Lab 10 || Windows Logging & AD - Michaelfoop/SEC-350-01 GitHub Wiki
Firewall Commands
Edge01
This will add the million ports necessary for AD and DNS
set firewall name MGMT-to-LAN rule 30 action accept
set firewall name MGMT-to-LAN rule 30 destination port 53,88,135,139,389,445,686,49152-65535,464,636,3268
set firewall name MGMT-to-LAN rule 30 protocol tcp
set firewall name MGMT-to-LAN rule 31 action accept
set firewall name MGMT-to-LAN rule 31 destination port 389,53,88,123,137,138,636
set firewall name MGMT-to-LAN rule 31 protocol udp
set firewall name LAN-to-MGMT rule 30 action accept
set firewall name LAN-to-MGMT rule 30 destination port 88,135,53,88,135,139,389,445,686,49152-65535,464,636,3268
set firewall name LAN-to-MGMT rule 30 protocol tcp
set firewall name LAN-to-MGMT rule 31 action accept
set firewall name LAN-to-MGMT rule 31 destination port 389,53,88,123,137,138,636
set firewall name LAN-to-MGMT rule 31 protocol udp
fw-mgmt
This is a temporary rule that lets mgmt02 to connect to the internet (delete after installed wazuh agent)
set firewall name MGMT-to-LAN rule 500 action accept
set firewall name MGMT-to-LAN rule 500 protocol all
set firewall name LAN-to-MGMT rule 500 action accept
set firewall name LAN-to-MGMT rule 500 protocol all
I will write more stuff later