Create a firewall profile

Infrastructure admin users can create and add a firewall profile to a VNET in your ThinkAgile CP infrastructure.

Complete the following steps to create a firewall profile:

1. Log in to the ThinkAgile CP Cloud Controller.
2. In the ThinkAgile CP Cloud Controller management console, under Networking in the left navigation area, click Firewall Profiles
3. On the Firewall Profiles page, click New Firewall Profile to display the New Firewall Profile dialog:
   Figure 1. New Firewall Profile page
   
   
4. In the Firewall Profile Name field, enter a name for the firewall profile.
5. Click Add Rule to add a new rule to the Firewall Profile as needed. The new rule will appear under the Default profile rules, which are required for VNETs.
6. Define the rule as follows:
   1. In the first drop-down, select the type of rule as Allow, Drop, or Reject.
   2. In the second drop-down, select the type of traffic to apply the rule to as either Incoming or Outgoing.
   3. In the third drop-down, select the traffic protocol type as All, TCP, UDP, or ICMP.

   4. For the fields, From Source IP Range and To Destination IP Range, you can enter an IP range in the format 198.168.100-198.168.0.100 or 198.168.0.100, or you can leave the fields blank for all IPs.

   5. For the Source Port Range and Destination Port Range fields, you can enter a port range in the format 1-65535 or 65535, or you can leave the fields blank for all ports.

   6. For the Comment field, you can enter a comment for this rule. (optional)

7. When you have added all needed rules, click Create Firewall Profile.
8. To add the firewall profile to a new VNET, see the topic, VNET Overview.
9. To add the firewall profile to an existing VNET, see the topic, Manage networks.