Forum Discussion

AlvinC's avatar
AlvinC
Icon for Joining the Conversation rankJoining the Conversation
2 months ago
Solved

Internet Network Rules - No Option for IP Address

Hi, I’m seeking advice on how to set up a rule in the Network Rules section to allow traffic to egress to a specific destination public IP address on the Internet.
When I choose Rule Type as Internet, I don’t see an option to define an IP address in the App/Category field. Do I need to use the Custom Service IP option for this? If so, could you share an example configuration?

  • michaelsaw's avatar
    michaelsaw
    2 months ago

    Hi AlvinC, 

    Would this sample configuration be something that you are looking for?

     

    Cheers

4 Replies

  • michaelsaw's avatar
    michaelsaw
    Icon for Cato Professional Services rankCato Professional Services
    2 months ago

    Hi AlvinC,

    Can we check if you have allocated a Cato IP address for the Network Rule's egress IP? 
    Here is a KB for reference: https://support.catonetworks.com/hc/en-us/articles/4413273467153-Allocating-IP-Addresses-for-the-Account

    Can we also check if you selected "Route" ir "Route via"?
    Can we check if you have seen this KB: https://support.catonetworks.com/hc/en-us/articles/7785698733341-Configuring-Network-Rules#h_01JZSVB952JEDD04BQVYJET9XG

    Cheers

    • AlvinC's avatar
      AlvinC
      Icon for Joining the Conversation rankJoining the Conversation
      2 months ago

      Hi MichaelSaw,

      I have a Cato IP address allocated to the egress IP with Route via set in the rule.

      I want this rule only apply when the source IP are attempt to connect to a specific public IP address provided by my application vendor. Hence, I am looking on how to define the public IP as the target IP in this network rule.

      Thanks

      • michaelsaw's avatar
        michaelsaw
        Icon for Cato Professional Services rankCato Professional Services
        2 months ago

        Hi AlvinC, 

        Would this sample configuration be something that you are looking for?

         

        Cheers