A Firewall is a network security system that monitors and controls the incoming and outgoing network traffic based on applied security rules. A firewall typically establishes a barrier between a trusted, secure, internal network and another outside network, such as the Internet, which is assumed to not be secure or trusted. Our firewall can be accessed from an account level and an individual SimpleWAN device. Here is where you would find the firewall section from the navigation pane on a given site after entering the site overview.

In an effort to simplify all things firewall, we have implemented a graphical representation for easily adding firewall rules and corresponding port forwards if necessary. This graphical representation of creating firewall rule can be found under Simple Rules. Go to the Site Overview, Click Firewall, and then click Simple Rules. Once inside, click the plus “+” icon to add a new rule. As a note, lower-numbered priorities are “higher priority”; the first rule that matches the traffic will be applied. Simple Firewall Rules are lower-priority than normal Firewall Rules. Keep this in mind when creating both regular Rules and Simple Rules. Below is a sample Simple Rule. Bear in mind, our support team cannot suggest or create Firewall rules to/for you due to liability reasons!

To add a new Regular Firewall rule, click Firewall on the navigation pane, then click click the Rules option. Once inside the page, click the plus “+” icon on the upper right to add a new rule. If you don't see this option, make sure to verify that you are in Advanced View by clicking on the logged in as section of the dashboard in the very top right of the page. This section requires that you list the following attributes for a Firewall rule:

• Action (Pass, Block, Reject) - Pass will allow matching traffic through. Block will not allow it, but not issue a response. Reject will block and let the sender know the traffic has been rejected.
• Interface (WAN/LAN/VLAN) - This is the interface that will first receive the matching traffic. It is usually the WAN interface for opening ports to the Internet, or the LAN/VLAN interface for restricting web browsing.
• IP Version - Generally, you're going to be picking IPv4. IPv6 addressing is picking up steam, but most of the Internet still runs off of IPv4 addressing.
• Protocol - Select from a drop down list which TCP/IP-level protocols should this rule match.
• Source Type (Any, IP Address or Subnet, or Network)
• Source Port Start (Leave blank for all)
• Source Port End (Leave blank for Single Port Rule)
• Destination Type (Any, IP Address or Subnet, or Network)
• Destination Port Start (Leave blank for all)
• Destination Port End (Leave blank for Single Port Rule)
• Description - Be sure to leave a detailed description of what the rule was put in place for to help yourself or others.
• Status (Enabled or Disabled)

• 1:1 NAT
• Port Forwarding
• Blocking Traffic from accessing the internal network
• Allowing Traffic into the internal network