Firewall Rules

Firewall Rules

A Firewall is a network security system that monitors and controls the incoming and outgoing network traffic based on applied security rules. A firewall typically establishes a barrier between a trusted, secure, internal network and another outside network, such as the Internet, which is assumed to not be secure or trusted. Our firewall can be accessed from an account level and an individual SimpleWAN device. Here is where you would find the firewall section from the navigation pane on a given site after entering the site overview.

Simple Rules

In an effort to simplify all things firewall, we have implemented a graphical representation for easily adding firewall rules and corresponding port forwards if necessary. This graphical representation of creating firewall rule can be found under Simple Rules. Go to the Site Overview, Click Firewall, and then click Simple Rules. Once inside, click the plus “+” icon to add a new rule. As a note, lower-numbered priorities are “higher priority”; the first rule that matches the traffic will be applied. Simple Firewall Rules are lower-priority than normal Firewall Rules. Keep this in mind when creating both regular Rules and Simple Rules. Below is a sample Simple Rule. Bear in mind, our support team cannot suggest or create Firewall rules to/for you due to liability reasons!





Rules

To add a new Regular Firewall rule, click Firewall on the navigation pane, then click click the Rules option. Once inside the page, click the plus “+” icon on the upper right to add a new rule. If you don't see this option, make sure to verify that you are in Advanced View by clicking on the logged in as section of the dashboard in the very top right of the page. This section requires that you list the following attributes for a Firewall rule:

  • Action (Pass, Block, Reject) - Pass will allow matching traffic through. Block will not allow it, but not issue a response. Reject will block and let the sender know the traffic has been rejected.
  • Interface (WAN/LAN/VLAN) - This is the interface that will first receive the matching traffic. It is usually the WAN interface for opening ports to the Internet, or the LAN/VLAN interface for restricting web browsing.
  • IP Version - Generally, you're going to be picking IPv4. IPv6 addressing is picking up steam, but most of the Internet still runs off of IPv4 addressing.
  • Protocol - Select from a drop down list which TCP/IP-level protocols should this rule match.
  • Source Type (Any, IP Address or Subnet, or Network)
  • Source Port Start (Leave blank for all)
  • Source Port End (Leave blank for Single Port Rule)
  • Destination Type (Any, IP Address or Subnet, or Network)
  • Destination Port Start (Leave blank for all)
  • Destination Port End (Leave blank for Single Port Rule)
  • Description - Be sure to leave a detailed description of what the rule was put in place for to help yourself or others.
  • Status (Enabled or Disabled)




Types of services that require rules:
  • Blocking Traffic from accessing the internal network
  • Allowing Traffic into the internal network

    • Related Articles

    • Port Forwarding

      Port Forwarding is an application of NAT that redirects a communication request from one address and port number combination to another while the packets are traversing a network gateway, such as a router or firewall. This feature is commonly used to ...
    • OPT Port Failover

      Your SimpleWAN device supports failover to a secondary connection in the event your primary connection has an issue. You can easily add this feature by contacting your Reseller/support agent and asking them to activate the feature as it needs to be ...
    • 1:1 NAT

      Use this option to map an available IP address on the WAN side of the SimpleWAN device to a local IP address on your network. This is usually done through via a static IP block you have available from your ISP. Before setting up the 1:1 NAT in the ...
    • Account Firewall Rules

      Account Firewall rules This will allow you to create a Firewall Rule in an Account Level,  This is usefull if you have preset Rules that you needed open for specific devices like SIP phones, etc. This rule will also apply to newly created sites. How ...
    • Firewall Log

      The Firewall Log section will have the Blocked Attacks map which includes 3 sections: Blocked Ports (above map), Top Attackers, and Top Ports (both at bottom). Underneath the attack map lies the System Logs section as well as the Firewall Logs ...