Advanced Networking Services Guide

5 Point to the Source cell of the new rule. Perform one of the following options:
Option Description
Click
Type the source IP address. The firewall supports both IPv4 and IPv6
formats.
Click
To specify the source as an object other than a specific IP address:
a
Select one or more objects and click
.
You can create a new IP Set. Once you create the new object, it is
added to the source column by default.
b To exclude a source from the rule, click Advance options.
c Select Negate Source to exclude this source from the rule.
When Negate Source is selected, the rule is applied to traffic coming
from all sources except for the source you specified in the previous
step.
When Negate Source is not selected, the rule applies to traffic coming
from the source you specified in the previous step.
d Click OK.
6 Point to the Destination cell of the new rule. Perform one of the following options:
Option Description
Click
Type the destination IP address. The firewall supports both IPv4 and IPv6
formats.
Click
To specify the destination as an object other than a specific IP address:
a
Select one or more objects and click
.
You can create a new IP Set. Once you create the new object, it is
added to the Destination column by default.
b To exclude a destination port, click Advance options.
c Select Negate Destination to exclude this destination from the rule.
When Negate Destination is selected, the rule is applied to traffic
going to all destinations except for the destination you specified in the
previous step.
When Negate Destination is not selected, the rule applies to traffic
going to the destination you specified in the previous step.
d Click OK.
vCloud Air Advanced Networking Services Guide
32 VMware, Inc.