Get access to immediate incident response assistance.
Eliminate active threats with 24/7 threat detection, investigation, and response.
Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.
Advance your cybersecurity program and get expert guidance where you need it most.
Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.
Prevent unauthorized access and exceed compliance requirements.
Stop email threats others miss and secure your organization against the #1 ransomware attack vector.
Prepare for the inevitable with 24/7 global breach response in-region and available on-site.
Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.
The general idea behind firewall mode is that traffic will flow into one interface and out the other (and thus the filter is in-line, or pass-through, with the traffic). As such, the interface that receives traffic from the internal network should be set as the listening interface, and the interface that transmits traffic towards the internet should be set as the block page device.
In general, it is best if the two NICs are configured to use different subnets as well.
To contact Trustwave about this article or to request support: