Lock a firewall

Lock a firewall to keep anyone on your team from changing it by mistake, for example a firewall in production. A locked firewall keeps running and passing traffic. Only its MyAccount actions are blocked until you choose Unlock Firewall.

While the firewall is locked, Start, Power Off, Reboot, Reinstall Firewall, Upgrade Firewall Plan, and Delete Firewall are greyed out, and the rename pencil is hidden. To attach or detach a VPC or an Add-on IP, choose Unlock Firewall first. While it is locked, a VPC change shows VPC cannot be attach/detach in Locked State.

To block only delete and reinstall, while the other actions stay available, use accidental protection instead. See Turn on accidental protection for a firewall.

Before you begin

• The firewall has finished any change in progress, such as Creating or Upgrading.
• Your role in the project can update firewalls.

Lock the firewall

1. In MyAccount, under Network, click Firewall.
2. On Manage Firewall, in the firewall’s row, click Actions, then Lock Firewall.
3. In Lock Firewall, confirm.

Firewall locked successfully shows.

Check the lock

Open the firewall’s Actions menu. Unlock Firewall shows in place of Lock Firewall, and Start, Power Off, Reboot, Reinstall Firewall, Upgrade Firewall Plan, and Delete Firewall are greyed out.

Unlock the firewall

When you are ready to change the firewall again:

1. On Manage Firewall, in the firewall’s row, click Actions, then Unlock Firewall.
2. In Unlock Firewall, confirm.

Firewall unlocked successfully shows, and each action is available again whenever the firewall is in the right state for it, such as Power Off while it is Running. For the state each action needs, see An item in the Actions menu is greyed out.