200-201 Question 232
Single answerA network administrator has configured a stateful firewall to protect their internal network. Recently, users have reported that they cannot access a new web application hosted on an external server. After reviewing the firewall logs, the administrator notices that traffic to the application’s unique port is being blocked. What is the most likely action the administrator should take to resolve this issue?
- A
Modify the firewall’s access control list (ACL) to allow traffic to the application’s specific port.
- B
Enable deep packet inspection (DPI) to analyze the application traffic and allow it.
- C
Disable the firewall temporarily to test connectivity to the web application.
- D
Configure the firewall to allow all outbound traffic from the internal network.
Show answer and explanation
Correct answer: A
Explanation
Stateful firewalls rely on access control lists (ACLs) to determine which traffic is allowed or denied based on rules. If a specific port required by the web application is blocked, the administrator must modify the firewall’s ACL to explicitly allow traffic on that port while maintaining a secure configuration. Disabling the firewall or allowing all outbound traffic would compromise the security of the network.
- A. Correct.
Modifying the firewall's access control list (ACL) to allow traffic to the application’s specific port is the correct approach. Firewalls use ACLs to permit or deny traffic, and in this scenario, the unique port for the web application must be explicitly allowed.
- B. Incorrect.
Enabling deep packet inspection (DPI) is not the correct solution. While DPI analyzes traffic content, it does not resolve issues related to blocked ports in the firewall's rules.
- C. Incorrect.
Disabling the firewall temporarily is not recommended, as it exposes the internal network to potential threats. This is a poor security practice.
- D. Incorrect.
Configuring the firewall to allow all outbound traffic is overly permissive and compromises network security, as it allows unnecessary traffic that could lead to vulnerabilities.