wol packets denied

Francesco

Is it safe to allow a single pc to send upd packets to 255.255.255.255?
What type of policy is best suited?
I occasionally need to wake up a pc using wake on lan but my firebox is denying packets as unhandled

Bruce_Briggs

This is a broadcast packet.
In general, the firewall will deny broadcast packets.
You can ignore denied broadcast packets or if you don't want to see them in Traffic Monitor, you can add a policy, set to denied and not set to Log.

james.carson

The firewall will log packets destined to 255.255.255.255 as denied, however, this traffic will hit everything else on the network as well, as the firewall isn't between where you generated them, and where they went.

So long as you're on the same subnet as the machine you're trying to get to, you can ignore the WatchGuard firewall. It logged the packet as unhandled because it didn't know what to do with it, but it wasn't the actual intended target anyways.