All right so let's create the rule.
We can go and create certain rules.
So for example is a blacklist.
If I go and convert this to the WHO I kissed.
Nobody is converted to I just know if I go here and try to open this page you will see that it is a
still loading and loading.
And if I go ahead and try to pin shipping 172 1 6 10 dot eleven that is the inside of a web address.
Or maybe if I do it fine I think it is finished.
So why it is pinging.
Because if you go ahead and you see the infrastructure you have one rule that is telling allow ping
to all.
So what do we do here.
I'll go ahead and disable this particular rule once or disable this particular rule.
And again society is unreachable.
Let's go and check beeping.
Yes.
So now you can see that ping is down because this rule we have these and on other hand you can see that
we are not able to reach where the history to is because we have one other rule that is applied here
which is three tier app that rule inside that you can see that.
So for example web server this rule number three.
So anything to a web server history repeats.
And that truly those were visible.
So if I go here and enable this particular rule the rest of the rules are you can see this.
These are the visible rules.
But if I go and enable and published that rule then if I go here and try to refresh it Excel it should
open so will wait till it got resolved.
So what is happening here in this rule pattern and I delete and I'll create the first rule as well.
So first of all it will take that this rule web server to observer app to TV.
These are not treating because my actual source is for example outside the web server.
So outside to web server or the permission is it allowed or it is it not allowed so here I can see that
is still I am unable to go and open the outside to in.
So it is not allowing me to apply this rule.
And you can see these rules on the top are visible.
So what I do at the moment you can see we have this edit option.
I can take these rules and I can put I can put this rule on top I can see that and you can see how easy
we can ignore the rules.
What I have done that this client access from any Web server I made this on top I refresh the page and
then we'll go back here and then we'll try to open this
so let me quickly actually the court order the things that we have done first of all we are allowing
their DNS with this particular rule.
So DNS will get a result.
So IP to the you URL mapping will happen.
And then I went there and you can see that inside this rule I have this rule out of this I have allowed
one of the rule on the top in the rule book the rest of the rules say for example web to app.
And then app to DV they are blocked.
Now if you see this particular page it's not open at the moment.
So I want to show you that and a web to app app to maybe select me it will these rules as well because
as for our program here actually it is connected in the back is a web is accessing actually their database
as well.
So we we are inside the three tier architecture where things are connected.
So that's why when I enable a web to app and then app to be on they have this type of permission behind
the scene.
So that's why they are able to open that.
So what I can do here for example that if I create one more rules will let me disable this and this
is evil these rules whether disable these rules I'll go here and I try to open it cannot open now because
you don't have all tiers of access.
So in that case what I will do that I will go and add a rule.
And this time when I am writing the rules even when you can add the rule and you can do the change changes.
Correct.
So what I want I want to do access the web to be directly not web to app and TV directory Web to TV
and the source.
I will I want to create a source with IP group.
So I'll go and add the names.
For example group Web IP IP based group I want to create because I know that the IP address for the
web is 170 to 1 6 for example can last 24.
This is the group for the web.
I'll copy this also lets you apply and here you can see one IP and MAC set separate.
Likewise I'll go and create one more and this time I want to create group.
So group I want to create for Debbie.
Let's do this thing.
Let me clear to all that regroup.
So Web help IP group.
And we know that the IP group for app is 172 and 6 2013 was last 24 and you can save this.
And finally I'll add one more group that is say for example group and this is this group is
for D.B. IP and then we'll go and set the members of IP members.
That is 122 and 6 3 0 dark last 24.
But what I want to take care as a source is the rebel group so I can go and search on the top.
If you search here you'll get this web group with IP apply as a source and the destination I want to
use.
DV So I can go and search for TV.
So group giving we have created.
Apply it then we have option that I can go and select the services.
At the moment I leave it any but I will go and change this as will this permission as well.
So let me click above me publish so what you can see here that one of the rules I have that is coming
from any two web and then from Webby to D.B. I have these two.
Permission click publish and then we'll go here and see that we are able to open wide web are we able
to reach through the TV or not.
So still it is searching what I can do here.
Now I'm just showing you that a different methodology other way to do the same thing.
So in the destination group or what I do I'll add one more group this time I'll add app and once you
go and check the app you have app you can save.
No you can group the destinations so web to app and Web could give you with all the services we have
the permission and go back here and you go and check
and why are you doing here you can see still I am unable to reach out from application to be with this
particular rule.
So what I will do here I'll go here quickly I'll go and edit this particular rule so here we can see
let me scroll a little bit down because I want to edit this particular rule what you can do next.
It's very easy to execute and see you have you have the pencil icon.
So first of all I will go here and I'll remove.
So for example maybe a place what I have done here I created one rule and that rule is a web to app
save up to app web to app.
And here you can see the Web loop and instead of V A machine inside the group we are using the IP I
guess is correct.
So I have web to app.
No problem.
I can go and publish.
You can see that is still there is it.
It is not able to resolve.
Then what I do I do copy.
So I can see that you have this clone option.
I'll create one clone and this clone is something a web to activity this time will go ahead and we'll
clue on the rule like say Hap could it be so if we have a big rule then you can go and clone it.
There is no problem on that the source will be obviously the app and the destination will be Debby.
So let's quickly do that.
I can delete this and then I can search it up.
So here you can see that we have the app group app IP.
Play it and then I'll go here and app today.
We are the change the destination.
So let's change the destination.
Destination is nothing but DMV.
And here you have a play at the moment I am not freaking deports.
So what I have done any then it should be a web app and then app could be any any and let's click bubbles.
And now you go back.
Now you can see it is able to open.
So I have given the permission what I tried to show here is that instead of creating group with respect
to VM now these groups that you are seeing in the bottom these are not allowed these are the visible
but the services you can see that from web to app we have service 8 4 4 3 and I need to go and create
customer service it for 40 I'll show you now and then from app to DV We have a TTP enabler behind the
scene in the back.
Correct.
But these groups that you're seeing here these groups are with respect to VM and whatever policy that
I have created do that related to IP.
So you have multiple ways to do the same thing.
The better ways that you can group with respect to VM irrespective of what what IP addresses those beams
have.
We can group in in terms of name and activities.
And then we are using the traditional way of doing this thing.
So no I don't do that.
I'll go and create one rule for service that will be it for for three Agnew service because I want to
create this is for.
So for example I give the name set for.
So for port number eight for 40 and this belongs to the DCP DCP port number four for three.
So here you can go and I can give you for example DCP port for 4 8 4 4 3 so I should give the correct
date for 4 3 and this is not the IP.
This is something DCP and then I can give the port.
This is the source and destination port.
OK.
So when I have this I can click save and then I can go and search it.
I have created a rule with name for so I can go and search for Port equity correct.
Applied.
So now you can see that how I can change the service.
Let me click publish instead of any.
Now I'm using a specific port.
Now if I go here and refresh it there should be no impact so we'll see that it is able to open this
particular page or not because here also if you go and check and let's see this rule or it is actually
permitted there.
This is our DCP 8 4 4 3.
And if I want to see that particular rule what exactly they're inside DCP hateful for three and if I
can get that in the freezer so I can show you that.
Here you have.
And here if we can go and check what is there the source is nothing destination is 8 4 4 3 you can see
what I have given Suzanne destination both as a 440.
So what I can do here you can see the edit option as well is still it is not able to resolve.
That is correct that means if I can go here and seek it with time or just try to reach through the groups
framework.
So what we do here that will go back to 4 4 4 3 and I will search this and will edit that rule sources
nothing but destination is 8 4 4 3 resources any.
So I will go to this particular rule and we have option here to edit this rule.
And in this will go here and the source is blank and destination is 8 4 4 3 apply.
You can see that how easily we are seeing the changes on the fly.
So now Richard open hand if we get opened then likewise we can go and change this particular mission
as well that that is nothing but instead of zero for any I should be working as a It's TTP here you
can see this rule is SPDC so we can see that there still is some problem.
What I will do here.
E You have seen this rule and how we can educate so I'll quickly go here and instead of that rule let's
see let me look as well if I want more time this rule and what is then in our rule history latency there
can never rule it issuing it for three and that's not correct actually.
So let me go and
I should change this.
First of all I should see this now while you're saving you can see their destination is 8 4 4 3.
Now you can see the Buddha rules are almost equivalent and now if you go back here so you can see this
a multiple way multiple places that we can do the mistake.
And finally what I want to do here is that I want to make this rule as history tippy tippy is already
there I have to simply go there and call this has to be applied this publish this once I publish this
I'll go and make sure that I'm able to open this from the web to Debbie and then I will go here and
I want to delete this will I want to delete this rule and now our three year rules applications are
working perfectly.
So this is the way we have seen how we can create the rule how can group the rule how can clone that
how we can guide how can access services so many things we have done and you can see that how easy this
is INSIDE AND a 60.