Important - When creating Firewall Rules for endpoint clients, create explicit rules that allow all endpoints to connect to all of the domain controllers on the network. In the Users Disabling Network Protection action, under Network Protection Alerts, in the Firewall row, select Allow Alert. In the Log Upload action, Enable log upload must be selected. To use logs and alerts, you must configure options in the Client Settings rules: If you have a rule that drops or accepts all traffic, do not enable logging. None - Log and alert messages are not created. Log - Record rule enforcement in the Endpoint Client Log Viewer.Īlert -Show a message on the endpoint computer and record rule enforcement in the Endpoint Client Log Viewer. What is done to traffic that matches the rule: Accept or Drop. Network protocol or service used by traffic. Source and Destination can be any of the Network Objects defined in the Access Zones policy or the Trusted/ Internet Zone. For an inbound rule, the destination is always the local computer. For an outbound rule, the source is always the local computer.ĭestination - Destination location of network traffic.

Source - Source location of the network traffic. The last rule is usually a Cleanup Rule that says to drop traffic that does not match any of the previous rules. Rules are enforced from the top to the bottom. Rule priority is important because a client checks Firewall rules based on its sequence in the Rule Base. Right-click in a column to select an option. In the Firewall rule in the Policy tab, right-click the inbound or outbound traffic Action and select Edit Properties.Ĭlick one of the Add Rule icons from above the Rule Base.įill in the columns of the rule. and rules that relate to outbound traffic in the outbound traffic Rule Set of traffic parameters and other conditions in a Rule Base (Security Policy) that cause specified actions to be taken for a communication session. Create Firewall rules that relate to inbound traffic in the inbound traffic Rule Base All rules configured in a given Security Policy.

Smart endpoint checkpoint