After deploying the ANS distributed firewall, you may not yet have fully mapped out all the access requirements between your virtual machines. If there are clearly identified risky ports (such as SSH ports) or environment isolation requirements, you can first configure deny policies for critical virtual machines to block risky traffic. In addition, if new security threats are detected during operations, you can immediately set a deny policy to prevent potential cyberattacks.
