Firewall Bypass

[aonu]

hi everyone l have an issue here well its from another stake , so we have an issue on members bypassing the firewall thus accessing the internet without the firewall . So they take the ethernet cable which connects to the switch from the firewall to the main router which is not going through the firewall . I need help on how to make the router go through the firewall

[mdigi]

Where is the networking equipment located? Any chance it can be moved to a secure location/locks changed on the room in which it presently resides?

[russellhltn]

From Technology Standards

6.4.5 The meetinghouse firewall and ISP modem must be secured behind a locked door or cabinet with limited access. Clerk and ecclesiastical offices should not be used for this purpose unless this equipment is secured in a locked cabinet.

Talk to FM about relocating the equipment or rekeying the cabinet as needed to secure it.

[aonu]

Where is the networking equipment located? Any chance it can be moved to a secure location/locks changed on the room in which it presently resides?

They are mostly located in the clerks office

[aonu]

well l dont mean to be rude but l think some of the members of the the bishopric disconnect it from the firewall its just a theory
but l think if we can add the DNS records that are used to on the APs to filter the content on the ISP router how will that go??

[russellhltn]

but l think if we can add the DNS records that are used to on the APs to filter the content on the ISP router how will that go??

It would provide a bit of filtering, but it wouldn't prevent them from running a different DNS on their device and bypass the filtering. It would also mean your Access Points wouldn't be properly managed. And it doesn't change the fact they shouldn't have access to it.

If you're the stake technology specialist, then you have access to FIR. Put in a request to FM to secure the equipment.

I would check and see if they're webcasting sacrament meeting. They may be using something that doesn't play well with the firewall.

[aonu]

I guess that could work thank you