Firewall

Description

Managed shared firewall options for your Dedicated server,  Dedicated firewall and free Basic Firewall for Virtual Servers and LeaseWeb Cloud.

Contents

Managed, shared firewall

For custom-built Bare Metal servers, LeaseWeb optionally offers you to have it placed behind a shared, redundant Cisco ASA firewall, managed by LeaseWeb.

You can request us to open or close ports and alter IP limitations by creating a support ticket. VPN connections are not possible in a shared firewall setup, this requires a dedicated firewall.

Dedicated Firewall

For those that they want complete control over the firewall, LeaseWeb offers also dedicated firewalls.

You can choose between two brands: Cisco and Juniper. Both are high quality firewalls, but they offer different options on:

  1. The VPN client
  2. CLI

LeaseWeb will do the initial configuration based on your wishes and then you have complete control.

The table below shows the available firewall models and their characteristics:

Basic Firewall for Virtual Servers and LeaseWeb Cloud

LeaseWeb offers free Basic Firewall functionality as a feature for Virtual Server and LeaseWeb Cloud instances to provide basic filtering functionality. This firewall is applied "in front off" your instance on Hypervisor level. By default, the Basic Firewall is switched off. When you switch on the Basic Firewall, all established connections will remain active and functioning until manually terminated. After it is switched on, all incoming IPv4 connections to your cloud instances will be denied, with the exception of specifically allowed connections which you define through rules. You can create these exceptions (rules) before or after switching the basic firewall on.

Note

  • IPv6 traffic is not filtered by this firewall.
  • The Basic Firewall is stateful. Established TCP connections will not be filtered.
  • LeaseWeb always recommends employing a second layer of security, such as using iptables or Windows firewall on your Virtual Server and LeaseWeb Cloud instances.

The Basic Firewall is not available to VMware-based Virtual Servers (deployed before March 19, 2012)  and Premium Virtual Servers. If you want to know if your Virtual Server instance has a Basic Firewall available, check if the option is present in the "Manage" section in the LeaseWeb Customer Portal. For certain older deployments, it may be necessary do a single reboot before the Basic Firewall becomes available.

 


Keywords
You can click on any of the keywords below to see all related articles for that keyword