Skip to main content

Manage Firewall rules

This guide describes how to view and manage firewall rules in the Firewall feature on a Specific VPC.

Prerequisites​

  • Your account must be specially configured by FPT Cloud to use the Firewall feature.
  • The VPC you are working with must be a Specific VPC.
  • You must have permission to manage network resources in the corresponding VPC.

Note: If the Firewall menu does not appear in the navigation interface, your account has not been configured for this feature. Please use Security Groups to control network traffic, or contact FPT Cloud support to request activation.

Step 1 — Navigate to Firewall​

  1. Log in to the FPT Cloud management portal.
  2. Select the Specific VPC whose firewall you want to manage.
  3. In the left navigation panel, select Network → Firewall.

The Firewall page displays three tabs: Firewall Rules, IP Sets, and Application Port Profiles.

Step 2 — View the Firewall Rules list​

Firewall Rules list

The Firewall Rules tab (default) lists all rules currently configured. Each rule shows: name, Application Port Profile applied, source (Sources), destination (Destinations), status (Status), enabled/disabled state (State), and action (Action: Allow/Deny).

You can click Manage priority rules to adjust the application priority order between rules.

Step 3 — Create a new Firewall rule​

  1. Click Create firewall rules.

Create Firewall rule form

  1. Fill in the form:
FieldRequiredDescription
Edge GatewayYesThe gateway this rule applies to.
NameYesThe identifying name of the rule.
DescriptionNoA note describing the purpose of the rule.
Enable Rule—Enable or disable the rule immediately after creation. Default: enabled.
ActionYesAllow — permit matching traffic. Deny — block matching traffic.
TypeYesThe firewall type (see table below).
SourcesNoTraffic source — IP address, CIDR range, or IP Set.
DestinationsNoTraffic destination — IP address, CIDR range, or IP Set.
Application Port ProfilesNoPre-defined port/protocol profiles (from the Application Port Profiles tab).
  1. Click Save to create the rule.

Type field explained​

Type valueDescriptionDefault behavior
Security GroupControls Internet-facing traffic to and from Instances.Default drop — all traffic blocked by default.
Distributed FirewallControls internal traffic between Instances within the VPC.Default allow — all traffic permitted by default.

Step 4 — Edit an existing rule​

  1. In the Firewall Rules tab, locate the rule you want to modify.
  2. Click the edit icon or select Edit from the action menu.
  3. Update the fields you want to change.
  4. Click Save to confirm.

Step 5 — Delete a rule​

  1. In the Firewall Rules tab, locate the rule you want to delete.
  2. Click the delete icon or select Delete from the action menu.
  3. Confirm the action in the confirmation dialog.

Warning: Deleting a rule immediately stops that rule from being enforced on network traffic. Review carefully before deleting.

Managing IP Sets and Application Port Profiles​

  • IP Sets (second tab): create named sets of IP addresses/CIDRs for reuse across multiple rules, rather than entering them manually each time.
  • Application Port Profiles (third tab): create named sets of ports and protocols to reference in the Application Port Profiles field when creating rules.