Access to whois website and check the IP address user getting
There is no alarm due to user miss configuration.
Calling user and get more information, and actually find out user not so sure about the firewall concept.
User put server in the Trust zone and both WAN link in the untrust zone.
Explain to user firewall zone needed to be declare properly for the WAN link, Server, Department.
WAN link 1 = Firewall Zone name SingNET
WAN link 2 = Firewall Zone name StarHUB
Department HR = Firewall Zone name HR
Department Sales = Firewall Zone name Sales
Department Account = Firewall Zone name Account
Guest = Firewall Zone name Guest
FTP Server = Firewall Zone name FTP server
HTTP Server = Firewall Zone name HTTP Server
If the Firewall zone did not declare in the proper way, in future if implementation are needed, it will having difficulties to trace back which port is connected to which port, which vlan is for which device.(unless track physically).