0

I have a google cloud Windows VM which is hosting a QlikSense server. The server should be accessible using the VM's External IP using https i.e. port 443 as this is one of the default rules in Google Firewall rules. But it is not. It only works when I set the Inbound rule for to allow TCP:443 from within the instance (from Windows Firewall settings). My question is

Why do I need to set up a firewall from within the instance?

Why doesn't the firewall rule enabled from Google Cloud Console doesn't work here?

Anoop Sharma
  • 87
  • 1
  • 13

1 Answers1

2

Why do I need to set up a firewall from within the instance?

You do not need an internal firewall (Windows Defender Firewall). However, this is a good idea (multiple lines of defense). Google firewalls are protocol / port based. Windows firewalls also provide software rules and other intelligence.

Let's say that you want to provide services on HTTPS (TCP port 443). You then need to enable a rule to allow TCP port 443 in both the Google Cloud Firewall and the Windows Defender Firewall.

Why doesn't the firewall rule enabled from Google Cloud Console doesn't work here?

If you have multiple firewalls, all firewalls must have a similar allow rule, otherwise any deny will result in denial.

John Hanley
  • 74,467
  • 6
  • 95
  • 159
  • That makes sense. It works when I disabled the internal windows firewall and just have the Google firewall rules applied. Thanks. – Anoop Sharma Dec 13 '18 at 23:37