In this video and coming videos we'll see examples related to firewall rules.
So if I go inside the one setting you will find that we have log option.
We have the direction option log means you want to have the log packets so maybe at the time of troubleshooting
or any error you can go and check the log file and what's the alert and why it is reporting what is
reporting in the log.
So those type of things we can see the direction we have either in out in out we can go and put the
tag value and that will reflect in the log.
So when we capture the log or when we'll see the log at that time we can go and verify that then we
can put the notes and do to which particular change we could watch the reason to create this second
rule.
We have this great estate option as well where we can go and check the Patrick bytes in his tactics
associated with that particular rule.
It will be pointed after every five minutes.
So what we can do here that we can go and create the group and we have multiple options that we can
group small small entities inside the common group.
So for example I can create a group with a VM name attributes their IP their operating system and so
many things.
Once I have the group then simply I can go inside the rulebook.
I can create first of all I'll give the name of the policy inside that policy.
I can add a rule 1 2 3 4.
And by the end of this we should give a rule that will block everything.
So the preferred way is this that you allow.
So on top one two three four five like that to allow certain traffic and by default it will block the
rest of the things because the policy the approaches from top to bottom.
So it will read the rule from Rule One two three four five like that and then it will go and depart.
We can group again we can create the group of groups you can apply the policy to the firewall you can
apply the policy to the group as well.
Now when we are using this approach what is happening that we are giving the structure to the rules.
It's very easy for the admins are architects or the security audit auditor to go and understand the
policies.
Now suppose if you add a new VM so at the moment you will add the new VM inside the group.
That rule will be applicable to the new VM.
So for example for being 0 deployment it's very easy to do the the redeployment and in point of monitoring.
So for example monitoring point of view also makes it easy to do the monitoring.
So we have tons of option and if we use all those options after applying the policy after restructuring
the policy that how you want to allow apply how how you want to see the result.
So all those fine tuning options are there.
We have inside the DFW rulebook.
So let me quickly log into the firewall and let me show you the advance option i logged into their distributed
firewall.
And here you can see that.
So by default it will be blacklist.
So if you go and do the blacklist and then if you go and open any of the web page from outside you will
easily go and open that.
Now if you convert this to the white list then you have to put certain rules to override this thing.
So by default it will block everything.
Now if you go and reference the page you'll find that it will not open.
The next thing I want to show you is the advance option.
So here you can see the advance option.
Here you have the logging if you want to turn it on the direction is in out in out in and out means
both protocol IP for IP risks.
Here you can go and give the tag.
So maybe you can get the change figured say December or any date say 2020 or maybe 2019 at the moment
we are in 2020.
And you can give any thoughts or why you create this rule etc..
So these are the options we have.
And once you do this then you have this is that option as well that you can go and take the hit count
packet count by count et cetera et cetera so are like let's drop here and in the next section will create
certain rules and we are able to apply those rules as well.