To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

Network location triggers for WFH

Options
x86
x86 W/ Partner Posts: 1 Security Scout
in Community Resources

I am trying to setup automatically changing firewall profile depending on the users location. There does not seem to be a good trigger type for a home user since most of them have the default setting for DNS, DHCP and gateway set to 192.168.1.1

What would be a secure solution for this?

P.S. I need to open RDP port in home location and it should be closed in all the other locations.

Tagged:

Answers

  • Sethu Laks
    Sethu Laks W/ Partner, W/ Staff, W/ Moderator Posts: 221 Moderator
    edited February 15
    Options

    Hi @x86

    Thank you for reaching out the WithSecure Community,

    We understand your concerns regarding the reliability of using default settings like 192.168.1.1 as triggers for home network identification, as many users have this configuration. Improving our product is always a top priority for us. However, determining the safest configuration can be subjective and dependent on various factors.

    While there may not be a foolproof solution, incorporating multiple network triggers and considering criteria such as DNS suffix or WINS-IP address could potentially enhance accuracy. To address your specific concern, you can try creating a new network location rule that triggers always to RDP port block to all location except one using firewall customer profile. It's important to ensure that this rule is placed at the bottom for priority processing. This can help in fine-tuning the behavior of our product to better suit your needs.

    If that's not fixed your situation, we highly encourage you to share your idea and feedback on our dedicated platform at https://ideas.withsecure.com/ Your input is invaluable and can greatly contribute to the ongoing enhancement of our product.

    Best regards,
    Sethu
    Community Moderator | Technical Support Engineer
    WithSecure™ https://www.withsecure.com/en/home

Categories