Firewall
The Firewall controls applications' access to the network and to the Internet. Access is automatically allowed for a comprehensive database of known, legitimate applications. Furthermore, the firewall can protect the system against port scans, restrict ICS and warn when new nodes join a Wi-Fi connection.
Components
Firewall uses the following components:
GravityZone Control Center
Security agent (Bitdefender Endpoint Security Tools installed on Windows endpoints)
Install and configure the Firewall feature
To start using this feature, follow the steps below:
Important
If your endpoints already have the BEST agent deployed, but the Firewall module is not installed, you can use a Reconfigure agent task to add the module to the endpoint.
If no agent is installed, you will need to use an installation package to deploy BEST on your endpoints along with all required modules.
Below we have included both procedures.
Log in to GravityZone Control Center.
Go to the Installation Packages page from the left side menu.
Click the Create button in the upper-right side of the screen.
Type in the Name and Description for the new installation package.
Select the modules you wish to deploy.
Note
Make sure you include the Firewall module.
Click Save.
Select the newly created package from the list of packages and click Send download links.
Enter the email addresses of the recipients and click Send.
Policies are used to enable and configure features both on endpoints and in terms of general functionality.
GravityZone comes with a default set of policy settings, that are custom tailored to meet the most common customer needs.
You can use these default policy settings and leave the configuration of the policy for a later date, but you need to follow the steps below to enable the feature from the policy page:
Log in to GravityZone Control Center.
Go to the Policies page from the left side menu.
You can either:
Under the Firewall page, configure the module.
Important
To allow network printing, make sure you make the modifications specified in this article.
Save your policy.
If you created a new policy, apply it on the endpoints where the feature is deployed.
Go to the Network page from the left side menu.
Select the endpoints you want to apply the policy to.
Click the
Assign Policy button at the upper side of the table.Select the policy you want to apply.
Click Finish.
Note
For more information, refer to Assigning device policies
If you have edited an existing policy, make sure it is applied to all endpoints where the feature is deployed.
This will ensure that the feature is enabled and configured to best suit your company's needs.
Warning
When configuring Firewall you must make sure that the target server is configured with the appropriate rules to allow the intended traffic. To make sure the traffic is allowed the corect rules must be set in place on the server side.
Test out the Firewall feature
This module allows to to manage, restrict and otherwise control an endpoint's contact with internal and external connections.