ShieldGate Docs

Network firewall

Firewall rules

Zone-based stateful firewall policy on appliances.

Goal

Allow or deny traffic between zones with ordered, stateful firewall rules.

Prerequisites

  • Zones from Zones and L2.
  • network.write; publish with network.publish.

Steps

  1. Open Network → Firewall.
  2. Create a rule: source/destination zone (or any), protocol/ports as required, and action (allow/deny/reject per UI).
  3. Order rules carefully—first match wins in typical firewall evaluation.
  4. Enable only rules you intend to enforce.
  5. Publish and watch Monitor for apply success.

Tips

  • Start with explicit allow for management paths before broad deny policies.
  • Network firewall is packet L3/L4 on the appliance—not the HTTP WAF on the Proxy.
  • Connection tracking / session behavior is handled by the Connection Manager on the appliance.

Verify

  • Rule appears in the Firewall section.
  • Lab traffic is allowed or blocked as expected after publish (Linux datapath).