What is first? APP rules or ACLs?

SEBASTIAN

Hi!

It would be very interesting to have a network flow chart for Sonicwall Firewalls.

Is there anything at Sonicwall Web Site?

RedNet

https://www.sonicwall.com/support/knowledge-base/how-does-the-firewall-process-a-packet-on-an-interface/170505518818927/

Above is my go to, not sure if it will change for OS7/OSx7.

shiprasahu93

@SEBASTIAN

It is definitely ACL followed by App rules.

Thanks!

SEBASTIAN

I knew about that chart

But, isn´t out there anything else more detailed information? Explanation about every step?

TKWITS

It would be nice to see where the security services get involved in the processing of a packet. Other vendors provide diagrams of this information.

Saravanan

Hi @SEBASTIAN & @TKWITS,

Please refer below web-link for the detailed packet flow happens in SonicWall.

https://www.sonicwall.com/support/knowledge-base/how-does-the-firewall-process-a-packet-on-an-interface/170505518818927/

Hope this helps.

TKWITS

@Saravanan so in the publish diagram, does 'content scans' encompass all of the security services scanning including Capture ATP?

Saravanan

@TKWITS - Yes, the packet flow logic should also include the CATP and other new security features introduced recently. The packet flow info that I showed above is an exiting one and may be missing the CATP engine mention. But yes, definitely the packets flow via the CATP too.

TKWITS

@Saravanan Can we get an updated packet flow diagram with CATP and other security services shown?

Thanks.

Saravanan

Hi @TKWITS,

I'll have to check on this and get back to you with an ETA. Please stay tuned.

SEBASTIAN

Hi @Saravanan

Thanks, I will be waiting for it.

Thank you very much.