# Create Access rules allowing traffic from Management Servers to external hosts

If the external host and Management Server are separated by a Engine or Layer 2 Engine, edit the Policy to allow traffic from the Management Server to the host.

##

For more details about the product and how to configure features, click Help or press F1.

## Steps

1. Select Engine.
2. Browse to Policies
3. Browse to Engine Policies or Layer 2 Engine Policies, depending on the type of policy that you want to edit.
4. Right-click the Engine or Layer 2 Engine policy, then select Edit Engine Policy or Edit Layer 2 Engine Policy.
5. Click the IPv4 Access or IPv6 Access tab, then add an Access rule with the following values:
   - Source: your Management Server
   - Destination: the target Host element
   - Service: Syslog (UDP) or Syslog (TCP), depending on the protocol used. For TLS-protected traffic, select TCP with TLS. The same Service and Port that was selected in the Audit Forwarding rule must be selected here.
   - Action: Allow
6. If you have finished editing the policy, click Save and Install.