Hi there,
We have a customer traffic network which should allow all WAN traffic in/out directly to the machines!
There is no NAT on this network, the subnet goes straight upstream and the machines are connected directly to this WAN with a public IP address.
The default deny rule, although we have Allow all in/out to WANCustomer set, keeps stopping TCP/UDP (but oddly not ICMP) traffic from hitting the servers.
Any ideas on how we can figure out why the allow rule is being ignored/manually set a default deny rule on other interfaces and remove the floating one?
Picture of default deny hitting attached
Update!
We've figured out UDP + ICMP pass without an issue, the default deny rule is only catching TCP packets although there is a rule in-spec to allow the traffic!