IP Groups

To fully use this screen, you must have the following permissions assigned to your account:

• Read Virtual Data Centers

• Read Firewall

• Write Firewall

Each entry in the table in the Firewall screen represents a single firewall rule; however, each rule can contain several IP addresses or just a single IP address.

You can combine related IP addresses into a single IP Group. For example, if you want to block traffic from three separate IP addresses, you do not have to create three separate firewall rules. Instead, you can combine the three separate IP addresses into a single, configurable IP Group. Then, when you create a firewall rule, you can pick the newly created IP Group as your Source or Destination IP address.

Create an IP Group

1. In the Armor Management Portal (AMP), on the left-side navigation, click Security.

2. Click Firewall.

3. If you have virtual machines in various data centers, then in the top drop-down menu, select the desired data center.

4. Click IP Groups.

5. Click Actions, and then click New Group.

6. In the Name of IP Group, enter a descriptive name.

   • Armor recommends that you add Source or Destination into the name of the IP Group to help you identify the IP Group as the Source or Destination IP group.

7. In IP Addresses, enter a member and click the plus icon.

   • You can enter:

     • A single IP address

     • A range of IP addresses

     • CIDR

   • You must add at least one member.

   • You can add multiple members to an IP group.

8. Click Create Group.
   

   • The newly created IP group will appear at the bottom of the table.

Edit an IP Group

1. In the Armor Management Portal (AMP), on the left-side navigation, click Security.

2. Click Firewall.

3. If you have virtual machines in various data centers, then in the top drop-down menu, select the desired data center.

4. In the Source or Destination column, hover over the desired IP group, then click Edit IP Group. Or, click the IP Groups tab.

5. Hover over the desired IP group, then click the vertical ellipsis.

6. Make your changes, and then click Update Group to save.

Delete an IP Group

You cannot delete an IP group that is actively used in a firewall rule.

1. In the Armor Management Portal (AMP), on the left-side navigation, click Security.

2. Click Firewall.

3. If you have virtual machines in various data centers, then in the top drop-down menu, select the desired data center.

4. Click IP Groups.

5. Locate the desired IP group and click on the vertical ellipsis.

6. Click on Delete.

Topics Discussed