HomeIncident briefing
Back to the library
INCIDENT #080 · SECURITY

Restore two services without opening the boundary

Expert35 minutesPro lab

The incident

A single application policy change blocked HTTPS on TCP/443 and a telemetry collector on UDP/2055. Restore both approved flows. SSH, Telnet, and TCP/8080 must remain blocked.

Your objective

Restore the documented application transport flows and return reachability. Keep SSH blocked, preserve the working telemetry branch, and do not remove security boundaries or change interface addresses.

The network

Network topology4 devices 3 links

Restore two services without opening the boundary — network topologyR1: Client edge. R2: Transit core. R3: Application edge. R4: Telemetry edge. R1 connects to R2. R2 connects to R3. R2 connects to R4. Connections show physical links, not service health.R1 ↔ R2 · 10.160.12.0/30R2 ↔ R3 · 10.160.23.0/30R2 ↔ R4 · 10.160.24.0/30R1Client edgeR1 · Client edge · Starting deviceR2Transit coreR2 · Transit coreR3ApplicationedgeR3 · Application edgeR4Telemetry edgeR4 · Telemetry edge
Physical links · Service health not shown
Link addressing (3)
  • R1 R210.160.12.0/30
  • R2 R310.160.23.0/30
  • R2 R410.160.24.0/30
4 devices · Cisco IOS syntax · Simulated network

What you’ll practice

acl ordermulti service validationacl policyleast privilegebidirectional verification

Interview exercises are inspired by common industry competencies. They are not proprietary interview questions.