How-to guides

Users can create the service by entering the required information for the Firewall service and selecting detailed options through the Samsung Cloud Platform Console.

Create Firewall

You can create and use the Firewall service from the Samsung Cloud Platform Console.

To configure the firewall, follow the steps below.

1. All Services > Networking > Firewall click the menu. 1. Navigate to the Service Home page of the Firewall.

2. On the Service Home page, click the prerequisite service to create. 2. Navigate to the service creation page.

   • VPC Creation: Enable the Internet Gateway and the Transit Gateway Firewall of the VPC service.
     • When creating a VPC Internet Gateway service, set the Firewall Use item to Use. * For detailed information, please refer to Internet Gateway 생성하기.
     • Create the Transit Gateway service for the VPC and request the Uplink Firewall integration service. * For detailed instructions, please refer to Transit Gateway 생성하기.
   • Direct Connet creation: When creating a Direct Connet service, set the Firewall usage item to Enable. * For detailed instructions, please refer to Direct Connect 생성하기.
   • Load Balancer creation: When creating a Load Balancer service, set the Firewall usage option to Enabled. * For detailed instructions, see Load Balancer 생성하기.

3. After the prerequisite service creation is complete, verify that the corresponding Firewall resource appears in the Firewall list.

Check firewall detailed information

The Firewall service can view and edit the full resource list and detailed information in the resource management menu.

To view detailed information about the firewall, follow these steps.

1. All Services > Networking > Firewall Click the menu. 1. Go to the Service Home page of the Firewall.
2. On the Service Home page, click Firewall List. 2. Navigate to the Firewall list page.
   • On the Firewall List page, you can view the information below.

     Category	Detailed description
     Firewall name	Firewall pre-service type_Firewall automatically generated in the format
     Firewall classification	Firewall pre-service type (Internet Gateway, Direct Connect, Load Balancer)
     Size	User-selected Firewall size
     VPC name	VPC name connected to the firewall
     Connection name	Automatically generate in the format preceding service name_Firewall using Firewall
     Number of rules	Number of rules used on this firewall
     Usage	Whether the Firewall is used (enabled), not used (disabled) If not used, the Any Allow rule is applied and no charges are incurred for the Firewall
     Status	Firewall status display click the More button to set Enabled/Disabled

     Table. Firewall resource list items
3. On the Firewall List page, click the resource to view detailed information. 3. Go to the Firewall Details page.
   • Firewall Details page displays status information and additional feature information, and consists of Details, Rules, Tags, Action History tabs.

     Category	Detailed description
     Service status	Firewall 상태 표시 Creating: Creating Active: Running/All firewalls operating normally Editing: Editing Deploying: Deployment completed Deleting: Deleting Error: Error occurred/Errors occurred on one or more firewalls

     Table. Firewall status information

Detailed Information

Firewall list page lets you view detailed information of the selected resource and edit the information if needed.

Rule

Firewall List page lets you view the rule list of the selected resource and add, modify, or delete rules.

tag

On the Firewall List page, you can view the tag information of the selected resource, and you can add, modify, or delete it.

On the Firewall list page, you can view the operation history of the selected resource.

Firewall rule management

You can add, modify, or delete firewall rules.

Create rule

In the Rules tab, you can directly enter and add Firewall rule information.

Follow these steps to add a firewall rule.

1. Click the All Services > Networking > Firewall menu. 1. Go to the Service Home page of the Firewall.
2. On the Service Home page, click Firewall List. 2. Navigate to the Firewall List page.
3. On the Firewall List page, click the resource to add a rule. 3. Go to the Firewall Details page.
4. On the Firewall Details page, click the Rules tab. 4. Go to the Rules tab page.
5. Click the Add Rule button on the Rules tab. 5. Navigate to the Add Rule page.
6. Enter the required information on the Direct Input tab page.
7. After reviewing the added rules, click the Complete button.

Create rules in bulk

To add multiple Firewall rules at once, follow these steps.

1. All Services > Networking > Firewall Click the menu. 1. Navigate to the Firewall’s Service Home page.
2. On the Service Home page, click Firewall List. 2. Go to the Firewall List page.
3. On the Firewall List page, click the resource to add a rule. 3. Go to the Firewall Details page.
4. On the Firewall Details page, click the Rules tab. 4. Go to the Rules tab page.
5. Click the Rule tab’s Add Rule button. 5. Add Rule go to the page.
6. On the Add Rule page, click the Bulk Rule Input tab.
7. Select Rule location. 7. If no location is selected, it is added after the last rule.
8. From Select File, click the Download Form button. 8. The rule batch input Excel file will be downloaded.
9. Enter the rule information into the batch rule input Excel file, then save it.
10. From File Selection, click Attach File to attach the Excel file you created, and click Add.
    • You cannot upload the file if the attached Excel file format differs from the registration form or if the file is encrypted.
    • You can upload up to 100 batch registration rules at a time. * Upload is not possible when the maximum number of registered rules is exceeded.
    • If the configured maximum number of rules for the firewall size is exceeded, the file cannot be uploaded.
11. Added rule Check that the rule you entered appears in the list and adjust its order.
12. After reviewing the added rules, click the Complete button.

Modify rules

You can select a firewall rule to view and edit its information.

To modify firewall rules, follow the steps below.

1. All Services > Networking > Firewall Click the menu. 1. Go to the Service Home page of the Firewall.

2. On the Service Home page, click Firewall List. 2. Go to the Firewall list page.

3. On the Firewall List page, click the resource to edit the rule. 3. Go to the Firewall Details page.

4. On the Firewall Details page, click the Rules tab. 4. Go to the Rules tab page.

5. In the Rule tab, click the Edit Rule button. 5. Edit Rule Go to the page.

   • On the rule edit page, you can configure the items below.
     • Enable: Activates the selected rule.
     • Disable: Disables the selected rule. * Disabled rules are not applied to preceding services.
     • Delete: Deletes the selected rule. * When you click Delete, the changes will be shown with a Scheduled for Deletion status.
     • Cancel Deletion: If the rule is in a pending deletion state, you can cancel the rule deletion.

6. Rule Edit page, click the Edit button for the item you want to modify. 6. Edit Rule The popup window opens.

7. Edit Rule Enter the item you want to edit in the popup window and click the Confirm button.

   Category	Required status	Detailed description
   order	-	Order of rules The order can be changed by clicking Move Up/Move Down in the added rules list
   Rule ID	-	Cannot be changed to a unique ID value for the rule
   Origin address	Required	Source addresses registered in the rule CIDR (IP/Subnet Mask) format, using commas (,) and ranges (-), can be entered up to 128 addresses at once for modification
   Destination address	Required	Destination addresses to add to the rule can be entered and modified at once using CIDR (IP/Subnet Mask) format, commas (,), and ranges (-) for up to 128 addresses
   type	Required	Set the protocol type based on the selected destination address entry
   Operation	Required	Change the Allow/Deny traffic classification due to rules Allow: Allow traffic when it matches the rule Deny: Block traffic when it matches the rule
   Direction	Required	Ability to change the direction of traffic for Firewall criteria registered in the rule Inbound: external → internal Outbound: internal → external
   Activation status	Required	Whether the rule is active; if it is inactive, the rule does not function.
   Rule location	Required	Rule location setting
   Explanation	Selection	Additional description written by the user

   Table. Detailed items for modifying firewall rules

8. After confirming the revised rules, click the Complete button.

Delete rule

To delete a firewall rule, follow these steps.

1. All Services > Networking > Firewall menu, click it. 1. Navigate to the Firewall’s Service Home page.
2. On the Service Home page, click Firewall List. 2. Go to the Firewall List page.
3. On the Firewall List page, click the resource to edit the rule. 3. Go to the Firewall Details page.
4. On the Firewall Details page, click the Rules tab. 4. Go to the Rules tab page.
5. On the Rule tab, click the Edit Rule button. 5. Go to the Edit Rule page.
6. On the Rule Edit page, select the rule to delete and click the Delete button.
   • Once the deletion request is completed, the item in the change log will be marked as Scheduled for Deletion.
   • Click Cancel Deletion to cancel the rule deletion.
7. On the Edit Rule page, click the Complete button.

Check rule synchronization history

In the Rules tab, you can check the synchronization status of firewall rules and view detailed information.

To view the synchronization history of firewall rules, follow these steps.

1. All Services > Networking > Firewall Click the menu. 1. Navigate to the Firewall’s Service Home page.
2. Click Firewall List on the Service Home page. 2. Go to the Firewall list page.
3. On the Firewall List page, click the resource to add a rule. 3. Navigate to the Firewall Details page.
4. On the Firewall Details page, click the Rules tab. 4. Go to the Rules tab page.
5. In the Rules tab, click the Previous Sync History button. 5. Previous sync history popup window opens.
6. Previous sync history In the popup, view the sync history and click the Confirm button.
   • Resynchronization: If one or more rule states are Partial Fail/Pending, re-run the synchronization.
   • Resynchronization cannot be performed when one or more items are in a Fail state.
   • Delete Fail request: If one or more rule statuses are Fail, you can delete the corresponding entries.
   • Status information: You can check the synchronization status of firewall rules.
     • Success: Rule synchronization succeeded on all devices
     • Partial Fail: Failed after attempting synchronization on one or more devices
     • Pending: Synchronization stopped after Partial Fail for all devices
     • Fail: All devices failed after attempting synchronization simultaneously

Managing Firewall Resources

You can modify the size of the firewall and change the log usage settings.

Modify firewall size

To modify the Firewall size, follow these steps.

1. Click the All Services > Networking > Firewall menu. 1. Navigate to the Service Home page of the Firewall.
2. On the Service Home page, click Firewall List. 2. Go to the Firewall list page.
3. Firewall List page, click the resource you want to edit. 3. Go to the Firewall Details page.
4. On the Firewall Details page, click the size edit icon. 4. Go to the Resize popup.
5. Resize In the popup window, select the size to modify, then click the Confirm button.

Using Log Storage

To use Firewall log storage, follow these steps.

1. All Services > Networking > Firewall menu, click it. 1. Navigate to the Service Home page.
2. On the Service Home page, click the Firewall menu. 2. Go to the Firewall list page.
3. On the Firewall List page, click the resource (Firewall) to enable log storage. 3. Go to the Firewall Details page.
4. On the Firewall Details page, click the Edit icon for Log Save Setting. 4. Modify log save setting Navigate to the popup window.
5. Modify Log Saving Option In the popup window, select Use for the log repository, and click the Confirm button.

Disable Log Saving

To set Firewall log storage to disabled, follow these steps.

1. Click the All Services > Networking > Firewall menu. 1. Navigate to the Service Home page.
2. On the Service Home page, click the Firewall menu. 2. Go to the Firewall List page.
3. Firewall List page, click the resource (Firewall) for which you want to disable log storage. 3. Go to the Firewall Details page.
4. Modify Log Save Setting Click the button. 4. Modify log save setting Navigate to the popup window.
5. Modify Log Saving Option In the popup window, deselect Use for the log repository, and click the Confirm button.
6. Notification Check the message in the popup window and click the Confirm button.

Disable firewall

The Firewall service cannot be deleted on its own. Deleting the preceding service will also delete the associated Firewall. When the preceding service is retained but the firewall is not used, you can set the firewall to an unused state on the firewall list page.

To disable the firewall, follow these steps.

1. Click the All Services > Networking > Firewall menu. 1. Go to the Service Home page.
2. On the Service Home page, click the Firewall menu. 2. Go to the Firewall list page.
3. On the Firewall list page, click More > Unused for the resource you want to set as unused.
4. After the usage status change is completed, check on the Firewall List page whether the resource’s usage status has been changed to unused.