How do I allow an IP address for a port with the Imunify360 firewall?

Issue

How do I allow an IP address(es) or a subnet for a port with the Imunify360 firewall?

Environment

• Imunify360
• Firewall
• Port blocking mode "All open, except specified"

Solution

Allowing a port for certain IP addresses is possible in two ways:

1. Using the Firewall settings in the Imunify360 UI. To add an IP or a subnet to the White List for the port, click +IP and in the Add IP/Subnet pop-up specify the following:
   
   
   • Enter IP – IP or subnet that should be added to the whitelist
   • Enter description – a description to be added as a note to the IP or subnet.
     
     
2. Using the Command-Line Interface. The example of the command below blocks TCP port 5555 for all IPs except 12.34.56.78 with the comment 'Allow my IP for 5555':

imunify360-agent blocked-port-ip add 5555:tcp --ips 12.34.56.78 --comment 'Allow my IP for 5555'
OK

Useful links

• https://docs.imunify360.com/dashboard/#edit-ports-in-the-blocked-ports-list
• https://docs.imunify360.com/command_line_interface/#blocked-port-ip