PowerScale OneFS 9.8.0.0 Web Administration Guide

Enable and manage the firewall

Use the command-line interface or the Web UI to enable and manage the firewall.

The host-based firewall is disabled by default. You can enable it using either of the following:

• In the CLI, the isi network firewall setttings modify --enabled=true command
• In the Web UI, the Cluster management > Firewall configuration > Settings page

You can manage the firewall policies using either the command-line interface or the Web UI. In either interface, you can:

• Modify existing policies and create policies.
• Clone existing policies and edit the clones.
• Reset global policies to original installed defaults.
• Create and modify rules.
• Assign policies to subnets and network pools.

Firewall management requires the ISI_PRIV_FIREWALL privilege.

• The integrated SystemAdmin role is granted with the ISI_PRIV_FIREWALL write permission.
• The integrated AuditAdmin role is granted with ISI_PRIV_FIREWALL read permission.