Recent content by Segis Ferrairó

In SNAT you want to manipulate the packets to modify the source address, the port, or both. When you change the source address of the packet, you indicate in the "Translated Source" field what address the packets will have.

The binary package was not uploaded for those distributions/versions. Now it is ready for you to install it

We have simplified the installation process of FWCloud-agent Until now it was necessary to download the corresponding package using utilities like "wget" and then install it. We have created a repository to facilitate the distribution of the software. Now enough just run: sudo apt...

Hook scripts allow to execute code when a policy rule is loaded. To improve the readability of the security policy we have modified the way hook scripts are added. We have created a new type of special rule for them that provides more simplicity while facilitating and accelerating the overall...

Fail2ban penalizes or blocks remote connections that attempt brute force access. Fail2Ban acts by adding rules to the security policy of the system. In FWCloud-UI a new option has been added in the firewall configuration that allows the re-installation of the policy without interfering with the...

CrowdSec is one of the most used open source applications to prevent intrusion attacks. FWCloud-UI now takes this application into account to prevent it from interfering with the installation of a new security policy. In this new video we show how to activate the CrowdSec compatibility option.

FWCloud continues to advance in functionality and security. Soon we will publish the new version of FWCloud. We have already announced in previous posts some of the new features that will be available in the new release. As part of the update process we have reviewed the online documentation...

More features the new version will include: VPN History. Another new functionality that allows us to have an agent installed in the firewalls managed by FWCloud is to be able to consult the history of all the VPN connections configured in a firewall. This information is obtained by...

The new version comes with new features, one of them is FWCloud-Agent. This FWCloud agent provides faster communications between FWCloud and managed firewalls while providing greater security. It also opens the door to the incorporation of new advanced functionalities that we will show, such as...

The new version of FWCloud incorporates important new functionalities. Among them, we have added the ability to fully create and manage the routing policy of our system through the FWCloud-UI interface. In addition, we have created a new video that describes, using examples, how to use...

FWCloud-UI is prepared to compile and install the security policies defined in it for various packet filtering frameworks. That was taken into account from its design. In the new release we will allow compiling for IPTables and also for NFTables. We have recorded a new video where you can see...

FWCloud-UI allows you to expand the possibilities when creating a security policy. You can add scripts to complement it, for instance loading modules, doing any accounting, or executing external commands. These scripts are applied at the rule level and therefore can be run both before and after...

FWCloud-UI makes it easy to block and unblock VPN connections. FWCloud-UI allows you to block VPN connections, allowing their subsequent unblocking. The interface clearly shows the connections that we have blocked. It provides simplicity whether they are habitual or sporadic actions, and at the...

We have improved the search function. Now it allows searching by names, as well as IP addresses and TCP / UDP ports. The pattern to find can match both the name and the value assigned to the different objects in FWCloud-UI. Look at a practical search case in this video

The automatic detection utility of FWCloud-UI not only helps you save time, but also avoids mistakes made when entering information manually. We have created this new video to illustrate how you can get all the relative information of the network interfaces of a firewall cluster collected and...