hello everyone any using neuvector for create rule block tra rancher-users #neuvector-security

Title

colossal-policeman-83714

08/29/2022, 9:25 AM

hello everyone, any using neuvector for create rule block traffic to unmanaged node, im create rule but not work

my rke worker node have IP 10.241.x.x and my POD connect to Redis outside on same network 10.241.x.x. On network graph show my Redis is Unmanaged Node. I create group contain redis node (address=10.241.x.x) and create network rule for my pod deny TCP to redis node but it not work

ripe-actor-83292

08/29/2022, 2:34 PM

What mode [Discover | Monitor | Protect] in the group in?

…as rules will only be enforced in Protect mode.

colossal-policeman-83714

08/30/2022, 1:50 AM

@ripe-actor-83292 yep I setup protect mode

if rule from demonset to k8s node it work!

but rule from demonset to host external , same netmask it not work

incalculable-easter-22743

09/21/2022, 11:00 AM

could you share the rule with us?

2 Views

#neuvector-security Join Slack