SonicOS 7 NSv Getting Started Guide for Azure

Creating a Security Policy and NAT Policy for Inbound RDP to the VM

To add address object for Windows 10 VM

  1. Navigate to the Object > Match Objects > Addresses page .
  2. Click +Add at the top of the page.

    The Address Object Settings dialog displays.

  3. Enter a friendly description such as Win10-VM 10.5.25.4 for the server’s private IP address in the Name field.

  4. Select the LAN to the server from the Zone Assignment drop-down menu.

  5. Choose Host from the Type drop-down menu.

  6. Enter the 10.5.25.4 IP address in the IP Address field.

  7. Click Save.

To add Security policy

  1. Navigate to Policy > Rules and Policies > Security Policy.

    The Security Policy page is displayed.

  2. Choose WAN to LAN in Zone Matrix Selector.

  3. From the bottom of the Security Policy table, click Add.

    The Adding Rule page is displayed.

  4. Enter the policy Name and any identifying Tags you would like to enter to help sort your policies.

  5. Enter a Description of the policy and its intent.

  6. Select an Action, whether to Allow, Deny, or Discard access.

  7. Specify the IP version in Type, IPv4 or IPv6.

  8. Set your Security Policy's Priority.

  9. Specify when the rule is applied by selecting a schedule or Schedule Group from the Schedule drop-down menu.

  10. Click Enable to activate the policy schedule and enable logging.

  11. In the Source/Destination select the following:

    Source Destination
    Zone/Interface WAN LAN
    Address Any X1 IP
    Port/Services Any Terminal Services
  12. Click Save.

To add NAT Policy

  1. Navigate to Policy > Rules and Policies > Security Policy.

    The NAT Policy page is displayed.

  2. From the bottom of the Security Policy table, click Add.

    The Adding Rule page is displayed.

  3. Enter the policy Name and any identifying Tags you would like to enter to help sort your policies.

  4. Enter a Comment of the policy and its intent.

  5. Set your Original/ Translated.

    1. Under Original select the following:
      SourceAny
      DestinationX1 IP
      ServiceTerminal Services
      Inbound InterfaceX1
      Outbound InterfaceAny
    2. Under Translated select the following:

      Source Original
      Destination Win10-VM n.x.y.z
      Service Original
  6. Click Save.

In Remote Desktop Connection, run the VM using the same Elastic public IP used for logging into the NSv web interface, and the VM can get to the internet through the NSv firewall.

Was This Article Helpful?

Help us to improve our support portal

Techdocs Article Helpful form

  • Hidden
  • Hidden

Techdocs Article NOT Helpful form

  • Still can't find what you're looking for? Try our knowledge base or ask our community for more help.
  • Hidden
  • Hidden