5.1

Revert to a Previous Firewall Configuration
The vShield Manager saves the App firewall settings each time you publish a new rule. Clicking Publish
Changes causes the vShield Manager to save the previous configuration with a timestamp before adding the
new rule. These configurations are available from the History drop-down list. vShield Manager saves the
previous ten configurations.
Procedure
1 Do one of the following.
Firewall Rule Level Method
Datacenter
a In the vSphere client, Go to Inventory > Hosts and Clusters.
b Select a datacenter.
c Click the vShield tab.
d Click the App Firewall tab.
Virtual wire
a Go to Inventory > Hosts and Clusters and select the Network
Virtualization tab.
b Click the Networks tab.
c In the Name column, click the virtual wire for which you want to add a
rule.
d Click the Security tab.
e Ensure that you are in the Firewall tab.
Port group with an independent
namespace
a In the vSphere client, Go to Inventory > Networking.
b Select a Port group with an independent namespace.
c Click the vShield tab.
d Click the App Firewall tab.
2
Click History Options( ) and select Load History.
The Load History dialog box displays the previous configurations in the order of timestamps, with the
most recent configuration listed at the top.
3 Select the configuration to which you want to revert.
4 Click OK.
5 In the Load Configuration dialog box, click OK.
6 Click Publish Changes.
The selected configuration is loaded.
Change the Order of a Rule
Firewall rules are applied in the order in which they exist in the rule table. You can move a custom rule up or
down in the table - the default rule is always at the bottom of the table and cannot be moved.
Chapter 13 vShield App Firewall Management
VMware, Inc. 167