OPEN FIREWALL RULE TO PUBIC SERVICE TO INTERNET
- Tran Dai Quan
- Tran Khanh Ngoc
Overview
The default Edge gateway firewall rule on Tenant is set to Deny all. We must create firewall rules for traffic to virtual services from the internet. More detail on edge way firewall.
Procedure
- 1. Create IP set
Step 1: Log in to the HI GIO PORTAL as an Organization Administrator and Navigate to
Step 2: Networking > Edge Gateway > Security > IP Sets.
Press NEW to define the IP Set for VIPs.
Name: type IP Set name (example VIP-Web)
IP Address: type IP Address or IP Range (this IP for VIP that was created before).
- 2. Create an Edge Firewall Rule
Step 1: Log in to the HI GIO PORTAL as an Organization Administrator and Navigate to
Networking > Edge Gateway > Services > Firewall.
Step 2: Press EDIT RULES to add NEW RULE for VIPs.
Name: type Rule name (example Allow_VSWeb)
Applications: choose your application types (example: HTTP and HTTPS)
Source: Any (for internet users)
Destination: Select IP Set configured before (example VS_192.168.2.10)
Action: Allow
Step 3: Click Save to complete EDIT RULES
In case we’re using a distributed firewall in our environment. we should create and distribute firewall rules for virtual service and pool
End.