Firewall¶

The firewall controls what connected users can reach inside a network. Each network has its own list of rules. A rule says who (Source) can reach what (Destination) over which ports (Service), and whether that traffic is allowed or denied.

Go to Networks → Firewall. Each network has its own section. Click a network's section to open its rules.

Firewall Rules at the top right shows how many rules your workspace uses out of the total allowed.

How rules are checked¶

Vipilink checks a network's rules from the top, rule 1 first, and applies the first rule that matches the traffic. Rules further down are not checked. If no rule matches, the network's default action applies.

So put specific rules above general ones. In the example below, Block Contractor SSH must be above any rule that would allow contractors to reach the AWS VPC, or it never applies.

Add a rule¶

1. In the network's section, click Add Rule. A new row appears at the bottom, marked in yellow until you save it (1).
2. Enter a Name.
3. Set Source, Destination and Service. Click the pencil or + in a cell to choose (2):
   • Source and Destination: users, groups or addresses. Addresses come from Objects → Addresses.
   • Service: a protocol and ports, for example HTTPS or SSH, from Objects → Services. Any means all traffic.
4. Choose Allow or Deny in the Action column.
5. Click Save Changes (3). To discard your changes, click Cancel.

Change the order¶

Drag a rule by its number to move it up or down. The numbers update, and Save Changes appears. Click it to apply the new order.

Turn off, edit or delete a rule¶

• Turn off: use the switch in the Status column. The rule stays in the list but isn't applied.
• Edit: click a cell and change it, then click Save Changes.
• More actions: click the ... menu at the end of the row, for example to add a rule above or below, duplicate the rule or delete it.