Firewall Rule Change

One rule on a firewall or cloud security group we manage: a port opened to a named address, a port closed, a source range narrowed, a rule nobody can account for removed. You tell us what should be able to reach what; we make the change, check it from outside, and record what the rule was before.

What you get

• One rule added, changed or removed on a firewall or security group we administer
• A reachability check from outside your network before and after, so that "it works" is tested rather than assumed
• The previous rule recorded against your account, which puts a rollback one message away
• A one-line note of why the rule exists, so the next person does not have to guess

What this does not cover

• Any opinion on whether your rule set as a whole makes sense — we apply the rule you ask for
• Firewalls, security groups and appliances we do not administer
• What a connection carries: a firewall rule decides who may connect, not what they may send, which is Managed WAF Ruleset

Who it fits

A change you already know you need. If you cannot say which ports should be open at all, this is the wrong purchase: Server Security Hardening Baseline goes through the whole policy once, with a reason recorded against every rule.