Admin defined LACP Rule on ENS 10.6

[aponjos613]

I was able to create a user-defined rule to allow the LACP negotiation setting the EtherType to 0x8809. I added the rule at the top of the Admin-defined rules stack, but once I delete/disable the user-defined rule connectivity is lost. I also set the "Allow traffic for unsupported protocols" in the firewall options.

[AdithyanT]

Hi @aponjos613,

I presume this topic is about ENS Firewall component. ENS firewall has a default in built rule that acts on a traffic if it does not hit any other rules defined in the Firewall. this is the Block_All Traffic Rule. Please confirm that the traffic is being blocked by this rule. if yes, then I would recommend having a user-defined rule in place to allow this traffic.

You can use Adaptive mode in ENS Firewall to have the necessary Rules auto created after which you can convert them into a permanent user-defined rule.

How Adaptive mode affects the firewall:

https://docs.mcafee.com/bundle/endpoint-security-10.5.0-firewall-product-guide-epolicy-orchestrator-...

Using Adaptive mode - Firewall:

https://docs.mcafee.com/bundle/endpoint-security-10.5.0-firewall-product-guide-epolicy-orchestrator-...

I sincerely hope this helps!

[aponjos613]

The rule works when defined local on the ENS Firewall as a User-defined rule. When we create the same rule as a policy (Admin-Defined) it does not work. 

[AdithyanT]

Hi @aponjos613,

Thank you for your response. Can you kindly share a screengrab of the rule for comparison? Alternatively, You can create a Service Request to work on this with you over the same!