Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Note

To fully use this screen, you must have the following permissions assigned to your account:

  • Read Virtual Data Centers

  • Read Firewall

  • Write Firewall


In the Firewall screen, each Each entry in the table in the Firewall screen represents a single firewall rule; however, each firewall rule can contain several IP addresses or just a single IP address.

You can combine related IP addresses into a single IP Group. For example, if you want to block traffic from three separate IP addressaddresses, you do not have to create three separate firewall rules. Instead, you can combine the three separate IP addresses into a single, configurable IP Group. Then, when you create a firewall rule, you can pick the newly created IP Group as your Source or Destination IP addressesaddress.

Anchor
Create-an-IP-group
Create-an-IP-group
Create an IP Group

...

  1. In the Armor Management Portal (AMP), on the left-side navigation, click Security.

  2. Click Firewall.

  3. If you have virtual machines in various data centers, then in the top drop-down menu, select the desired data center.

  4. Click IP Groups.

  5. Click Actions, and then click New Group.

  6. In the Name of IP Group Name, enter a descriptive name.

    • Armor recommends that you add Source or Destination into the name of the IP Group to help you identify the IP Group as the Source or Destination IP group.

  7. In Add Members To Group IP Addresses, enter a member , and then click the plus icon.

    • You can enter:

      • A single IP address

      • A range of IP addresses

      • CIDR

    • You must add at least one member.

    • You can add multiple members to a service an IP group.

  8. Click Apply Create Group.

    • The newly created IP group will appear at the bottom of the table.

...

  1. In the Armor Management Portal (AMP), on the left-side navigation, click Security.

  2. Click Firewall.

  3. If you have virtual machines in various data centers, then in the top drop-down menu, select the desired data center.

  4. In the Source or Destination column, hover over the desired IP group, then click Edit IP Group. Or, click the IP Groups tab.

  5. Hover over the desired IP group, then click the vertical ellipses.

  6. Make your changes, and then click Apply Update Group to save.


Anchor
Delete-an-IP-Group
Delete-an-IP-Group
Delete an IP Group

...

Note

You cannot delete an IP group that is actively used in a firewall rule.

  1. In the Armor Management Portal (AMP), on the left-side navigation, click Security.

  2. Click Firewall.

  3. If you have virtual machines in various data centers, then in the top drop-down menu, select the desired data center.

  4. Click IP Groups.

  5. Locate and place your cursor over the desired IP group . Click the trash iconand click on the vertical ellipsis.

  6. Click on Delete IP Group.


Topics Discussed

Table of Contents
maxLevel3
minLevel3