Internal firewall configuration

It is possible to configure the settings of an internal firewall to restrict access to specific items.

You can limit access to the:
Note:
It is only possible to do this for physical and virtual installations. It is not possible for container installations.
Note:
To limit access to these services, you must use the command-line interface (CLI) to add the required configurations.
Note:
The default settings permit connections from any internet protocol (IP) address. The system ignores lines with invalid IP addresses.
Important:
You should use caution when changing internal firewall rules. This is because you can lose access to the device administration interface. In the event of an error, console access is required to fix the rules.

The table below gives the configuration settings that let you fine-tune the firewall rules.

Table 1. Internal firewall configuration settings
Parameter Description
system firewall icmp Configure acl for icmp protocol
system firewall https Configure acl for http and https services
system firewall ssh Configure acl for ssh service
system firewall snmp Configure acl for snmp service