VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Manuale Utente Scaricare il pdf (Pagina 75)

VMware, Inc. 75

Chapter 13 App Firewall Management

Create a Layer 2/Layer 3 App Firewall Rule

TheLayer2/Layer3firewallenablesconfigurationofallowordenyrulesforcommonDataLinkLayerand

NetworkLayerrequests,suchasICMPpingsandtraceroutes.YoucanchangethedefaultLayer2/Layer3rules

fromallowtodenybasedonyournetworksecuritypolicy.

Layer2/Layer3firewallrules

allowordenytrafficbasedonthefollowingcriteria:

To create a Layer 2/Layer 3 firewall rule

1InthevSphereClient,gotoInventory>HostsandClusters.

2 Selectadatacenterresourcefromtheresourcetree.

3ClickthevShieldApptab.

4ClickAppFirewall.

5ClickL2/L3Rules.

6ClickAdd.

Anewrowisaddedatthebottomofthe

DataCenterRulessectionofthetable.

7Double‐clickeachcellinthenewrowtotypeorselecttheappropriateinformation.

YoucantypeIPaddressesintheSourceandDestinationfields

8 (Optional)SelecttheLogcheckboxtologallsessionsmatchingthisrule.

9ClickCommit.

Creating and Protecting Security Groups

TheSecurityGroupsfeatureenablesyoutocreatecustomcontainerstowhichyoucanassignresources,such

asvirtualmachinesandnetworkadapters,forAppFirewallprotection.Afterasecuritygroupisdefined,you

addthesecuritygrouptoafirewallruleforprotection.

Add a Security Group

InthevSphereClient,youcanaddasecuritygroupatthedatacenterresourcelevel.

To add a security group by using the vSphere Client

1ClickadatacenterresourcefromthevSphereClient.

2ClickthevShieldApptab.

3ClickSecurityGroups.

4ClickAddGroup.

Criteria Description

Source(A.B.C.D/nn) Container,directioninrelationtocontainer,orIPaddresswithnetmask(nn)from

whichthecommunicationoriginated

Destination(A.B.C.D/nn) Container,directioninrelationtocontainer,orIPaddresswithnetmask(nn)which

thecommunicationistargeting

Protocol Transportprotocolusedforcommunication

NOTELayer2/Layer3firewallrulescanalsobecreatedfromtheFlowMonitoringreport.See“A d d anApp

FirewallRulefromtheFlowMonitoringReport”onpage 67.

1 2 ... 70 71 72 73 74 75 76 77 78 79 80 ... 161 162

Nessun commento

VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API Manuale Utente Pagina 75