Virtual Networks
Isolated networks, subnets, and routers, with a live topology and an internet access check.
Learn moreSecurity Groups
Control inbound and outbound traffic with stateful security groups. Start from presets and apply many rules at once.
ICT Cloud console · illustrative data
Stateful virtual firewalls for your instance ports.
Stateful filtering
Replies to allowed traffic are let through automatically.
Many rules, one apply
Add as many rules as you need, then apply them in one go.
Features
Ingress and egress rules
Protocol, port range (1–65535) and source or destination.
IPv4 and IPv6
Use IPv4 or IPv6 CIDR blocks in rules.
Presets
Common rules for SSH, RDP, HTTP, HTTPS, and ICMP.
Sensible defaults
New groups get two allow-all egress rules, IPv4 and IPv6, that you can edit or delete.
Associated resources
See the instances, load balancers, and routers a group is attached to.
Effective rules per instance
Inspect every ingress rule that applies to an instance across all its groups.
Specifications
| Type | Stateful, applied to instance ports |
|---|---|
| Direction | Ingress and egress |
| Port range | 1–65535 |
| Addresses | IPv4 and IPv6 CIDR |
| Defaults | Allow-all egress for IPv4 and IPv6 |
| Presets | SSH, RDP, HTTP, HTTPS, ICMP |
FAQ
Can I delete the default security group?
No. Every project keeps its default security group, and you can edit its rules.
Is there a deny rule?
No. Security groups only allow traffic; anything that no rule allows is denied.
Start building on ICT Cloud.
Creating an account is free. Resources are billed per second, with a 60-second minimum.