---
title: "Security Group FAQ"
description: "Short answers about security groups, rules, the default group, attaching to resources, and deleting, each linking to the full page."
content_type: "faq"
product: "security-group"
platform: "MyAccount"
url: "/myaccount/security-group/faq/"
---

# Security Group FAQ

## What is a security group?

A virtual firewall you attach to a node or another resource. Its rules decide which traffic can
reach the resource and which can leave it, by protocol, port, and source address. See
[Security Group](/myaccount/security-group/).

## Does every node have a security group?

Yes. Each account has a default group per project and region, and a new node gets it
unless you pick another group while creating the node. See [Set a security group as default](/myaccount/security-group/how-to/set-a-security-group-as-default/).

## What does the default security group allow?

The default that E2E creates allows all traffic in and out. If you made one of your own groups
the default, it allows what your rules say. To see a group's rules, select it and open its
**Inbound Rules** and **Outbound Rules** tabs. To replace the default on a node, see
[Get started with Security Group](/myaccount/security-group/get-started/).

## Can a node have more than one security group?

Yes, and their rules add up: traffic gets through when any group on the node allows it. See
[Attach a security group to a node](/myaccount/security-group/how-to/attach-a-security-group-to-a-node/).

## Do I need both an inbound and an outbound rule?

Yes. A group needs at least one of each. An outbound rule of **ALL** to **Any Network** lets
the node reach the internet freely. See
[Create a security group](/myaccount/security-group/how-to/create-a-security-group/).

## Can I allow traffic only from my IP?

Yes. In an inbound rule, choose **My IP / Whitelist IP** as the source, and then detach any
other group on the node that allows the same port from anywhere. See
[Get started with Security Group](/myaccount/security-group/get-started/).

## Can I delete the default security group?

No. Set another group as default first, and then the old one can be deleted. See
[Delete a security group](/myaccount/security-group/how-to/delete-a-security-group/).

## Can I delete a security group that a node is using?

No. Detach it from every resource first. See
[Delete a security group](/myaccount/security-group/how-to/delete-a-security-group/).

## Which regions have security groups?

Delhi and Chennai. A group belongs to one project and one region.

## Is a security group the same as the Firewall product?

No. The [Firewall](/myaccount/firewall/) product is a FortiGate appliance. A security group is
attached to each resource it protects.

## Do security group rules replace the firewall inside the node?

No. A firewall inside the node, such as ufw or Windows Firewall, filters traffic as well, so a
port must be open in both. E2E recommends managing access with security groups alone. See
[Add or edit rules](/myaccount/security-group/how-to/add-or-edit-rules/).