Purpose
The purpose of this article is to guide administrators on how to configure Linux firewall profiles to reject all incoming network traffic. This configuration serves as a vital security protocol for isolating SureMDM-managed Linux devices, effectively shielding them from unauthorized access, external threats, or network-based attacks during critical security incidents.
Prerequisites
N/A
Steps
1. Go to the profile section from the top navigation bar.
.png)
2. Select the platform LINUX to create a new profile or click on modify to edit the existing profile.
.png)
3. Select the Firewall policy in the profile and click on the configure.
.png)
4. Under firewall policy navigate to “Configuration Mode” and select the option from the down as “Basic settings” and for the tag “Default Incoming Policy” select “Reject”.
.png)
5.To verify that the firewall policy has been successfully deployed and applied to the device via SureMDM, you can check the active firewall status directly from the Linux terminal or from the SureMDM terminal.
Depending on the firewall manager your profile is using, run one of the following verification commands:
sudo iptables -L INPUT -n -v
After Profile deployment :-
.png)
Conclusion
By successfully deploying this firewall policy profile, all network traffic apart from the SureMDM communication will be rejected. This ensures that while the Linux device remains completely isolated from external security threats and unauthorized access, administrators can still securely manage, monitor, and control the device remotely through the SureMDM console.
Need more help? Here’s how to get help from our experts.