Test Firewall installation to make sure Firewall is installed and working properly.
Before you begin
You must have enabled Firewall.
Task
-
Add a rule to block SSH to a particular system.
/opt/McAfee/ens/fw/bin/mfefwcli --fw-rule-add --index 1 --name "BlockSSH" --action deny --direction out --proto tcp --log enable --remote-service 22 --remote-single x.x.x.x
-
Violate the added rule by trying to SSH to that machine.
ssh user name@machine IP
-
Verify that SSH is getting blocked for that IP in:
/var/log/messages
-
Verify your
Firewall installation using this log file:
/tmp/enslfw-epo-setup.log