To help us reinforce the concept of a gateway firewall on one of our gateways
in NSX,
I'd like to propose this scenario for you and here it is. The customer had a
tech
configuring a gateway firewall policy on gateway B that is right there.
And as part of that policy, the intention was to have a rule that permitted all
HTTP traffic
if it's sourced from over here on the 1020 zero network and destined over here
to the 1010
zero network. They wanted that traffic to be denied. However, unfortunately,
when clients try here WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
when clients try here
from the segment 20 to access a web server over here on segment 10,
unfortunately it is still working
with HTTP. So your challenge should you choose to accept it is to think for a
moment about what
could possibly be wrong and why isn't that control at gateway B being enforced
is the actual rule
written incorrectly or is the rule disabled, etc. I'd like you to think just
for a moment about
what would cause that rule not to be matched on and not to deny that traffic.
And then secondly,
I'd like you to use the screenshots following this video. And in those WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
I'd like you to use the screenshots following this video. And in those
screenshots, I'm going to
have information about various aspects of our configuration in NSX. And based
on those screenshots
and what we've been through together in this skill, I'd like you to identify
what you think
the problem is with the current configuration that is still permitting HTTP
traffic from 1020
zero to HTTP services over here on 10 10. So go ahead now and take a few
minutes and consider
based on the screenshots, what you think is incorrect. And when you are ready, WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
based on the screenshots, what you think is incorrect. And when you are ready,
join me in the next video and we'll do a walk through together and we'll
compare notes.
So I'll see you in that next video when you are ready.
[BLANK_AUDIO]