Setting Firewall Rules for Cloud Servers – Acronis Disaster Recovery

Overview

In Acronis Disaster Recovery, you can configure firewall rules for both primary and recovery servers to control inbound and outbound traffic. This ensures that only authorized traffic can access your servers, enhancing security and compliance.

Editing Firewall Rules

1. In the service console, navigate to Disaster Recovery > Servers.
2. Choose the appropriate tab:
   • Recovery servers to edit recovery server rules.
   • Primary servers to edit primary server rules.
3. Select the server you wish to configure and click Edit.
4. Go to the Cloud firewall rules tab.

Configuring Inbound Rules

• In the Inbound drop-down menu, select the default action:
  • Deny all: Blocks all inbound traffic.
  • Allow all: Permits all inbound TCP and UDP traffic.

Note
Changing the default action will invalidate and remove existing inbound rules.

• To preserve existing exceptions, select Save filled-in exceptions in the confirmation window.
• Click Confirm to apply changes.

Adding Inbound Exceptions

1. Click Add exception.
2. Specify the following parameters:
   • Protocol: Choose from TCP, UDP, or TCP+UDP.
   • Server port: Enter a specific port (e.g., 2298), a range (e.g., 6000-6700), or use * for any port.
   • Client IP address: Specify a single IP (e.g., 192.168.0.0), a CIDR range (e.g., 192.168.0.0/24), or * for any IP.

• To remove an existing exception, click the bin icon next to it.

Configuring Outbound Rules

• In the Outbound drop-down menu, select the default action:
  • Deny all: Blocks all outbound traffic.
  • Allow all: Permits all outbound TCP and UDP traffic.

Note
Changing the default action will invalidate and remove existing outbound rules.

• To preserve existing exceptions, select Save filled-in exceptions in the confirmation window.
• Click Confirm to apply changes.

Adding Outbound Exceptions

1. Click Add exception.
2. Specify the following parameters:
   • Protocol: Choose from TCP, UDP, or TCP+UDP.
   • Server port: Enter a specific port (e.g., 2298), a range (e.g., 6000-6700), or use * for any port.
   • Client IP address: Specify a single IP (e.g., 192.168.0.0), a CIDR range (e.g., 192.168.0.0/24), or * for any IP.

• To remove an existing exception, click the bin icon next to it.
• Click Save to apply all changes.