CacheGuard Help

Actually even with that any to any permissive rule, you should not lose the connection with CG itself as in your configuration, firewall rules don't interfere with access rules (rules that control the accesses to CG itself). Can you please check your access rules by using the following command: acce...

Hi Douglas, To reset the external firewall rule set, please use the following command: firewall external raz Actually implementing that permissive rule was not a good idea as it forwards all incoming connections to your FTP server. It would be better to completely deactivate the firewall and let CG ...

Hi Douglas, Firewall rules proposed by David seem to be correct. Can you please verify that nothing on your FTP server is blocking incoming FTP requests from the external network? There is a chance that a firewall or access list manager on your FTP server is blocking those FTP requests. I suggest th...

I'm happy to hear that! Now that you can configure CG as a firewall with NAT capabilities you can move forward and try the reverse proxy implementation (as suggested by David: option 2). But if you continue with the destination NAT based solution, think about replacing any by the IP address 192.168....

Hi David & Douglas, Interesting discussion! Well, I see that the adopted solution by Douglas is to forward ports 80 and 443 to CG's external interface (IP 192.168.155.1) and not to the Windows Server (IP 10.0.10.11). In this case I think that if in your firewall rules you replace the destination...

Hi

If you have changed your network topology, please double check your firewall rules and existing routes to ensure that you don't have asymmetric routes in your networks. CG as well as any other stateful firewall does not support asymmetric routing.

Best Regards,

Hi Michael, Thank you for your feedback. Actually the impossibility to associate more than one account to a file server is a feature not a bug. There is a bijective relation between an account and the couple [Protocol, and P/Hostname]. You should have a unique account per file server and protocol to...

Hi, Hum.. Yes you are right! Maybe this is specific to oVirt. I'll inform the development team and let you know when the bug fix is available. In the meantime you can continue to evaluate CG without having to register your appliance (as registering is not mandatory with the free edition (ie. up to 5...

Hi, Thank you for your post. In order to help you I need some additional information. 1- For how many users did you install CG? 2- Can you please send us the output of the following commands (from the CLI): link link mac link bond 3- I also need to know MAC addresses that you see at the RHEV level. ...

Dear Michael, The root cause that David is talking about could be the change of the download server (IP address or name) in your auto update/create configuration. Can you please tell us if prior to update/create from ftp.cacheguard.net you used another server (your own server) to initialize your bla...