In this example, you need to prevent WannaCry ransomware attacks and deny access from the port that can be exploited by WannaCry, for example TCP 445. You can add a user-defined network ACL rule to deny all incoming traffic from TCP port 445.
Table 1 lists the inbound rule required.
In this example, a BMS in a user-defined subnet is used as the web server, and you must allow inbound traffic from HTTP port 80 and HTTPS port 443 and allow all outbound traffic.
Table 2 lists the inbound and outbound user-defined network ACL rules required.
Direction |
Policy |
Protocol |
Source |
Source Port Range |
Destination |
Destination Port Range |
Description |
|---|---|---|---|---|---|---|---|
Inbound |
Permit |
TCP |
0.0.0.0/0 |
1-65535 |
0.0.0.0/0 |
80 |
Allows inbound HTTP traffic from any IP address to BMSs in the user-defined subnet through port 80. |
Inbound |
Permit |
TCP |
0.0.0.0/0 |
1-65535 |
0.0.0.0/0 |
443 |
Allows inbound HTTP traffic from any IP address to BMSs in the user-defined subnet through port 443. |
Outbound |
Permit |
All |
0.0.0.0/0 |
0 |
0.0.0.0/0 |
0 |
Allow all outbound traffic from the user-defined subnet. |