> For the complete documentation index, see [llms.txt](https://eaclouddoc.eauditor.eu/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://eaclouddoc.eauditor.eu/eacloud-docs-en/features/it-management/firewall/firewall-rule-management.md).

# Firewall Rule Management

In the view **IT Management > Firewall** you can review created rules, check their deployment status, and create, edit, copy, and delete configurations.

<figure><img src="https://3262380731-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdzip3GyvGq5q5J3qckWN%2Fuploads%2FKsXgmzjmON3nvdwgx0xr%2Fimage.png?alt=media&amp;token=fa660b08-51b8-4432-a34b-d7de1944a700" alt="Widok reguł zapory z informacją o komputerze, statusie wdrożenia, akcji i profilu sieci." width="375"><figcaption><p><em>Firewall rules view with information about the computer, deployment status, action, and network profile.</em></p></figcaption></figure>

### Information available in the rules list

The table presents the most important parameters of each rule, including:

* **Rule** - the name of the created configuration.
* **Computer** - the device on which the rule was assigned.
* **Deployment status** - information on whether the rule was applied correctly on the computer.
* **Action** - determines whether traffic matching the rule conditions is allowed or blocked.
* **Profile** - the Windows network profile or profiles for which the rule applies.
* **Local IP** - the local address included in the rule.
* **Protocol** - the communication protocol, for example TCP or UDP.
* **Local port** - the port to which the port rule applies.
* **Active** - enables quick enabling or disabling of the rule's application by the firewall.

### Adding a rule

{% stepper %}
{% step %}
Go to **IT Management > Firewall**.
{% endstep %}

{% step %}
Click **Add rule**.

<div align="left"><figure><img src="https://3262380731-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdzip3GyvGq5q5J3qckWN%2Fuploads%2FYzr8yGI3k9LiIw0dQbW8%2Fimage.png?alt=media&amp;token=7d00cd60-bb22-4826-8ca1-76b4a36f045f" alt="Dodaj regułę" width="375"><figcaption><p><em>Add a rule.</em></p></figcaption></figure></div>
{% endstep %}

{% step %}
Select the computers on which the rule is to be deployed.

<div align="left"><figure><img src="https://3262380731-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdzip3GyvGq5q5J3qckWN%2Fuploads%2FMRCbHoN2kcZkGjlyN6Ma%2Fimage.png?alt=media&amp;token=283f947a-c4e1-403a-94a2-19997eb0ab54" alt="Wybierz komputery" width="236"><figcaption><p><em>Select computers</em></p></figcaption></figure></div>
{% endstep %}

{% step %}
Select the traffic direction, action, and network profile.
{% endstep %}

{% step %}
Complete the rule name and optional description.
{% endstep %}

{% step %}
Select the rule type - for a program or for a port.

<div align="left"><figure><img src="https://3262380731-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdzip3GyvGq5q5J3qckWN%2Fuploads%2FDpP4ZhmtSx41i4yVSEYK%2Fimage.png?alt=media&amp;token=4ddf0308-b8f9-4c0d-a3a5-3098a3ed8204" alt="typ reguły" width="238"><figcaption><p><em>Rule type</em></p></figcaption></figure></div>
{% endstep %}

{% step %}
Set whether the rule is to be active after deployment.
{% endstep %}

{% step %}
Click the button to save or create the rule.
{% endstep %}
{% endstepper %}

### Program rule configuration

Use a program rule when you want to control connections made by a specific application.

Depending on the selected option:

* specify the path to the program executable file,
* or select **All programs**, if the rule is to apply to every program on the computer that meets the remaining configuration conditions.

{% hint style="info" %}
If the application can be installed in different locations, verify before deployment that the specified path is the same on all selected computers.
{% endhint %}

### Port rule configuration

Use a port rule when you want to manage traffic on a specific local port.

1. Select the rule type **TCP/UDP port**.
2. Select protocol **TCP** or **UDP**.
3. Specify whether the rule applies to all local ports or selected ports.
4. If you select selected ports, enter the port number or port numbers required by the service in question.
5. Save the rule.

For example, a rule for TCP port 443 can be used to control HTTPS communication if this matches the configuration of the given service.

### Rule status

When creating a firewall rule, you can define whether after deployment it should be **active**, or **inactive**.

* **Active** - the rule will be deployed to the specified computers and will be applied by the firewall immediately.
* **Inactive** - the rule will also be deployed to the specified computers, but it will not be applied by the firewall.

Turning off the option **Active** does not cause the rule deployment to be skipped - it defines only its status.

The status of a deployed rule can later be changed from the rules table using the switch in the **Active**.

<figure><img src="https://3262380731-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdzip3GyvGq5q5J3qckWN%2Fuploads%2FY7QTPjQob1CaeakcJ0L8%2Fimage.png?alt=media&amp;token=f77861b9-14f5-4dc7-8c9e-470e6e6bd9bc" alt="Informacja o utworzeniu oraz aktywacji reguły zapory." width="375"><figcaption><p><em>Information about the creation and activation of the firewall rule.</em></p></figcaption></figure>

### Checking deployment

After saving the rule, check the **Deployment status**.

Status **OK** means that the rule was applied correctly on the given computer. Information about rule creation and activation is also displayed in notifications in the upper-right corner of the system.

<figure><img src="https://3262380731-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdzip3GyvGq5q5J3qckWN%2Fuploads%2FCZCkwd5mV9nG90E8WJih%2Fimage.png?alt=media&amp;token=fae7460a-d7dc-4451-8037-2697bd5954b3" alt="Powiadomienia w prawym górnym rogu systemu" width="375"><figcaption><p><em>Notifications in the upper-right corner of the system.</em></p></figcaption></figure>

### Editing, copying, and deleting a rule

Actions are available for each rule to manage the configuration.

* **Editing** - allows you to change the rule parameters or the list of assigned computers.
* **Copying** - opens a copy of the existing rule with the same settings and assigned computers. You can change the parameters, assignments, or save a new rule without changes.
* **Deletion** - removes the rule from the configuration.
* **Active** - allows you to enable or disable the rule without deleting it.

Some rules may have a grayed-out edit icon. This means they are system-protected rules and cannot be modified from eAuditor Cloud.

{% hint style="warning" %}
Before deleting or disabling a rule, make sure it is not required by an active service, application, or organization configuration.
{% endhint %}

### FAQ

<details>

<summary><strong>When will the rule appear on the computer?</strong></summary>

The rule will be deployed when eAgent connects to the server and downloads the current configuration.

</details>

<details>

<summary><strong>Will an inactive rule be deployed?</strong></summary>

Yes. An inactive rule is delivered to the computer, but Microsoft Defender Firewall does not apply it until it is enabled.

</details>

<details>

<summary><strong>How do I check whether the rule has been deployed?</strong></summary>

Check the column **Deployment status**. Status **OK** confirms that the rule was applied correctly on the computer.

</details>

<details>

<summary><strong>Can I change the computers assigned to an existing rule?</strong></summary>

Yes. Open rule editing, change the list of assigned computers, and save the configuration.

</details>

<details>

<summary><strong>What does the rule copy option do?</strong></summary>

It creates a new configuration based on an existing rule, together with its settings and assigned computers. The original rule remains unchanged.

</details>

<details>

<summary><strong>Why can't I edit some rules?</strong></summary>

A grayed-out edit icon indicates a system-protected rule. Such a rule cannot be changed from eAuditor Cloud.

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://eaclouddoc.eauditor.eu/eacloud-docs-en/features/it-management/firewall/firewall-rule-management.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.