> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/shield/manual-blocking/manual-rules.md).

# Manual Rules

Manual Shield rules allow you to permit, drop, or reject specific network connections based on the source and destination IP addresses, the used network protocol, and the port.

{% hint style="danger" %}
**Please note**: The following requirements must be met for manual Shield rules to take effect:

* Manual rules must be assigned to specific hosts using [mappings](/docs/manual/english/platform-usage/shield/manual-blocking/mappings.md).
* The **Enginsight Shield (IPS)** option must be enabled in the [settings of the individual hosts](/docs/manual/english/platform-usage/host-detail-view/settings.md#core-feature) or under **Hosts** → **Policy Manager** via a [corresponding policy](/docs/manual/english/platform-usage/hosts/management/policy-manager/add-policy-manager.md#enginsight-shield-ips).
  {% endhint %}

***

<i class="fa-compass">:compass:</i> Navigate to **Shield** → **Manual Blocking** → **Manual Rules** to show a list of all configured manual rules. If you have not created any manual rules yet, this view is empty.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2F0gQ8kW7XHv1vUfUkjz65%2Fenginsight-screenshot-shield-manual%20blocking-manual%20rules.jpg?alt=media&amp;token=e4e10b4a-4803-4cca-8c9d-89a82ef85423" alt=""><figcaption></figcaption></figure>

The [rule overview](#manual-rules-overview) provides information such as:

* which mappings include the rule.
* whether the rule permits, drops, or rejects a network connection.
* the specific network connections to which a rule applies.

You can also [add new manual rules](#add-manual-rules).

***

## Navigation

<i class="fa-magnifying-glass">:magnifying-glass:</i> Click the **Text Search** field above the list and enter a search term of your choice to find specific list items more quickly.

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Refresh** icon <i class="fa-arrows-rotate-reverse">:arrows-rotate-reverse:</i> above the list to update all list items.

<i class="fa-computer-mouse-scrollwheel">:computer-mouse-scrollwheel:</i> Scroll down the list or adjust the number of results shown per page ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between pages.&#x20;

### Filtering the List

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Filter** icon <i class="fa-filter">:filter:</i> above the list to filter the list by predefined parameters.

<details>

<summary>Available Filters</summary>

<table><thead><tr><th width="206.60546875">Parameter</th><th width="116.515625">Type</th><th>Description</th></tr></thead><tbody><tr><td>Action</td><td>String</td><td>Filter by all manual rules that enforce a specific action for network connections, or exclude them from the results. All available actions are shown.</td></tr><tr><td>Enabled</td><td>Boolean</td><td><p>Filter by whether a manual rule is enabled or not.<br><br>The following values are available:</p><ul><li><strong>True</strong>: The rule is enabled and actively enforced.</li><li><strong>False</strong>: The rule is disabled.</li></ul></td></tr><tr><td>Tag</td><td>String</td><td>Filter by a specific tag that is assigned to a group of manual rules, or exclude it from the results. All available rule tags are shown.</td></tr><tr><td>State</td><td>String</td><td>Filter by all manual rules that apply to newly established, existing, or all network connections, or exclude them from the results. All available states are shown.</td></tr></tbody></table>

</details>

### Sorting List Items

<i class="fa-computer-mouse">:computer-mouse:</i> Click the **Sort** icon <i class="fa-sort">:sort:</i> next to a column name in the table header to sort by that column in ascending <i class="fa-angle-up">:angle-up:</i> or descending order <i class="fa-chevron-down">:chevron-down:</i> .

<i class="fa-computer-mouse">:computer-mouse:</i> Click the sort icon <i class="fa-bars-sort">:bars-sort:</i> above the list to adjust the priority of the applied sorting. A menu opens that shows all columns by which the list is currently sorted. Drag and drop the shown items to change the sorting priority.

### Further Actions for List Items

<i class="fa-computer-mouse">:computer-mouse:</i> Select the checkbox <i class="fa-square">:square:</i> next to a list item to select the respective item. Alternatively, select the checkbox in the table header to select all list items.

The number of selected list items is now shown next to the search field.

The <i class="fa-slider">:slider:</i> **Actions** menu also appears in the upper-right corner. Click it to expand the respective submenu. The following actions are available:

<table><thead><tr><th width="209.06640625">Action</th><th>Description</th></tr></thead><tbody><tr><td>Delete</td><td><p>Delete all selected objects.<br><br><i class="fa-computer-mouse">:computer-mouse:</i> Click <strong>Delete</strong> and confirm the prompt that appears by clicking <strong>Delete Irretrievably</strong>.</p><div data-gb-custom-block data-tag="hint" data-style="danger" class="hint hint-danger"><p><strong>Please note</strong>: Deleted items cannot be recovered.</p></div></td></tr><tr><td>Enable</td><td><i class="fa-eye">:eye:</i> This action is only available if all selected objects are inactive.<br><br>Enable all inactive objects.</td></tr><tr><td>Disable</td><td><i class="fa-eye">:eye:</i> This action is only available if all selected objects are active.<br><br>Disable all active objects.</td></tr></tbody></table>

***

## Manual Rules: Overview

The rule overview is structured as a table.

<figure><img src="https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FYLgAs5upHZigKasYDeUU%2Fenginsight-screenshot-shield-manual%20blocking-manual%20rules%20overview.jpg?alt=media&amp;token=fb0b206c-944e-4314-bd13-3595acde6d56" alt=""><figcaption></figcaption></figure>

The following information is shown:

<table><thead><tr><th width="199.6875">Column</th><th>Description</th></tr></thead><tbody><tr><td>Name</td><td><p>Shows the name of the manual rule, an additional description if provided, and the tags assigned to the rule, if available.</p><p></p><p>The date and time of creation and last edit, and the names of mappings that include the rule are also shown.<br><br><i class="fa-computer-mouse">:computer-mouse:</i> Click the name of a manual rule to navigate to the respective <a href="#manual-rules-edit-view">edit view</a>. Here you can adjust configured settings and delete the rule.</p></td></tr><tr><td>Action</td><td><p>Shows the action that should be performed for the network connections defined in the respective rule.<br><br>The following actions can be shown:</p><ul><li><strong>Allow</strong>: The defined connection is classified as trusted and permitted. A whitelist entry is created for it in the background.</li><li><strong>Drop</strong>: The connection is not permitted. No response is sent to the source system.</li><li><strong>Reject</strong>: The connection is actively blocked, and a corresponding negative response is sent to the source system.</li></ul></td></tr><tr><td>Source</td><td>Shows the IP address ranges or domain names defined in the respective rule that serve as the sources or starting points of a network connection.<br><br>If no custom source has been defined, this is indicated accordingly (---).</td></tr><tr><td>Destination</td><td>Shows the IP address ranges or domain names defined in the respective rule that serve as the destinations or endpoints of a network connection.<br><br>If no custom destination has been defined, this is indicated accordingly (---).</td></tr><tr><td>Enabled</td><td>Shows whether the respective rule actively enforces the defined actions for all defined connections on all assigned hosts.<br><br>If the rule is enabled, this is indicated by a green <strong>check</strong> icon <i class="fa-circle-check" style="color:green;">:circle-check:</i>. Disabled rules are indicated by a red <strong>circle</strong> icon <i class="fa-circle" style="color:red;">:circle:</i>.</td></tr></tbody></table>

***

## Adding a Manual Rule

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-plus">:plus:</i> **Create Manual Rule** in the upper-right corner to [add a new manual rule](/docs/manual/english/platform-usage/shield/manual-blocking/manual-rules/add-manual-rule.md).

***

## Manual Rule: Edit View

<i class="fa-computer-mouse">:computer-mouse:</i> Click the name of a manual rule to navigate to the respective edit view. Here you can adjust [configured settings](/docs/manual/english/platform-usage/shield/manual-blocking/manual-rules/add-manual-rule.md#general-settings) and delete the rule.

The following actions are available:

<table><thead><tr><th width="200.39453125">Option</th><th>Description</th></tr></thead><tbody><tr><td>Save Changes</td><td><p><i class="fa-computer-mouse">:computer-mouse:</i> Click <strong>Save Changes</strong> after adjusting any settings.</p><div data-gb-custom-block data-tag="hint" data-style="danger" class="hint hint-danger"><p><strong>Please note:</strong> Unsaved changes cannot be recovered.</p></div></td></tr><tr><td>Back</td><td><i class="fa-computer-mouse">:computer-mouse:</i> Click <strong>Back</strong> to return to the list overview.</td></tr><tr><td>Remove</td><td><p><i class="fa-computer-mouse">:computer-mouse:</i> Click <strong>Remove</strong>, then confirm the prompt that appears to delete the object that you are editing.</p><div data-gb-custom-block data-tag="hint" data-style="danger" class="hint hint-danger"><p><strong>Please note:</strong> Deleted objects cannot be recovered.</p></div></td></tr></tbody></table>

***