5.1

8 (Optional) Select an Original port to apply this rule to.
9 (Optional) Select an IMCP type to apply this rule to if this rule applies to IMCP.
10 Type the IP address or range of IP addresses for the destination addresses on inbound packets to be
translated to in the Translated (Internal) IP/range text box.
11 (Optional) Select a port for inbound packets to be translated to from the Translated port drop-down menu.
12 Select Enabled, and click OK.
The destination IP address and port are translated according to the destination NAT rule's specifications.
Configure the Firewall for an Edge Gateway
Edge gateways provide firewall protection for incoming and outgoing sessions.
You can set the default firewall action to deny or allow all traffic. You can also add specific firewall rules to
allow or deny traffic that matches the rules to pass through the firewall. These rules take precedence over the
set default. See “Add a Firewall Rule for an Edge Gateway,” on page 69
System administrators and organization administrators can configure edge gateway firewalls.
Procedure
1 Click the Manage & Monitor tab and click Organization vDCs in the left pane.
2 Double-click the organization vDC name to open the organization vDC.
3 Click the Edge Gateways tab, right-click the edge gateway name, and select Edge Gateway Services.
4 Click the Firewall tab and select Enable firewall to enable firewall services, or deselect it to disable firewall
services.
5 Select the default firewall action.
Option Description
Deny
Blocks all traffic except when overridden by a firewall rule.
Allow
Allows all traffic except when overridden by a firewall rule.
6 (Optional) Select the Log check box to log events related to the default firewall action.
7 Click OK.
Add a Firewall Rule for an Edge Gateway
You can add firewall rules to an edge gateway that supports a firewall. You can create rules to allow or deny
traffic that matches the rules to pass through the firewall.
For a firewall rule to be enforced, you must enable the firewall for the edge gateway. See “Configure the Firewall
for an Edge Gateway,” on page 69.
When you add a new firewall rule to an edge gateway, it appears at the bottom of the firewall rule list. For
information about setting the order in which firewall rules are enforced, see “Reorder Firewall Rules for an
Edge Gateway,” on page 70.
System administrators and organization administrators can add firewall rules to an edge gateway.
Procedure
1 Click the Manage & Monitor tab and click Organization vDCs in the left pane.
2 Double-click the organization vDC name to open the organization vDC.
3 Click the Edge Gateways tab, right-click the edge gateway name and select Edge Gateway Services.
Chapter 5 Managing Cloud Resources
VMware, Inc. 69