Can you set a physical port to bypass the firewall rules?

Forum|Forum|8 years ago
November 5, 2017
3 replies
5633 views

I want to set one of my physical ports to bypass the security of the firewall. I currently sell the firewall as additional feature, so to accommodate this i'll like to set a port (say 14 for argument sake) to just allow all traffic in and out but still be monitored by the firewall.

Is that possible?

emnoc

New Member

You could apply a firewall policy with any/any for both directions. This is not "TECHNICALLY" bypassing a firewall and no you can't BYPASS a port .

A firewall is a firewall , and if your really have tiers you should not place the traffic thru a firewall/ The reason why, the ANY/ANY approach mention above eat resources of a firewall and sessions.

solidblueliquidAuthor

New Member

I figured that'll be the answer, so better i just have a cable to a switch that's directly connected to the outside world?

ede_pfau

SuperUser

No. Even if the policy allows ANY service to ANY destination, anytime, the firewall still provides routing and SNAT, and some protection if you apply UTM (AV, IPS). The latter might have an impact on the traffic - your call, this depends on your goal.

Sign up

Login with SSO

Login to the community

Login with SSO