted)

iii. Optional(Some Brands have DMZ zone)

d. Policy Formulation CheckList

i. Disposition

ii. Protocol/port

iii. Source

iv. Destination

v. Packet filter and proxy

vi. Schedule

vii. Policy-based routing

viii. NAT

ix. Source IP

x. Traffic Management/QOS

For the next section.....

4. Firewall Log

5. Firewall WebBlocker

6. Firewall Application Control

7. TroubleShooting