Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Go to Virtual datacentersNetworkFirewalls

    1. For GCP go to Global → Network → Firewalls

  2. Click the Add button

  3. Enter the firewall details

    1. In GCP, if you assign a firewall to a Virtual datacenter, you can then use it as a default firewall

    2. In VCD, if you do not select a Virtual datacenter, the platform will create the firewall in the platform only, not in the provider

      Image RemovedImage Added
  4. Click Save to create the firewall

  5. Add Firewall rules as describe in Create firewall rules.

...

Info

Before you edit firewall rules in AWS, synchronize the firewall to update the rules because AWS will not allow you to create a rule that already exists in the security group. Remember that it may take some time for firewall rules to propagate throughout AWS. Until the rules have propagated, the platform will not be able to detect them. See http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/query-api-troubleshooting.html#eventual-consistency

...

Create a firewall policy in GCP

Excerpt
nameCreate a firewall policy in GCP

...

n GCP, the platform can create firewall rules in virtual datacenters or in global networks, to later attach to VMs.

Panel

Privileges: Manage firewall, Manage global networks

To create a new firewall, do these steps:

  1. Go to Virtual datacentersNetworkFirewalls OR

...

  1. Go to myCloud → Global → select the GCP provider → Network → Firewalls

  2. Click the Add button

  3. Enter the firewall details and select the direction

    1. For

...

Go to Inbound or Outbound and add firewall rules

For more details see GCP firewall policy rules table below

...

After you finish adding rules, click Save

...

    1. the

...

GCP firewall policy table

...

Field

...

Description

...

Name

...

Direction

...

    1. Name, see GCP entity naming conventions

...

Virtual datacenter

...

Optionally select a virtual datacenter. This option is useful in recommending firewalls for your users and to enable you to set a default firewall. If you do not select a virtual datacenter, the platform will still create the firewall in the provider and users can still attach this firewall to their VMs

    1. For the Direction, select INGRESS for incoming traffic or EGRESS for outgoing traffic

    2. For Sources or Targets

...

    1. , enter a list of comma separated values in CIDR format

    2. For Priority

...

GCP firewall rules table

...

Field

...

Description

...

Common protocols

...

Optionally select from a predefined common protocol to automatically complete the Protocol and default Ports

...

Protocol

...

Enter the protocol

...

Ports

...

    1. , the default is 1000 and lower numbers have higher priority

...

Allow

...

If selected, allow traffic; if unselected, deny traffic

...

Disabled

...

If selected, disable the firewall

...

Logs activated

...

If selected, activate firewall rule logs in GCP

  1. Go to Inbound or Outbound and add firewall rules

    1. Optionally, select from predefined Common protocols OR
      Enter Protocols and enter a list of Ports, separated by commas, and/or a port range, separated with a dash (e.g. 80,8000-8009)

  2. After you finish adding rules, click Save

The platform will create your firewall in the provider.

...

Set a firewall policy as the default for a virtual datacenter

...

  1. Go to Virtual datacenters → select a virtual datacenter → NetworkFirewalls

    Image RemovedImage Added

To display all firewalls in Google Cloud Platform

...

  1. Go to Cloud virtual datacenters view → Locations

  2. Select a location

  3. Go to Network → Firewalls

    Image RemovedImage Added

    Firewalls that do not exist in the provider are grayed out, and you should delete these firewalls.

...

  1. Go to Cloud virtual datacenters view

  2. Go to Global → Azure → Resource Groups

  3. Select a resource group

  4. To display the details of the firewall, edit the firewall

    Image RemovedImage Added

...

Assign a firewall policy to a VM

...