AS-ACS Windows-LightsOut-Ring1 Template Rules

Firewall Template Rules

Traffic Inbound to the Firewall

From	To	Ports	Description
as-idg-windows-pbh-ring1	destination_host	tlr1_lout	Personal Bastion LightsOut
as-idg-nagios-monitoring	destination_host	icmp, ping	Ping
as-idg-nagios-monitoring	destination_host	tlr1_https	Web Services

Traffic Outbound from the Firewall

From	To	Ports	Description
source_host	as-idg-nagios-monitoring	ICMP,Ping	Outbound Ping (monitoring)
source_host	as-idg-nagios-monitoring	tlr1_https	Outbound Web Services
source_host	as-idg-windows-pbh-ring1	Any	Any to Personal Bastion

Address, Service & Object Definitions

Object / Group	Members
Address & Address Groups
as-idg-windows-pbh-ring1	171.67.47.64/28
as-idg-nagios-monitoring	171.67.217.114 171.67.217.115
Service & Service Groups
tlr1_lout	TCP 22, 80, 443, 3668, 5900-5901 \| UDP 623
tlr1_https	TCP 443

Roles

Template Owner

Responsible for determining, maintaining and modifying the template rules and membership of the different server groups. The application owner is notified regarding any changes to the template.

Current Template Owners

Jon Pilat
Brian Katyl
Stacy Lee

System Administrators

Request rule approval from the application owner.

ISO Security

The ISO group will audit the rules and make recommendations as needed or upon request from either the System Administrators or the Application Owners. In addition, any changes to this template must be reviewed by ISO prior to implementation.