UFW firewall

UFW is the supported host firewall surface.

Enable the firewall

When UFW is installed but inactive, select Enable firewall. Control prepares the required management/web access rules, sets the supported default policy and verifies that the firewall became active.

Keep your current SSH session open and test a second SSH connection before closing the first session whenever you change remote firewall policy.

Add rules

Use Add rule for an additional allow or deny rule using the supported protocol, port and source fields. The rules table represents rules added through Control. Existing UFW rules created outside Control are not silently adopted or deleted.

Disable the firewall

When UFW is active, use Disable firewall if you deliberately want UFW inactive. Review the confirmation carefully: disabling the firewall removes host-level filtering even though the saved rule configuration can remain present for later use.

Cloud-provider firewalls and security groups are separate from UFW and must be managed at the provider.