Firewall blocks legitimate network traffic responses

Technical Articles ID: KB92412
Last Modified: 2023-02-07 22:11:03 Etc/GMT

Environment

Endpoint Security (ENS) Firewall 10.x

Problem

The ENS Firewall module blocks legitimate network traffic responses returned from outgoing requests.

Example of blocked traffic:

Time: 01/07/2020 03:20:14 PM
Event: Traffic
IP Address: 0.0.0.1
Description:
Path:
Message: Allowed Outgoing TCP - Source 0.0.0.2 : (5479) Destination 0.0.0.1 : (3128)
Matched Rule: Allow outbound TCP traffic

Time: 01/07/2020 03:20:14 PM
Event: Traffic
IP Address: 0.0.0.1
Description:
Path:
Message: Blocked Incoming TCP - Source 0.0.0.1 : (3128) Destination 0.0.0.2 : (5479)
Matched Rule: Block all traffic

Solution

This issue is resolved in ENS 10.6.1 September 2020 Update and ENS 10.7.0 September 2020 Update.

Our product software, upgrades, maintenance releases, and documentation are available on the Product Downloads site.

NOTE: You need a valid Grant Number for access. See KB56057 - How to download product updates and documentation for more information about the Product Downloads site, and alternate locations for some products.

Workaround

Create a rule within the ENS Firewall rules policy that allows the traffic. For instructions, see the "Manage firewall rules and groups" section of the Endpoint Security 10.7 Product Guide.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Firewall blocks legitimate network traffic responses

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Firewall blocks legitimate network traffic responses

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title