---
title: "Firewall"
description: "Rules, aliases, NAT, virtual IPs, traffic shaping and guest networks."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.ixolate.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Firewall

Rules, aliases, NAT, virtual IPs, traffic shaping and guest networks.

- [Normalization](/firewall/normalization-scrub) — Traffic normalization adjusts selected packet properties before the final pass or block decision. Global defaults are available under Firewall ›…
- [Intrusion Prevention System](/firewall/intrusion-detection) — The Intrusion Prevention System (IPS) system of Ixolate is based on Suricata(https://suricata.io/) and utilizes…
- [Control Plane Shaping](/firewall/traffic-shaping-control-plane) — Planes of Operation is a concept to describe and divide the functionality of a network device.
- [Rules](/firewall/firewall-rules) — Ixolate contains a stateful packet filter, which can be used to restrict or allow traffic from and/or to specific networks as well as influence how…
- [Aliases](/firewall/aliases) — Aliases are named lists of networks, hosts or ports that can be used as one entity by selecting the alias name in the various supported sections of…
- [Interface groups](/firewall/interface-groups) — To simplify rulesets, you can combine interfaces into Interface Groups and add policies which will be applied to all interfaces in the group.
- [Network address translation](/firewall/nat) — Network Address Translation (abbreviated to NAT) is a way to separate external and internal networks (WANs and LANs), and to share an external IP…
- [Reflection and Hairpin NAT](/firewall/nat-reflection) — Because there are not enough available IPv4 addresses, a workaround called NAT (Network Address Translation) was implemented into the IPv4 Standard.…
- [Virtual IPs](/firewall/virtual-ips) — When using additional addresses for features like NAT or binding services to different interfaces, you can add extra addresses to already defined…
- [Advanced settings](/firewall/firewall-settings) — In some circumstances people might want to change how our system handles traffic by default, in which case the advanced settings section is a good…
- [Traffic Shaping](/firewall/traffic-shaping) — Traffic shaping (also known as “packet shaping”) is the control of computer network traffic in order to optimize or guarantee performance, lower…
- [Bufferbloat (FQ_CoDel)](/firewall/traffic-shaping-bufferbloat) — Bufferbloat is the undesirable latency that comes from a router or other network equipment buffering too much data. This occurs because the router…
- [Guest network](/firewall/guest-network) — This how to will explain how to setup a guest network using the captive portal. Guest Networks are widely used to allow guests controlled internet…

Source: https://docs.ixolate.com/firewall/index.mdx