EIS and L2TP connection - problem!

[andrey 20]

Hello all!

I installed the EIS. But the firewall does not connect to the Internet... 

I Have cable connection, L2TP, WAN miniport.

  Whit Online Armor everything worked great!

How do I configure the firewall?

To open port 1701? But how to do it?

 

This is my second day working with the firewall completely disabled! Then connect without problems.

But is it normal to have a disabled component protection?

Please help me to rectify the situation

 

p.s.

the first screen - when disabled firewall, latest at.

Download Image

Download Image

Download Image

Download Image

Download Image

Download Image

[andrey 20]

Hello!

I solved the problem: removed port 1701 (L2TP) UDP ports blocked WindowsServices.

Now connecting and networking - no problem!

 

Just a question to the experts: is it safe to keep an open port 1701?

Download Image

[GT500 585]

Did you try changing the network configuration to Private instead of Public to see if that resolved the issue? A number of ports are only blocked for Public networks.

Edit: As far as I know the port is only unsafe if you have specific versions of JBoss and Java installed, which the vast majority of people do not. As long as your VPN is connected, it shouldn't be an issue, since the port will be in use.

[andrey 20]

Hello!

You are right!

I made a change to a private network, made the port 1701 is blocked.

Internet connection without problems. 

However, I think it's not a good idea to work with  a private network!

It is always recommended to set up a public network in settings!

Or am I wrong?

What should I do? what settings to choose?

Download Image

[GT500 585]

Public network is recommended when your computer is directly connected to the Internet (such as with a 3G or 4G "wireless broadband" card), or is connected to a public network such as public WiFi or the network in a hotel.

For a connection at home or at work that has a router with NAT, configuring your network as Private is fine.

[andrey 20]

Hello!

Thanks!

That is-do you recommend to leave the settings like on the screenshot?

[GT500 585]

I recommend leaving the rule configured as it was originally, and only removing ports that you need to unblock, or creating a new rule to allow those ports.

[andrey 20]

Thank you, I will!

[GT500 585]

You're welcome.