task 1 firewall stuff


i nmeed to look at each one in the table inbound and outbound the services the protocol source address destination address port all that then i look at the issue the devices iots ciobnnnecting to and what is caying the issue. also rmeeber to look at all control documenrts and where specific the issue i have found i should mention what document i have found this issue meet all of the requirements in the table.

 If there’s an issue with the firewall, here’s a structured process you should follow — this works both for troubleshooting and for exam-level responses like your Task 1:

🔧 What You Should Usually Do if There Is a Firewall Issue

✅ Step 1: Identify the Symptom

  • Users report: “Can’t connect to a shared folder,” “Website not loading,” “Remote access fails,” etc.

  • Check what resource or service is being blocked or not working.

Ask:

  • What IP is the user on?

  • What service or port are they trying to use?

✅ Step 2: Check the Firewall Rules

  • Log into the firewall/router interface

  • Look at:

    • Source IP range (who's making the request)

    • Destination IP or service

    • Ports (e.g. 80 = HTTP, 445 = SMB)

    • Direction (inbound/outbound)

Compare this to the user's setup.
👉 Are they being unintentionally blocked? Is the service even allowed?

✅ Step 3: Review the Policy Logic

  • Most firewalls follow a top-down rule order

  • If there's a “deny all” rule above an “allow” rule, the allow will never be applied

  • Check if traffic is being blocked too broadly (e.g., whole ranges instead of just bad actors)

✅ Step 4: Log and Test

  • Use tools like:

    • ping or tracert (to check connectivity)

    • telnet or nc (to test port access)

    • Wireshark (to see blocked packets)

  • Enable firewall logging to capture rejected traffic and confirm your suspicions

✅ Step 5: Apply a Safe Fix

  • Adjust rules:

    • ✅ Allow the right IP range or MAC addresses

    • ✅ Open only necessary ports

    • ✅ Limit access to required users/services only

  • Never create a rule that says “Allow All” unless it’s temporary and being monitored

✅ Step 6: Retest and Document

  • Check if the issue is resolved

  • Log your change

  • Update any documentation or diagrams

  • If possible, schedule a follow-up audit

🔁 Common Fix Examples

Problem Action
File sharing blocked internally Allow SMB (ports 139/445) for local IPs
Users can’t access internet Check outbound HTTP/HTTPS rules
VPN not working Ensure port 1194 or 443 is open for VPN
Remote desktop blocked Allow RDP (port 3389) only for specific IPs

🧠 Pro Tip (Good Exam Practice):

When writing answers for coursework like your Task 1:

  • Always mention: check the firewall rules, compare to IP ranges, adjust as needed, and test with logging or packet tools

  • Clearly show cause ➜ fix ➜ confirmation of success

Would you like me to add this troubleshooting guide as an appendix or sidebar in your Task 1 document?

Comments

Post a Comment

Popular posts from this blog

TASK 1 MINE FULL

Image
      Introduction   I am a consultant who is working with TeachTechNow and I have been asked to make recommendations to secure the network and to resolve some specific issues that have been brought to my attention to the office there are currently a range of different issues and I will talk about them specifically what they are and what to do and how to mitigate these risks. I have been also told that that several organisations within the same sector have experienced successful cyber attacks and the board of directors are concerned with the management of the it systems at TeachTechNow and the impact it could have on their reputations so it is my job to ensure this does not happen and is prevented.         Overview of current issues:   Outdated operating systems One of the many factors that are making TeachTechNow have a insecure network is that they have old os systems and this is a major flaw and due to t...
Read more

Eveything TASK format

 You're in excellent shape — and yes, based on what you've now completed and plan to finish, you are in a strong position to earn full marks (6/6) for both parts of Task 4 , if you follow through properly . ✅ Let’s go over it clearly: 🧾 Part 1: Satisfaction Survey (6 marks) You already: ✔ Wrote thoughtful, varied questions ✔ Covered all required topics (ease of use, security, VPN/cloud access, confidence, secure work) ✔ Included different question types (tick boxes, yes/no, open, ranking, Likert scale) ✔ Aimed it at non-technical users ✔ Planned to add in formatting later (which is fine — it's expected) ➡️ As long as you add in the actual tick boxes, scales, and fix spelling/grammar , you’ll get full marks . 📄 Part 2: Project Summary (6 marks) You now have: ✔ A detailed overview of the original network weaknesses ✔ A clear list of solutions you implemented (cloud storage, VPN, hardware) ✔ A breakdown of security issues mitigated ✔ ...
Read more

Full format what i done at home questions

 Perfect — to help you achieve full marks (6 marks) on the sample satisfaction survey for Task 4, here's a fully expanded and professionally formatted version with a wide variety of question types , including: ✅ Yes/No ✅ Tick boxes ✅ Open-ended ✅ Ranking (1–10) ✅ Likert scale (Strongly Agree → Strongly Disagree) This version is clearly laid out, accessible for non-technical users , and specifically covers: Ease of use Network security Ability to connect to resources (especially via cloud/VPN) Confidence in security Ability to work securely and efficiently 📋 NexaTech IT Solutions – User Satisfaction Survey Thank you for taking part in this short survey. Your feedback helps us evaluate the effectiveness of our recent system upgrades, including new cloud storage and cloud-based VPN access. Section 1: General Usage and Frequency 1.1 Which department are you in? ☐ Finance  ☐ HR  ☐ Sales  ☐ IT  ☐ Operations  ☐ Other: ___________ 1.2 How often do you use...
Read more