Rule Group Header
Constructors
Properties
The destination IP address or address range to inspect for, in CIDR notation. To match with any address, specify ANY
. Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6. Examples:
The destination port to inspect for. You can specify an individual port, for example 1994
and you can specify a port range, for example 1990:1994
. To match with any port, specify ANY
.
The direction of traffic flow to inspect. If set to ANY
, the inspection matches bidirectional traffic, both from the source to the destination and from the destination to the source. If set to FORWARD
, the inspection only matches traffic going from the source to the destination.
The protocol to inspect for. To specify all, you can use IP
, because all traffic on AWS and on the internet is IP.
The source IP address or address range to inspect for, in CIDR notation. To match with any address, specify ANY
. Specify an IP address or a block of IP addresses in Classless Inter-Domain Routing (CIDR) notation. Network Firewall supports all address ranges for IPv4 and IPv6. Examples:
The source port to inspect for. You can specify an individual port, for example 1994
and you can specify a port range, for example 1990:1994
. To match with any port, specify ANY
.