1.5

vCloud Director updates the network to provide DHCP services.
Enable the Firewall for an Organization Network
You can configure certain organization networks to provide firewall services. You can enable the firewall on
an organization network to enforce firewall rules on incoming traffic, outgoing traffic, or both.
You
can deny all incoming traffic, deny all outgoing traffic, or both. You can also add specific firewall rules to
allow or deny traffic that matches the rules to pass through the firewall. These rules take precedence over the
generic rules to deny all incoming or outgoing traffic. See “Add a Firewall Rule for an Organization
Network,” on page 54.
System administrators and organization administrators can enable firewalls.
Prerequisites
Verify that you have an external NAT-routed organization network.
Procedure
1 Click the Manage & Monitor tab and click Organization Networks in the left pane.
2 Right-click the organization network name and select Configure Services.
3 Click the Firewall tab and select Enable firewall.
4 Select the default firewall action.
5 (Optional) Select the Log check box to log events related to the default firewall action.
6 Click OK.
Add a Firewall Rule for an Organization Network
You can add firewall rules to an organization network that supports a firewall. You can create rules to allow
or deny traffic that matches the rules to pass through the firewall.
For a firewall rule to be enforced, you must enable the firewall for the organization network. See “Enable the
Firewall for an Organization Network,” on page 54.
When you add a new firewall rule to an organization network, it appears at the bottom of the firewall rule list.
For information about setting the order in which firewall rules are enforced, see “Reorder Firewall Rules for
an Organization Network,” on page 55.
System administrators and organization administrators can add firewall rules.
Prerequisites
Verify that you have an external NAT-routed organization network.
Procedure
1 Click the Manage & Monitor tab and click Organization Networks in the left pane.
2 Right-click the organization network name and select Configure Services.
3 Click the Firewall tab and click Add.
4 Type a name for the rule.
5 Select the traffic direction.
6 Type the source IP address and select the source port.
For incoming traffic, the source is the external network. For outgoing traffic, the source is the organization
network.
vCloud Director Administrator's Guide
54 VMware, Inc.