If the firewall doesn't understand the ethertype, it won't handle it. I have no idea what ethertype 0x32 is but 01:00:0c:cc:cc:cd is Cisco PVST. This traffic doesn't need to traverse the firewall, so… (View Post)

Yes, they could call it a "tech support report" and have it include all of the useful information in one shot. They could even have it generate a unique filename with a time stamp in it tha… (View Post)

Yes, just NAT them. If the public IPs are in the same subnet as the firewall's interface, then the firewall will respond to ARP queries as appropriate and handle the traffic [but you won't see entrie… (View Post)

It literally doesn't matter what the complaints are, if you've just installed a firewall but haven't put up to date firmware on it then you are entitled to some share of the blame. (View Post)

And even if it's not, AFAICT this CVE is about the management interface, which does NOT need to be reachable from untrusted networks anyway, right? (View Post)