Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Section
id132266399
Section
id132266410
Section
background-color$lightGrayColor
id132266398

Topics Discussed

Table of Contents
maxLevel3
minLevel3

Section
id132266400
Note

To fully use this screen, you must have the following permissions assigned to your account:

  • Read Virtual Data Centers
  • Read Firewall
  • Write Firewall


In the Firewall screen, each entry in the table represents a single firewall rule; however, each firewall rule can contain several IP addresses or just a single IP address.

You can combine related IP addresses into a single IP Group. For example, if you want to block traffic from three separate IP address, you do not have to create three separate firewall rules. Instead, you can combine the three separate IP addresses into a single, configurable IP Group. Then, when you create a firewall rule, you can pick the newly created IP Group as your Source or Destination IP addresses.


Anchor
Create an IP group
Create an IP group
Create an IP Group


  1. In the Armor Management Portal (AMP), on the left-side navigation, click Security.

  2. Click Firewall.

  3. If you have virtual machines in various data centers, then in the top drop-down menu, select the desired data center.

  4. Click IP Groups.
  5. ClickActions, and then clickNew Group.
  6. In IP Group Name, enter a descriptive name.
    • Armor recommends that you add Source or Destination into the name of the IP Group to help you identify the IP Group as the Source or DestinationIP group.
  7. In Add Members To Group, enter a member, and then click the plus icon.
    • You can enter:
      • A single IP address
      • A range of IP addresses
      • CIDR
    • You must add at least one member.
    • You can add multiple members to a service group.
  8. Click Apply.
    • The newly created IP group will appear at the bottom of the table.


Anchor
Edit an IP Group
Edit an IP Group
Edit an IP Group


Insert excerpt
ESLP:Delete or edit a rule or group (snippet)
ESLP:Delete or edit a rule or group (snippet)
nopaneltrue

  1. In the Armor Management Portal (AMP), on the left-side navigation, click Security.

  2. Click Firewall.

  3. If you have virtual machines in various data centers, then in the top drop-down menu, select the desired data center.

  4. In the Source or Destination column, hover over the desired IP group, then click Edit IP Group. Or, click the IP Groups tab.
  5. Hover over the desired IP group, then click thevertical ellipses.
  6. Make your changes, and then click Apply to save.


Anchor
Delete an IP Group
Delete an IP Group
Delete an IP Group


Insert excerpt
ESLP:Delete or edit a rule or group (snippet)
ESLP:Delete or edit a rule or group (snippet)
nopaneltrue

  1. In the Armor Management Portal (AMP), on the left-side navigation, click Security.

  2. Click Firewall.

  3. If you have virtual machines in various data centers, then in the top drop-down menu, select the desired data center.

  4. Click IP Groups.
  5. Locate and place your cursor over the desired IP group.
  6. Click the trash icon.
  7. Click Delete IP Group.




Was this helpful?