5.1

Change a vShield Edge Firewall Rule
You can change user-defined firewall rules.
Procedure
1 In the vSphere Client, select Inventory > Hosts & Clusters.
2 Select a datacenter resource from the inventory panel.
3 Click the Network Virtualization tab.
4 Click the Edges link.
5 Double-click the vShield Edge for which you want to change a rule.
6 Click the Firewall tab.
7 Select the rule to change.
NOTE You cannot change an auto-generated rule or the default rule.
8 Make the desired changes and click OK.
9 Click Publish Changes.
Change the Priority of a vShield Edge Firewall Rule
You can change the order of user-defined firewall rules to customize traffic flowing through the vShield Edge.
For example, suppose you have a rule to allow load balancer traffic. You can now add a rule to deny load
balancer traffic from a specific IP address group, and position this rule above the LB allow traffic rule.
Procedure
1 In the vSphere Client, select Inventory > Hosts & Clusters.
2 Select a datacenter resource from the inventory panel.
3 Click the Network Virtualization tab.
4 Click the Edges link.
5 Double-click the vShield Edge for which you want to edit a rule.
6 Click the Firewall tab.
7 Select the rule for which you want to change the priority.
NOTE You cannot change the priority of auto-generated rules or the default rule.
8
Click the Move Up ( ) or Move Down ( ) icon.
9 Click OK.
10 Click Publish Changes.
Delete a vShield Edge Firewall Rule
You can delete a user-defined firewall rule.
Procedure
1 In the vSphere Client, select Inventory > Hosts & Clusters.
2 Select a datacenter resource from the inventory panel.
vShield Administration Guide
74 VMware, Inc.