Traffic streams in from the internet toward your network. Write firewall rules to drop the attacks without blocking real users; rules are checked top to bottom and the first match wins, just like a real FortiGate.
wave1
score0
integrity 100%
users 100%
// shift briefing
You're on the firewall tonight.
Packets show their port on top and where they come from below. Hover or tap one to inspect it.
Blocked attack +15 · delivered real traffic +10
Attack gets through: integrity drops. Real traffic blocked: users get angry and you lose 15.
Rules are checked top to bottom. The first match wins; anything unmatched falls to the implicit policy.
leaderboardloading…
loading…
field notes
Default deny is how real edges are built: flip the implicit policy to DENY, then allow only what the business needs.
Order matters. "Allow SSH from VPN" has to sit above "Deny SSH 22", or your admins get locked out.
Not every attack comes from a bad network. The SMB worm arrives from everywhere, so block the port, not the source.
❯esc
↑↓ navigate↵ opentry the terminal on the home page