# Create Access rules allowing traffic from Management Servers to external hosts

If the external host and Management Server are separated by a Firewall or Layer 2 Firewall, edit the Policy to allow traffic from the Management Server to the host.

##

For more details about the product and how to configure features, click Help or press F1.

## Steps

1. Select Configuration.
2. Browse to Policies
3. Browse to Firewall Policies or Layer 2 Firewall Policies, depending on the type of policy that you want to edit.
4. Right-click the Firewall or Layer 2 Firewall policy, then select Edit Firewall Policy or Edit Layer 2 Firewall Policy.
5. Click the IPv4 Access or IPv6 Access tab, then add an Access rule with the following values:
   - Source: your Management Server
   - Destination: the target Host element
   - Service: Syslog (UDP) or Syslog (TCP), depending on the protocol used. For TLS-protected traffic, select TCP with TLS. The same Service and Port that was selected in the Audit Forwarding rule must be selected here.
   - Action: Allow
6. If you have finished editing the policy, click Save and Install.