Forward Traffic from external IP to SQL Server

Comments

• Bruce_Briggs

  February 2020 edited February 2020

  Here is the concept:
  You need a policy to allow packets to flow through the firewall.
  The default setup has a few policies which allow most packet types to go from internal devices to the Internet.

  For incoming traffic, you need to add 1 or more policies to allow the traffic.
  For your case, you want to add a policy allowing TCP port 1433, from a known external IP addr to an internal server.
  There is a policy already created in Fireware for TCP port 1433, called MS-SQL-Server MS-SQL-Server.
  So select the MS-SQL-Server predefined policy (Firewall -> Firewall Policies -> Add Policy -> Select a packet filter) Then Add policy
  In the From field, enter the senders IP addr.
  In the To: field, add the SNAT entry that you created.
  Then do a Save

  Here is what you should change in the SNAT entry prior to adding it to the policy:
  1) remove Set Source IP
  2) remove Set internal port
  Neither of these are normally needed and are not needed in your case.

  One final note: I and many other prefer to use WSM Policy Manager - a Windows program to manage our firewalls. You can download WSM, and install it, should you desire. I also use WSM Firebox System Manager all the time instead of using the Web UI monitoring tools.

  1
• Rick_Bray

  February 2020

  Much appreciated. I'll check this out later tonight or tomorrow when time permits.

  0
• Rick_Bray

  February 2020

  When adding the From IP, do I add it as Host IPv4, Network IPv4, or something else?

  0
• Bruce_Briggs

  February 2020

  For a single IP addr - host IP addr

  0
• Rick_Bray

  February 2020

  Great, thanks. I went with that last night as a test and it worked, but I wanted to make sure that was the correct setting regardless of whether it worked or not.

  Thanks so much for you help!

  0