- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
How to Restrict Access to Specific Port(s) and Allow ICMP to a Backend Resource
10/18/2021 
11 People found this article helpful
117,947 Views
Description
How to Restrict Access to Specific Port(s) and Allow ICMP to a Backend Resource
Resolution
This article describes a scenario in which an administrator needs to allow access to a backend server through just certain ports; the administrator also needs to allow ICMP to that host. In the following procedure, port 443 and ICMP will be allowed to a specific host by creating two access control rules.
Procedure:
- Log in to AMC.
- Click Access Control in the main navigation menu.
- From the list of the rules, select an existing rule or use the New button to create a new rule.
- In the From field select a user or group that should be granted access to the resource.
- In the To field select the backend resource, resources, or resource group, and then click Next to go to the Advanced section.
- In the Advanced section under Access method restrictions, restrict the Protocols to ICMP:
- Click Finish to save the rule.
- Create a second rule that allows your users or groups to connect to the same resource, resources, or resource group: under the Advanced section of the rule, restrict the Protocols to TCP and enter port 443 (you can also specify multiple ports) as shown in the following screenshots:
Related Articles
- Ending User Sessions
- How to manually apply licenses to SMA 1000 series appliance?
- SMA100: How to generate Certificate Signing Request and import a signed certificate?
YES
NO