...
| Info |
|---|
This section describes firewall policies in private cloud with network managers (NSX, NSX-T) and in public cloud (AWS, Amazon, OCI), and firewall rules in Google Cloud Platform. |
Introduction to firewalls
...
Go to Virtual datacenters → Network → Firewalls
For GCP go to Global → Network → Firewalls
Click the Add button
Enter the firewall details
In GCP, if you assign a firewall to a Virtual datacenter, you can then use it as a default firewall
In VCD, if you do not select a Virtual datacenter, the platform will create the firewall in the platform only, not in the provider
Click Save to create the firewall
Add Firewall rules as describe in Create firewall rules.
...
Edit firewall
...
rules
You can define edit firewall rules for inbound and outbound traffic in your firewall policy.
To add a new firewall rule:
Select the virtual datacenter or location
Select the firewall
On the Firewall rules panel, click the pencil Edit button
Select the Inbound or Outbound tab for the traffic direction you wish to control
Enter the details of a rule
Protocol
Select from Common protocols, OR
Select and enter a Custom protocol
Port range with the Start port and End port that this rule will apply to.
To enter one port, enter the same value twice, or optionally apply the rule to a number of ports at the same time.
For Azure and GCP, you can enter:a single port, such as
80a range, such as
1024-65535a list of port/range, such as
80,1024-65535
Sources or Targets as a network address and netmask, or a comma separated list of these (with no spaces)
Click Add. The firewall rule will be added to the Firewall rules list
Enter more rules as required, then click Save
...
after you create a firewall.
See Edit firewall policy rules
...
Create a firewall policy in GCP
| Excerpt | ||
|---|---|---|
| ||
In GCP, the platform can create firewall rules in virtual datacenters or in global networks, to later attach to VMs.
To create a new firewall, do these steps:
|
...
|
...
Go to Inbound or Outbound and add firewall rules
For more details see GCP firewall policy rules table below
...
After you finish adding rules, click Save
...
Direction
...
|
...
GCP firewall policy table
...
Field
...
Description
...
Name
...
Name of the firewall policy. See GCP entity naming conventions
...
Virtual datacenter
...
Optionally select a virtual datacenter. This option is useful in recommending firewalls for your users and to enable you to set a default firewall. If you do not select a virtual datacenter, the platform will still create the firewall in the provider and users can still attach this firewall to their VMs
|
...
|
...
GCP firewall rules table
...
Field
...
Description
...
Common protocols
...
Optionally select from a predefined common protocol to automatically complete the Protocol and default Ports
...
Protocol
...
Enter the protocol
...
Ports
...
|
...
Allow
...
If selected, allow traffic; if unselected, deny traffic
...
Disabled
...
If selected, disable the firewall
...
Logs activated
...
If selected, activate firewall rule logs in GCP
The platform will create your firewall in the provider. |
...
Set a firewall policy as the default for a virtual datacenter
...
Go to Virtual datacenters → select a virtual datacenter → Network → Firewalls
To display all firewalls in Google Cloud Platform
...
Go to Cloud virtual datacenters view → Locations
Select a location
Go to Network → Firewalls
Firewalls that do not exist in the provider are grayed out, and you should delete these firewalls.
...
Go to Cloud virtual datacenters view
Go to Global → Azure → Resource Groups
Select a resource group
To display the details of the firewall, edit the firewall
...
Assign a firewall policy to a VM
...