Quick start

This walks through creating a firewall on an external network and opening one service to outside access.

1. Create a firewall

1. Open the Security app from the desktop and select Firewalls in the sidebar.
2. Click Create firewall.
3. Enter a Firewall name and select the external network to protect under External Network.
4. Once created, the firewall appears in the list. At this point it has no rules, so all traffic coming in from outside is denied.

2. Add an inbound rule

1. Click the firewall name in the list to open its detail screen.
2. On the Inbound rules tab, click Add rules.
3. Select a Protocol, then enter the source and destination CIDR and ports to allow. Fields left empty are treated as ANY (all).
4. Click Add. The rule is added to the list, and traffic that matches it is allowed.

Allow-all rule

Leaving every field empty creates a rule that allows all inbound traffic from outside. Specify a destination or source to limit exposure.

Next steps

• Firewalls — Input rules and how to edit and delete