About firewall rules

Firewall rules are divided into preset firewall rules and custom firewall rules.

Preset firewall rules are used to ensure full-fledged operation of Kaspersky IoT Secure Gateway 1000. You cannot edit these rules, and they are not displayed in the Kaspersky IoT Secure Gateway 1000 web plug-in.

If necessary, you can create additional rules. These rules are called custom firewall rules. You can also change or delete rules of this type. Custom firewall rules are checked in the order defined in the Kaspersky Security Center 13.2 Web Console, from top to bottom. You can create up to 1,000 custom firewall rules.

Kaspersky IoT Secure Gateway 1000 supports rules for the TCP and UDP protocols (only IPv4).

Stateful packet inspection is enabled for these protocols. .

Preset rules allow the following Kaspersky IoT Secure Gateway 1000 connections:

• Outgoing connections with the Kaspersky Security Center 13.2 Web Console over the TCP protocol
• Outgoing connections with the update server over the TCP, UDP, and TCP/TLS protocols
• Incoming connections with the local web server over the HTTPS protocol
• Outgoing connections with the Syslog server over the TCP and UDP protocols
• Outgoing and incoming connections with MQTT data sources over the TCP protocol
• Outgoing and incoming connections with external and internal DNS servers over the UDP protocol