World events and blocked flows....

Follow

David Whitlinger

• February 24, 2022 19:14

I have a Firewalla Gold and I frequently looked at the Blocked Flows list to see what is being stopped.  As world events over the last couple of months have unfolded, the volume of blocked flows has gone up and down... presumably as cyber agents or attackers, ramp up their random attacks or calm down between attacks.

Two questions....   1) Can the engineers at Firewalla comment on what they are seeing on the Internet security front and how the Firewalla products are helping to protect their customers from the cyber attacks that are increasing?

2) When I look at the list of Blocked Flows, I see different countries of origin.  Is there a recommendation on blocking flows from specific countries at this time?

0

• 

  Firewalla

  • February 24, 2022 19:48
  • Edited

  There are always probs and scans on public networks, are they increasing due to the recent events, hard to say, since our sample of the world is not significant enough. 

  Since protecting your network should be regardless of political events, you can look at this series of article 

  1. https://help.firewalla.com/hc/en-us/articles/360049856394-How-to-Secure-Your-Network-with-Firewalla-Part-3-Protect
  2. https://help.firewalla.com/hc/en-us/articles/360050334233
  3. https://help.firewalla.com/hc/en-us/articles/360049374514

  Control, visibility, and protect series, will help you get started.

  On blocked flows, please remember when your firewalla running in router mode, it already has an ingress (outside to inside) firewall blocking flows. The regional blocks will work mostly from inside to outside. As of what country to block, it is not something we recommend. 

   

   

  0

  Comment actions Permalink
• 

  networker5

  • March 01, 2022 19:00

  Adam Satariano

  Reporting from London

  A cyberwar between Ukraine and Russia is escalating, according to Ukraine’s vice prime minister, Mykhailo Fedorov. Mr. Fedorov, who last week urged hackers and other skilled programmers to join an “I.T. Army” against Russia, said on Telegram that the “cyberwar is open and large scale,” involving government agencies, intelligence services and volunteers. Earlier on Monday, Russia’s foreign ministry said the country was facing a major increase in cyber attacks.

  https://www.nytimes.com/live/2022/03/01/world/ukraine-russia-war?name=styln-russia-ukraine&region=TOP_BANNER&block=storyline_menu_recirc&action=click&pgtype=Article&variant=0_Control&is_new=false

  0

  Comment actions Permalink
• 

  David Vaughan

  • March 03, 2022 21:29

  Firewalla, you say above, "The regional blocks will work mostly from inside to outside" (and that is my present understanding).

  In the product information pages it says, "Using GEO-IP Filtering, a technology that can block network traffic from entire countries..."

  Would you please explain this apparent conflict sufficiently to enable us to marry these statements, or discard one? Should "from" in the second statement be "to"?

  While I am willing to bet my home computer activity is not of particular interest to  invading armies on another continent, some clarification may help with our local concerns.

  0

  Comment actions Permalink
• 

  Firewalla

  • March 03, 2022 21:47

  Geo blocks or regional blocks can be either, both directions, or from inside to outside. Since the firewalla firewall will block any outside to inside flows, then most of the blocks will be inside to outside. not sure if this is clear

  0

  Comment actions Permalink

Please sign in to leave a comment.