How-to guides

Users can create the Firewall service by entering the required information and selecting detailed options through the Samsung Cloud Platform Console.

Create Firewall

You can create and use a Firewall service in the Samsung Cloud Platform Console.

To enable the firewall, follow these steps.

1. Click the All Services > Networking > Firewall menu. Navigate to the Firewall’s Service Home page.

2. On the Service Home page, click the service you want to create. You will be redirected to the service creation page.

   • VPC Creation: Configure the VPC service’s Internet Gateway and Transit Gateway firewall.
     • When creating a VPC’s Internet Gateway service, set the Use Firewall option to Enabled. For detailed instructions, refer to Create Internet Gateway.
     • Create a Transit Gateway service for the VPC and apply for the associated service of the Uplink Firewall. For detailed instructions, refer to Create Transit Gateway.
   • Direct Connet Creation: When creating a Direct Connect service, set the Firewall Use option to Enabled. For detailed instructions, refer to Direct Connect 생성하기.
   • Load Balancer Creation: When creating a Load Balancer service, set the Firewall Use option to Enabled. For detailed instructions, see Load Balancer Creation.

3. After the prerequisite service creation is complete, verify that the corresponding Firewall resource appears in the Firewall list.

Check firewall detailed information

The Firewall service can view and edit the full resource list and detailed information in the resource management menu.

To view detailed information about the firewall, follow these steps.

1. Click the All Services > Networking > Firewall menu. Go to the Firewall’s Service Home page.
2. On the Service Home page, click Firewall List. You will be taken to the Firewall List page.
   • The Firewall List page shows the information below.

     Category	Detailed description
     Firewall name	Automatically generated in the Firewall pre-service type_Firewall format
     Firewall classification	Firewall pre-service type (Internet Gateway, Direct Connect, Load Balancer)
     Size	User-selected Firewall size
     VPC name	VPC name connected to the firewall
     Connection name	Automatically generate in the format preceding service name_Firewall for services using Firewall.
     Number of rules	Number of rules used on this firewall
     Whether to use	Whether the firewall is used (enabled) or not used (disabled) If not used, the Any Allow rule is applied and no charges are incurred for the firewall
     status	Firewall status display More button can be clicked to set On/Off

     Table. Firewall resource list items
3. On the Firewall List page, click the resource to view detailed information. It navigates to the Firewall Details page.
   • Firewall Details page displays status information and additional feature information, and consists of Details, Rules, Tags, Activity Log tabs.

     Category	Detailed description
     Service status	Firewall status display Creating: In progress Active: Operational Editing: In progress Deploying: Completed Deleting: In progress Error: Occurred

     Table. Firewall status information

Detailed Information

On the Firewall List page, you can view detailed information of the selected resource and, if necessary, edit the information.

Rule

On the Firewall List page, you can view the rule list of the selected resource and add, modify, or delete rules.

tag

Firewall List page lets you view the tag information of the selected resource, and add, modify, or delete it.

Job History

On the Firewall List page, you can view the operation history of the selected resource.

Firewall Rule Management

You can add, modify, or delete firewall rules.

Create Rule

In the Rules tab, you can directly input firewall rule information to add it.

To add a firewall rule, follow the steps below.

1. Click the All Services > Networking > Firewall menu. Navigate to the Firewall’s Service Home page.
2. On the Service Home page, click Firewall List. You will be taken to the Firewall List page.
3. On the Firewall List page, click the resource to which you want to add a rule. You will be taken to the Firewall Details page.
4. On the Firewall Details page, click the Rules tab. You will be taken to the Rules tab page.
5. Click the Add Rule button on the Rules tab. You will be taken to the Add Rule page.
6. Enter the required information on the Manual Input tab page.
7. After checking the added rules, click the Complete button.

| Destination | Required | Destination address type to add to the rule

• Select IP or FQDN

| | Destination IP | Required | When the destination address type is set to IP, enter the destination IP address to add to the rule

• You can input multiple addresses at once, up to a maximum of 128, using CIDR (IP/Subnet Mask) format with commas (,) and ranges (-)

| | FQDN | Required | If you select the destination address type as FQDN, enter the domain address to add to the rule

• Domain names can be entered in bulk using Comma(,) for up to 128 addresses at once

| –>

Batch create rules

To add multiple Firewall rules at once, follow these steps.

1. Click the All Services > Networking > Firewall menu. Navigate to the Firewall’s Service Home page.
2. On the Service Home page, click Firewall List. You will be taken to the Firewall List page.
3. On the Firewall List page, click the resource to which you want to add a rule. You will be taken to the Firewall Details page.
4. On the Firewall Details page, click the Rules tab. You will be taken to the Rules tab page.
5. Click the Add Rule button on the Rule tab. You will be taken to the Add Rule page.
6. Add Rule on the Batch Rule Input tab, click it.
7. Please select the rule location. If you do not select a location, it will be added at the very last order of the rule.
8. From File Selection, click the Download Form button. The bulk rule entry Excel file will be downloaded.
9. Enter the rule information into the batch rule input Excel file, then save it.
10. From File Selection, click Attach File to attach the Excel file you created, and click Add.
    • You cannot upload if the attached Excel file format differs from the registration form or if the file is encrypted.
    • You can upload up to 100 batch registration rules at a time. Uploads are not allowed if you exceed the maximum number of registration rules.
    • If the number of rules set for the firewall size is exceeded, you cannot upload the file.
11. Added rule Check that the rule you entered appears in the list and adjust its order.
12. After checking the added rules, click the Complete button.

Modify Rules

You can select a firewall rule to view and edit its information.

To modify firewall rules, follow the steps below.

1. Click the All Services > Networking > Firewall menu. Go to the Service Home page of Firewall.

2. On the Service Home page, click Firewall List. You will be taken to the Firewall List page.

3. Firewall List page, click the resource to edit the rule. You will be taken to the Firewall Details page.

4. On the Firewall Details page, click the Rules tab. You will be taken to the Rules tab page.

5. Click the Edit Rule button on the Rules tab. You will be taken to the Edit Rule page.

   • On the rule edit page, you can configure the items below.
     • Enable: Enables the selected rule.
     • Disabled: Disables the selected rule. Disabled rules are not applied to preceding services.
     • Delete: Delete the selected rule. Clicking Delete will mark the change as Pending Deletion.
     • Cancel Deletion: If it is in a pending deletion state, you can cancel the rule deletion.

6. On the Edit Rule page, click the Edit button for the item you want to modify. The Edit Rule popup will open.

7. Rule Edit Enter the item you want to modify in the popup window and click the Confirm button.

   Category	Required?	Detailed description
   Order	-	The order of rules can be changed by clicking Move Up/Move Down in the added rule list.
   Rule ID	-	Cannot be changed to a unique ID value for the rule
   Rule Index	-	Unique index value for the rule, usable in log analysis
   Source address	Required	Source addresses registered in the rule in CIDR (IP/Subnet Mask) format, using commas (,) and ranges (-), can be entered and modified up to a maximum of 128 at once
   Destination address	Required	Destination address to add to the rule in CIDR (IP/Subnet Mask) format, using commas (,) and ranges (-) to input multiple addresses at once, up to a maximum of 128, for modification
   type	Required	Set the protocol type according to the selected destination address entry
   Operation	Required	Traffic Allow/Deny classification can be changed by rules Allow: Allow traffic when it matches the rule Deny: Block traffic when it matches the rule
   direction	Required	The access direction of traffic defined by the firewall rule can be changed Inbound: external → internal Outbound: internal → external
   Rule location	Required	Rule position can be changed
   Active status	Required	Whether the rule is active; if it is disabled, the rule does not operate.
   status	-	State value for the rule
   description	Select	User-provided additional description

   Table. Detailed items for firewall rule modification

8. After reviewing the updated rules, click the Complete button.

Delete rule

To delete a firewall rule, follow the steps below.

1. Click the All Services > Networking > Firewall menu. Go to the Firewall’s Service Home page.
2. On the Service Home page, click Firewall List. You will be taken to the Firewall List page.
3. Click the resource to edit the rule on the Firewall List page. Navigate to the Firewall Details page.
4. On the Firewall Details page, click the Rules tab. You will be taken to the Rules tab page.
5. In the Rule tab, click the Edit Rule button. You will be taken to the Edit Rule page.
6. On the Edit Rule page, select the rule to delete and click the Delete button.
   • When the deletion request is completed, the change item will be marked as Scheduled for deletion.
   • Click Cancel Deletion to cancel the rule deletion.
7. On the Edit Rule page, click the Complete button.

Managing Firewall Resources

You can modify the firewall size and change the log usage settings.

Modify Firewall Size

To modify the size of the firewall, follow these steps.

1. Click the All Services > Networking > Firewall menu. Go to the Firewall’s Service Home page.
2. On the Service Home page, click Firewall List. You will be taken to the Firewall List page.
3. Click the resource to edit on the Firewall List page. Navigate to the Firewall Details page.
4. On the Firewall Details page, click the Size Edit icon. You will be taken to the Size Edit popup.
5. Resize In the popup window, select the size to adjust, and click the Confirm button.

Using Log Storage

To use firewall log storage, follow these steps.

1. Click the All Services > Networking > Firewall menu. Go to the Service Home page.
2. On the Service Home page, click the Firewall menu. You will be taken to the Firewall List page.
3. Firewall List page, click the resource (Firewall) for which you want to enable log storage. You will be taken to the Firewall Details page.
4. On the Firewall Details page, click the Edit icon of Log Save Setting. You will be taken to the Edit Log Save Setting popup.
5. Modify Log Saving Option In the popup window, select Use for the log repository, and click the Confirm button.

Disable log storage

To set firewall log storage to disabled, follow these steps.

1. Click the All Services > Networking > Firewall menu. You will be taken to the Service Home page.
2. On the Service Home page, click the Firewall menu. You will be taken to the Firewall List page.
3. Firewall List page, click the resource (Firewall) that does not use log storage. You will be taken to the Firewall Details page.
4. Click the Modify Log Save Setting button. You will be taken to the Modify Log Save Setting popup.
5. Modify Log Saving Option In the popup window, deselect Use for the log repository, and click the Confirm button.
6. Notification Check the message in the popup window and click the Confirm button.

Disable Firewall

The Firewall service cannot be deleted on its own. Deleting the preceding service will also delete the associated Firewall. When you choose not to use the firewall while retaining the preceding service, you can set the firewall to an unused state on the firewall list page.

To disable the firewall, follow these steps.

1. Click the All Services > Networking > Firewall menu. You will be taken to the Service Home page.
2. On the Service Home page, click the Firewall menu. You will be taken to the Firewall List page.
3. On the Firewall List page, click More > Unused for the resources you want to mark as unused.
4. After the usage change is completed, verify on the Firewall List page that the resource’s usage status has been changed to unused.