Manage firewall profiles

A Firewall Profile is a set of firewall rules that apply to a VNET and therefore the application instances running within that VNET. You can select a firewall profile in the VNET Firewall Settings.

Note

These rules can be overridden by a Firewall Override, which is a set of firewall rules applied at the virtual datacenter level.

Refer to the following topics:

• How firewall profiles and overrides are applied
  Firewall Override rules (at the virtual datacenter level) are evaluated prior to the Firewall Profiles rules (at the VNET level) and will override the VNET Firewall Profile rules if there is a conflict.
• Default profile rules
  Two firewall profile rules are available by default.
• Create a firewall profile
  Infrastructure admin users can create and add a firewall profile to a VNET in your ThinkAgile CP infrastructure.
• View firewall profiles
  You can view firewall profiles from the ThinkAgile CP Cloud Controller management console.
• View firewall profile details
  To view more detailed information about an individual firewall profile, on the Firewall Profiles page, in the Name column, select and click the firewall profile for which you want to view details. The Firewall Profile page opens and displays detailed information, such as the list of Rules that are part of the firewall profile and the VNETs to which this firewall profile applies.
• Modify firewall details
  If you have the proper permissions, you can modify an existing firewall profile. Follow these steps to access the Actions menu for firewall profiles in ThinkAgile CP Cloud Controller.
• Examples of firewall rules
  Review this topic to view examples of firewall rules allowing HTTP and HTTPS only, and firewall rules to allow SSH access to a specific range.