Enabling IP filtering using the CLI Published on Aug 24, 2026
Print
Copy page Copy as Markdown for LLMs View as Markdown View the page as plain text
Open in ChatGPT Ask ChatGPT about this page Open in Claude Ask Claude about this page Prev Next Use the commands in this section to enable IP filtering.
The default rules do not place any restrictions on incoming and outgoing packets on ether* interfaces. You may add rules using the CLI. Use caution to not block access to needed network services.
IP filtering is automatically enabled when you connect to Managed Defense , described in the Managed Defense Quick Start Guide .
To view the active rules:
Go to CLI enable mode:
hostname > enable
View the rules:
hostname # show ip filter hostname # show ipv6 filter To enable IP filtering:
Go to CLI configuration mode:
hostname > enable
hostname # configure terminal
Enable IP filtering:
hostname (config) # ip filter enable
hostname (config) # ipv6 filter enable
Save your changes:
hostname (config) # write memory
Was this article helpful?
Yes No
Related articles
Malware Analysis (AX) > Malware Analysis System Administration Guide Release 11.x > Administration > Network administration > IP filtering
File Protect (FX) > File Protect 11.x > File Protect 11.x System Administration Guide > Administration > Network administration > IP filtering
Malware Analysis (AX) > Malware Analysis System Administration Guide Release 10.x > Administration > Network administration > IP filtering
File Protect (FX) > File Protect 10.x > File Protect System Administration Guide Release 10.x > Administration > Network administration > IP filtering