topic Prohibit/Block Identity Agent traffic on connected networks/interfaces. in Firewall and Security Management

Prohibit/Block Identity Agent traffic on connected networks/interfaces.

i_alves — Thu, 19 May 2022 17:19:29 GMT

Hello Check Matters,

Is it possible to prohibit or block the Identity Agent from traveling over specific connected networks?

Apparently it is possible using the "According to the Firewall policy" option, shown in the figure attached to the post.

Can anyone help me with this question, please? Because I didn't find documentation specifying the use of According to the Firewall Policy.

IAlves

Tobias_Moritz — Fri, 27 May 2022 11:00:07 GMT

There are two options, I think:

"According to the Firewall policy" and configuring firewall rules on the gateway which is running the PDP role, controlling connections to tcp port 443 of the respectives gateway interface. Please take care of other portals running on this gateway on that port.
Allow the connection of agents, but limits its usefullness by configuring the network setting of your access roles accordingly.