Support articles

Find clear, step-by-step solutions to common WithSecure issues across installation, configuration, updates, and product performance.

How do I create a custom firewall rule (service) for Client Security or Server Security?

Issue:

How to create a custom firewall rule (service) for Client Security or Server Security in Policy Manager Console?

Resolution:

To create a custom firewall rule over the Policy Manager Console:

For Client Security 14 and 15

  1. Open the Policy Manager Console and go to the Settings-tab
  2. Go to Firewall, using Standard view (changeable in the upper right corner)
  3. Make sure the 14.X / 15.x clients-tab is selected
  4. Select the profile you want to edit from the Profile being edited-dropdown menu (if the list only contains the default profiles, clone the one you want to use as a base as the defaults can't be modified)
  5. Click Add rule on the right of the firewall rules list and create the rule as needed (see step 6 if the service required is missing)
  6. If the service you want to add is missing, click on Configure network services below the firewall rule list. Click Add and follow the steps to add a new firewall service
  7. Check the Enabled-checkbox to the left of the rule name to make sure that it is in use
  8. Distribute the new policy by clicking the symbol in the upper left corner of the interface, or by pressing Ctrl+D

Note: The firewall profiles are shared between all policies. If you want to have a single host or policy domain use different firewall rules, you will have to create a new firewall profile and select that policy domain or host to use that profile. We recommend to do it like this:

  1. Log in to the Policy Manager Console
  2. Go to the Settings tab
  3. Select your existing firewall profile from the "Profile being edited" drop-down menu and click Clone
  4. Give the new profile a name and click OK
  5. Edit the newly created firewall profile to your liking
  6. Select the single host or policy domain from the Domain tree
  7. Depending if the host is a Workstation or Server, select the newly created profile from the "Workstation host profile" or "Server host profile" drop-down menu
  8. Distribute the policy (Ctrl + D)

To create a custom firewall rule locally on the workstation:

In versions 14.00 and later, rules are added through the Windows firewall settings. You can reach them through the Client Security or Server Security user interface:

  1. Open Client Security or Server Security user interface
  2. Go to Settings
  3. Click on Firewall settings
  4. Click on the Change Windows Firewall settings…-link to be brought to the Windows firewall settings