No inbound applications. They are blocked at the visitor router ACLs.
Palo Alto Network (PAN) firewall has threat protection and blocks URL categories such as porn.
Local access between clients on the visitor network is blocked.
The are no servers allowed on the public visitor network (VISITOR-PUB=198.129.21..0/21) . There are a handful of servers on the VISITOR-SUPPORt=198.129.216.0/26:
| Node | Interface # | IP address |
|---|---|---|
| visserv1 | 1 | 198.129.37.8 |
| net-vis01 | 1 | 198.129.37.10 |
| net-vis02 | 1 | 198.129.37.11 |
| visserv3 | 1 | 198.129.37.12 |
| visserv4 | 1 | 198.129.37.13 |