Configure and Manage Firewall Rules

Configure Firewall in Site Configuration > Firewall tab. Under the ‘Firewall rules’ section will be listed any existing rules that have been created and applied. By default there is an Allow/All rule for outbound traffic.

To create a new rule, click “+ New firewall rule”. You will need the following information:

• Description (optional)

• Protocol (required)

  • ALL (includes TCP, UDP, and ICMP)

  • TCP

  • UDP

  • TCP_UDP (TCP and UDP)

  • ICMP

• Action (required)

  • Allow

  • Deny

  • Drop

• Source network(s) (optional)

  • Use “…” for drop down of existing VLAN’s or LAN networks

• Source port(s) (optional)

  • Port or port range, e.g., “22” or “22-24” or “21-22, 25, 80-81, 443, 8080-8081“

• Destination network(s) (optional)

  • Use “…” for drop down of existing VLAN’s or LAN networks

• Destination port(s) (optional)

  • Port or port range, e.g., “22” or “22-24” or “21-22, 25, 80-81, 443, 8080-8081“

     

Once a rule is added, it will appear in the list of Firewall rules. Higher rules on the list will override lower rules.

The ‘Hits' column of the firewall rules will show how many traffic flows matched each rule, and the “Enable” toggle button allows the rule to be enabled or disabled without removing the rule from the table.

For deeper troubleshooting, review the site Logs → Firewall Logs for additional details.