Firewall Configuration Philosophy

Firewall follows the logic in the creating firewall rules similar to what Sandbox Module has. Firewall configuration recognizes three steps:

1. Object definition
   
   Define protocol, direction and port. This will save you the time when you would need to reuse the same definition again.
   
   Example: TCP protocol, incoming direction, local port any, remote port 80. This definition will suit any browser. Name it as MY WEB SERVER
2. Create profile
   
   Create the profile name. Use predefined Firewall Objects, assign them with the access rights (IP address, time interval, reporting level) and group them together into the profile.
   
   Example: Use MY WEB SERVER object and specify that it should allow the access from your LAN. Name the profile as ON MY LAN.
3. Assign the profile to the application group
   
   Example: Assign the application group WEB SERVER (which includes application iis.exe) with the profile ON MY LAN. The result - only users from your LAN will be able to access your web server.