Only allow connections from the Sales network into the Internal network

Question

and to the cloud backup server.

Answer 1

To only allow connections from the Sales network into the Internal network and the cloud backup server, you can implement the following firewall rules:

1. Deny all incoming connections by default:
- This ensures that no connection is allowed unless explicitly permitted.

2. Allow connections from the Sales network to the Internal network:
- Use source IP filtering to allow traffic originating from the Sales network (identified by its IP range) to access the Internal network.
- Specify the necessary ports and protocols (e.g., TCP port 80 for HTTP) to allow specific types of traffic.

3. Allow connections from the Sales network to the cloud backup server:
- Similar to the rule above, use source IP filtering to allow traffic from the Sales network to reach the cloud backup server.
- Again, specify the appropriate ports and protocols required for accessing the cloud backup server (e.g., TCP port 22 for SSH).

By implementing these firewall rules, only connections originating from the Sales network will be allowed to access the Internal network and the cloud backup server. All other incoming connections will be denied by default.