ENS Firewall - allow all traffic in organization Network and block all outside traffic

[JT]

Hello,

I looking for assistance setting up the right ENS firewall rules to perform the following:

1- When a system (Laptop) is outside our organization network, all internet traffic should be blocked.

2- When a system (Laptop) is outside our organization network, to only allow traffic when connected to our organization network via VPN. This means that only the traffic for the VPN application would be allow so it can connect to our organization network.

3- Only When a system (Laptop) is connected inside our organization network. to allow all traffic. 

I was planning to create two ENS firewall policies for this, one for static systems and one for mobile systems. Will that be recommendable or better to just one policy?

Thanks in advance

[AdithyanT]

Hi @JT,

Thank you for your post.

I have linked the below documents that talks about a feature in ENS Firewall called "Connection isolation" and "Location Awareness Group".

Location Awareness group:

https://docs.mcafee.com/bundle/endpoint-security-10.6.0-firewall-product-guide-windows/page/GUID-FE6...

Connection Isolation:

https://docs.mcafee.com/bundle/endpoint-security-10.6.0-firewall-client-product-guide-windows/page/G...

https://docs.mcafee.com/bundle/endpoint-security-10.5.0-client-firewall-product-guide-windows/page/G...

I sincerely hope this helps!