Outsourcing the configuration of the Firewall App

[jacaré]

Is it possible that the configuration of the firewall app is for example on an FTP server in our internal network. From the cloud then comes only the trigger, get the configuration X from server Y. In addition, the firewall app can also fetch the associated configuration X from server Y after booting.
The reason for this is that the firewall whitelist contains sensitive data, such as IPs, MACs, ports that are open and so on.

In addition, simple and centralized management of the firewall app is important to IT.

[mlaml]

Hi,

currently there is no mechanism available that you can use out of the box.

The following two variants come to mind

- Use your own app which retrieves the configuration X from server Y  and then uses the firewall (REST) API to set the new firewall configuration

- Use the REST API from the firewall app to set the configuration from a remote system (requires inbound connection)

Personally I would prefer the second variant, but it of course depends on your environment whether that's possible.

Could you give a few more details how you would want to set the trigger in the cloud? How would the ctrlX CORE be triggered?

Best regards,

Michael

[jacaré]

Where can I find the configuration of the firewall as a file? I don't find anything in "Configurations".
Can you provide the link to the documentation of the firewall REST-Api?

[CodeShepherd]

See the online documentation "Firewall App, Security Functions ctrlX CORE, Application Manual" for more information.

[jacaré · Accepted solution]

with the newest release RM21.07 the firewall app uses the configuration system of the core. A nftables.conf is there inside "Manage app data".