Managing firewall templates

The table of firewall templates is displayed under SD-WAN → Firewall templates. One of the firewall templates is the default template, which means it is pre-selected when adding and manually registering a CPE device. By default, the Default firewall template is created, which forms the basis for other firewall templates you create. Information about firewall templates is displayed in the following columns of the table:

• Name is the name of the firewall template.
• Usage indicates whether the firewall template is being used by CPE devices:
  • Yes
  • No
• Owner is the name of the user that created the firewall template.
• Last update is the date and time when the firewall template settings were last modified.

The actions that you can perform with the table are described in the Managing solution component tables instructions.

Firewall template settings are displayed on the following tabs:

• Global settings contains basic settings of the firewall.
• Rules contains firewall rules.
• NAT contains network address translation settings. The following tabs are displayed on this tab:
  • DNAT contains DNAT rules.
  • SNAT contains SNAT rules.
• Zones forwarding contains forwardings between firewall zones.
• IP sets contains IP sets.

Creating a firewall template

To create a firewall template:

1. Go to the SD-WAN → Firewall templates section.

   A table of firewall templates is displayed.

2. In the upper part of the page, click + Firewall template.
3. This opens a window; in that window, enter the name of the firewall template.
4. Click Create.

The firewall template is created and displayed in the table.

You need to configure the created firewall template. For a description of the firewall template tabs, see the Managing firewall templates section.

Setting the default firewall template

You can set a firewall template as the default to have it preselected when adding or manually registering a CPE device.

To set a default firewall template:

1. Go to the SD-WAN → Firewall templates section.

   A table of firewall templates is displayed.

2. Click the firewall template that you want to make the default firewall template.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Global settings tab is selected, which displays the main settings of the firewall template.

3. In the upper part of the settings area, under Actions, click Set as default template.

The firewall template is set as the default firewall template.

Exporting a firewall template

You can export a firewall template to subsequently import it into another firewall template.

To export a firewall template:

1. Go to the SD-WAN → Firewall templates section.

   A table of firewall templates is displayed.

2. Click the firewall template that you want to export.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Global settings tab is selected, which displays the main settings of the firewall template.

3. In the upper part of the settings area, under Actions, click Export.

An archive in the TAR.GZ format is saved on your local device. The archive does not contain information about CPE devices using the firewall template.

Importing a firewall template

You can export a firewall template and subsequently import it into another firewall template. Firewall template settings are specified in accordance with the settings of the imported firewall template. During import, you can select the tabs that you want to leave unchanged. A firewall template into which another firewall template is imported remains applied to CPE devices, but the settings of those CPE devices are not modified.

To import a firewall template:

1. Go to the SD-WAN → Firewall templates section.

   A table of firewall templates is displayed.

2. Click the firewall template that you want to export.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Global settings tab is selected, which displays the main settings of the firewall template.

3. In the upper part of the settings area, under Actions, click Export.

   An archive in the TAR.GZ format is saved on your local device. The archive does not contain information about CPE devices using the firewall template.

4. Click the firewall template into which you want to import another firewall template.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Global settings tab is selected, which displays the main settings of the firewall template.

5. In the upper part of the settings area, under Actions, click Import.
6. This opens a window; in that window, clear the check boxes next to the firewall template tabs that you want to leave unchanged after import.
7. In the File field, specify the path to the TAR.GZ archive.
8. Click Import.

Firewall template settings are modified in accordance with the settings of the imported firewall template.

Cloning a firewall template

You can clone a firewall template to create an identical firewall template with a different name.

To clone a firewall template:

1. Go to the SD-WAN → Firewall templates section.

   A table of firewall templates is displayed.

2. Click the firewall template that you want to clone.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Global settings tab is selected, which displays the main settings of the firewall template.

3. In the upper part of the settings area, under Actions, click Clone.
4. This opens a window; in that window, enter the name of the new firewall template.
5. Click Clone.

A copy of the firewall template with the new name is created and displayed in the table.

Viewing the usage of a firewall template

You can see which CPE devices are using the firewall template. If a firewall template is in use, it cannot be deleted.

To view the usage of a firewall template:

1. Go to the SD-WAN → Firewall templates section.

   A table of firewall templates is displayed.

2. Click the firewall template for which you want to view usage information.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Global settings tab is selected, which displays the main settings of the firewall template.

3. In the upper part of the settings area, under Actions, click Show associated CPEs.

This opens a window with a table of CPE devices that are using the firewall template.

Deleting a firewall template

You cannot delete a firewall template while it is in use. You need to look up the usage of the firewall template and make sure that it is not in use.

Deleted firewall templates cannot be restored.

To delete a firewall template:

1. Go to the SD-WAN → Firewall templates section.

   A table of firewall templates is displayed.

2. Click the firewall template that you want to delete.

   The settings area is displayed in the lower part of the page. You can expand the settings area to fill the entire page by clicking the expand icon . By default, the Global settings tab is selected, which displays the main settings of the firewall template.

3. In the upper part of the settings area, under Actions, click Delete.
4. In the confirmation window, click Delete.

The firewall template is deleted and is no longer displayed in the table.