VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API User Manual download pdf (Page 31)

VMware, Inc. 31

Chapter 4 Zones Firewall Management

7Double‐clickeachcellinthenewrowtotypeorselecttheappropriateinformation.

YoucantypeIPaddressesintheSourceandDestinationfields

8 (Optional)SelecttheLogcheckboxtologallsessionsmatchingthisrule.

9ClickCommit.

Validating Active Sessions against the Current Zones Firewall Rules

Bydefault,avShieldZonesinstancematchesfirewallrulesagainsteachnewsession.Afterasessionhasbeen

established,anyfirewallrulechangesdonotaffectactivesessions.

TheCLIcommandvalidate sessionsenablesyoutovalidateactivesessionsagainstthecurrentZones

Firewallrulesettopurgeanysessionsthatare

inviolationofthecurrentruleset.Afterafirewallruleset

update,youshouldvalidateactivesessionstopurgeanyexistingsessionsthatareinviolationoftheupdated

policy.

AftertheZonesFirewallupdateiscomplete,issuethevalidate sessionscommandfromtheCLIofa

vShieldZonesinstanceto

purgesessionsthatareinviolationofcurrentpolicy.

To validate active sessions against the current firewall rules

1 UpdateandcommittheZonesFirewallrulesetattheappropriatecontainerlevel.

2OpenaconsolesessiononavShieldZonesinstanceissuethevalidate sessionscommand.

vShieldZones> enable

Password:

vShieldZones# validate sessions

Revert to a Previous Zones Firewall Configuration

ThevShieldManagersavesasnapshotofAppFirewallsettingseachtimeyoucommitanewrule.Clicking

CommitcausesthevShieldManagertosavethepreviousconfigurationwithatimestampbeforeaddingthe

newrule.ThesesnapshotsareavailablefromtheReverttoSnapshotdrop‐downmenu.

To revert to a previous App Firewall configuration

1InthevSphere

Client,gotoInventory>HostsandClusters.

2 Selectadatacenterorclusterresourcefromtheinventorypanel.

3ClickthevShieldZonestab.

4ClickZonesFirewall.

5FromtheReverttoSnapshotdrop‐downlist,selectasnapshot.

Snapshotsarepresentedintheorderoftimestamps,withthemostrecentsnapshotlistedatthetop.

6Viewsnapshotconfigurationdetails.

7Dooneofthefollowing:

 Toreturntothecurrentconfiguration,selectthe‐optionfromtheReverttoSnapshotdrop‐downlist.

 ClickCommittooverwritethecurrentconfigurationwiththesnapshotconfiguration.

1 2 ... 26 27 28 29 30 31 32 33 34 35 36 ... 161 162

No comments

VMware VSHIELD MANAGER 4.1.0 UPDATE 1 - API User Manual Page 31