> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create Firewall Rule

Create a Firewall Control rule for a scope specified by ID (run "accounts", "sites", "groups", or set "tenant" to "true") and specific OS, to allow or block network traffic to matching endpoints.
You can create one clean-up rule, with the Action of Allow or Block and with no other parameters defined explicitly. Make this the default rule at the end of your rule list. Traffic that does not match other rules first will match this rule. If you do not have a clean-up rule to match all traffic, the default Firewall Control behavior is to allow traffic that is not explicitly blocked.
Firewall Control requires Control SKU.

## Parameters

<div className="integrations-table">
  | Parameter | Description                                                                                                                                                                                                                                                                                                                                                                                                                   |
  | --------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
  | Data      | The rule's data. For more information visit: [https://your-subdomain.sentinelone.net/api-doc/api-details?category=firewall-control\&api=create-firewall-rule](https://your-subdomain.sentinelone.net/api-doc/api-details?category=firewall-control\&api=create-firewall-rule)                                                                                                                                                 |
  | Filter    | A scope specified by ID (run "accounts", "sites", "groups", or set "tenant" to "true") and specific OS, to allow or block network traffic to matching endpoints. For more information visit: [https://your-subdomain.sentinelone.net/api-doc/api-details?category=firewall-control\&api=create-firewall-rule](https://your-subdomain.sentinelone.net/api-doc/api-details?category=firewall-control\&api=create-firewall-rule) |
</div>

## Example Output

```json theme={"dark"}
{
	"data": {
		"action": "<string>",
		"application": {
			"type": "<string>",
			"values": []
		},
		"createdAt": "2024-01-28T10:08:17",
		"creator": "<string>",
		"creatorId": "<string>",
		"description": "<string>",
		"direction": "<string>",
		"editable": false,
		"id": "<string>",
		"localHost": {
			"type": "<string>",
			"values": []
		},
		"localPort": {
			"type": "<string>",
			"values": []
		},
		"location": {
			"type": "<string>",
			"values": []
		},
		"name": "<string>",
		"order": 935,
		"osType": "<string>",
		"osTypes": [
			"<string>"
		],
		"protocol": null,
		"remoteHost": {
			"type": "<string>",
			"values": []
		},
		"remoteHosts": [
			{
				"type": "<string>",
				"values": []
			}
		],
		"remotePort": {
			"type": "<string>",
			"values": []
		},
		"ruleCategory": "<string>",
		"scope": "<string>",
		"scopeId": "<string>",
		"status": "<string>",
		"tag": "<string>",
		"tagIds": [],
		"tagNames": [],
		"tags": [],
		"updatedAt": "2021-06-10T07:25:05"
	}
}
```

## Workflow Library Example

[Create Firewall Rule with Sentinelone and Send Results Via Email](https://library.blinkops.com/workflows/create-firewall-rule-with-sentinelone-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/create-firewall-rule-with-sentinelone-and-send-results-via-email/canvas" />
</div>