Firewall System Rules

 

System Rules are basic rules for common network applications and functions. These take precedence over Application and Advanced Packet rules. We recommend you ensure these rules are controlled by your Console for maximum security across your network.

In the Cloud Console, you can choose different rules for Private (trusted) and Public (untrusted) networks.

For most of these rules, you can choose to Enable, Disable, or Decide based on packet rules. If you select the last option, be sure there are packet rules configured for the type of traffic you can expect in Firewall Advanced Packet Rules.

Most network environments enable Allow Windows File and Printer Sharing and/or Allow remote desktop connections to this computer. Your network may require slightly different configuration.

System Rule Descriptions

• Allow incoming file and printer sharing over SMB protocol: authorizes other devices in the network to access shared folders and printers on devices
• Allow incoming remote desktop (RDP) connections: authorizes other devices in the network to remotely access and control devices when the Remote Desktop service is enabled
• Allow incoming ping and trace requests: authorizes incoming Internet Control Message Protocol (ICMP) messages. ICMP is typically used by system tools, such as ping or tracert commands, for diagnostic or control purposes when troubleshooting connectivity issues
• Allow outgoing ping and trace requests: authorizes outgoing Internet Control Message Protocol (ICMP) messages
• Allow Domain Name System (DNS) traffic: authorizes communication with Domain Name Servers which enables devices to recognize the IP addresses of the websites you visit
• Allow Dynamic Host Configuration Protocol (DHCP) traffic: authorizes communication using the Dynamic Host Configuration Protocol to automatically provide devices with IP addresses and other related configuration information such as the subnet mask and default gateway
• Allow Virtual Private Network (VPN) connections: authorizes connections to Virtual Private Networks
• Allow IGMP traffic: authorizes multicast communication using the Internet Group Management Protocol, which is required by some media streaming services for more efficient use of resources during activities such as video streaming and gaming
• Allow Multicast traffic: authorizes applications and services for media streaming when distributing content to groups of multiple recipients in a single transmission, which is necessary for activities such as video-conferencing

Preferences

You can select these options at the bottom of the System Rules section by ticking or unticking the checkboxes.

• Show notifications about newly created ‘allow’ rules
• Show notifications about newly created ‘block’ rules