Skip to content Skip to site navigation

AS-ACS Windows-LightsOut-Ring1 Template Rules

Attention Application Owners & Rule Delegates

The following set of firewall policies, referred to as "Template Rules", are provided for administrators of AS owned/managed servers that require a specific set of source hosts/nets and services allowed for administration.

When applying these Template rules, please consider any additional necessary "custom" policies to guarantee the inbound or outbound connectivity that servers will require. Those "custom" policy requests can be made via the Firewall Rule Request form.

Please contact the Firewall Team (firewall-team@lists.stanford.edu) with any questions.

Firewall Template Rules

Traffic Inbound to the Firewall

From To Ports Description
as-idg-windows-pbh-ring1 destination_host tlr1_lout Personal Bastion LightsOut
as-idg-nagios-monitoring destination_host icmp, ping Ping
as-idg-nagios-monitoring destination_host tlr1_https Web Services

Traffic Outbound from the Firewall

From To Ports Description
source_host as-idg-nagios-monitoring ICMP,Ping Outbound Ping (monitoring)
source_host as-idg-nagios-monitoring tlr1_https Outbound Web Services
source_host as-idg-windows-pbh-ring1 Any Any to Personal Bastion

Address, Service & Object Definitions

Object / Group Members

Address & Address Groups
as-idg-windows-pbh-ring1 171.67.47.64/28
as-idg-nagios-monitoring 171.67.217.114
171.67.217.115

Service & Service Groups
tlr1_lout TCP 22, 80, 443, 3668, 5900-5901 | UDP 623
tlr1_https TCP 443

Roles

Template Owner

Responsible for determining, maintaining and modifying the template rules and membership of the different server groups. The application owner is notified regarding any changes to the template.

Current Template Owners

  • Jon Pilat
  • Brian Katyl
  • Stacy Lee

System Administrators

Request rule approval from the application owner.

ISO Security

The ISO group will audit the rules and make recommendations as needed or upon request from either the System Administrators or the Application Owners. In addition, any changes to this template must be reviewed by ISO prior to implementation.

Last modified April 11, 2023