The Firewall App uses the Nftables firewall technology. The Firewall App can be used to individually restrict communication between the controller (device) and network(s). This protects the computer against unauthorized access by third parties using viruses and Trojans. The Firewall App uses the Nftables firewall technology. Nftables uses tables (IP, IP6, Inet), chains (input, output, forward) and rules that are also hierarchy levels. The tables contain chains that contain the actual firewall rules. The app offers a graphical user interface for the Nftables functionality. This allows you to easily create, edit and manage rules for filtering network traffic/packets. The Firewall App offers Network Address Translation (NAT). NAT makes it possible to replace the destination or source IP address of a data packet with another address in the data packet. Both target and source NAT are supported. With Source NAT of the Firewall App, multiple devices (IP addresses) of the machine from the machine network can communicate with the production network via the ctrlX OS-based CORE Controller with a single IP address (masquerading), which has security advantages. In contrast, Destination NAT allows the Firewall App to address various services on different devices (IP addresses) in the machine network via an IP address of the ctrlX OS-based CORE Controller from the production network (port forwarding). Features: Firewall based on Nftables Network tables for IPv4, IPv6 and Inet (IPv4 + IPv6) network traffic Chains for Input (packets received by the device), Output (packets leaving the device) and Forward (packets passing through the device) Rules support simple and advanced expressions to accept, discard or reject network packets Chain Management – manage network rules (create, edit, delete). Rule Management - manage expressions (create, edit, delete, change order). Monitoring of the rule(s) configuration via network packet counter Source NAT for adapting the source address of the data packet. Destination NAT for adapting the destination address of the data packet ctrlX, ctrlX Automation and ctrlX OS are registered trademarks of Bosch Rexroth AG.
