The first set of questions will be related to the figure below. In the figure, a...

 

Transcribed Image Text:

The first set of questions will be related to the figure below. In the figure, a packet filtering firewall (FW1) is running on router R2. The "internal" networks are on the left of the firewall (i.e., "Network A" and "Network B", which are connected to interfaces 1 and 2 of router R1, respectively). Router R1 is connected to interface 1 of Router R2. Each network is labeled by a letter (e.g. "Network C"), and each device on a certain network is denoted by a number (e.g. "Host A.4"). You can refer to the "any" value using the symbol (for example, "B.** designates all the devices on "Network B"). Note that although only specific devices are displayed in the figure, you should consider that there are more hosts than the ones shown in each network. A.4 Network A Network B B.1 A B 2 R1 C.7 Network C FW1 R2 C.11 2 SrcPort DestIP D R3 E Dest Port Protocol F LL E.9 Network E F.10 For the following questions, complete the necessary firewall rules in the given table. You do not have to use all the table rows, and you can add more rows if needed. You must use the correct values in each table (e.g. *" or "A.4" or "A.*" are valid addresses; while a written description, such as "All devices in A", is not valid). The default policy in all cases is "Deny". Treat each question independent of the others. All application protocols in this part use TCP. The interface numbers are written next to the router in the above figure. Assume Stateful Packet Inspection (SPI) is used. Q1) Allow all internal hosts to connect to all web servers. Interfacte SreIP Network F Action The first set of questions will be related to the figure below. In the figure, a packet filtering firewall (FW1) is running on router R2. The "internal" networks are on the left of the firewall (i.e., "Network A" and "Network B", which are connected to interfaces 1 and 2 of router R1, respectively). Router R1 is connected to interface 1 of Router R2. Each network is labeled by a letter (e.g. "Network C"), and each device on a certain network is denoted by a number (e.g. "Host A.4"). You can refer to the "any" value using the symbol (for example, "B.** designates all the devices on "Network B"). Note that although only specific devices are displayed in the figure, you should consider that there are more hosts than the ones shown in each network. A.4 Network A Network B B.1 A B 2 R1 C.7 Network C FW1 R2 C.11 2 SrcPort DestIP D R3 E Dest Port Protocol F LL E.9 Network E F.10 For the following questions, complete the necessary firewall rules in the given table. You do not have to use all the table rows, and you can add more rows if needed. You must use the correct values in each table (e.g. *" or "A.4" or "A.*" are valid addresses; while a written description, such as "All devices in A", is not valid). The default policy in all cases is "Deny". Treat each question independent of the others. All application protocols in this part use TCP. The interface numbers are written next to the router in the above figure. Assume Stateful Packet Inspection (SPI) is used. Q1) Allow all internal hosts to connect to all web servers. Interfacte SreIP Network F Action