topic Re: Filtering interfaces from VM ( VMware vcenter Integration) in Cloud Firewall

Filtering interfaces from VM ( VMware vcenter Integration)

Wolfgang — Thu, 28 Nov 2019 20:45:16 GMT

Hello CheckMates,

I had a question regarding the integration with VMware vcenter.
If an imported virtual machine has more then one interface, all of the IP addresses of this VM are learned and traffic regarding these IPs is allowed or blocked.

Is it possible to use this imported object and allow only one of the interfaces? If I add a datacenter object I had no chance to filter something like this. The whole object is imported and used with all existing IPs.

Thanks

Wolfgang

Re: Filtering interfaces from VM ( VMware vcenter Integration)

Vladimir — Thu, 28 Nov 2019 22:37:23 GMT

I did not experience this scenario myself, but it sounds like you may have to create a dummy object with single IP if you want to use it in the policy.

Re: Filtering interfaces from VM ( VMware vcenter Integration)

Wolfgang — Fri, 29 Nov 2019 09:05:12 GMT

Vladimir,

that's what I don't want todo, creating an extra object is more work todo. It simplifies the configuration using the original datacenter object.

Wolfgang

Re: Filtering interfaces from VM ( VMware vcenter Integration)

Vladimir — Fri, 29 Nov 2019 14:55:18 GMT

Understandable, but I think this is one of those situations that automatically created objects would not work.

Consider: vCenter provides the data about the object, but it is unaware about its routing properties.

If you are to edit the object's properties in CP, the data between CP and vCenter gets out of sync.