Some firewall ruleset are unexpectedly disabled after ESX reboot on 70u2.

Products

• VMware vSphere ESXi

Issue/Introduction

After rebooting ESX host with version 7.0 U2, certain firewall rulesets were unexpectedly disabled. This issue occurs when the user has configured allowed IP addresses on the firewall ruleset prior to the reboot.

Environment

VMware vSphere ESXi

Cause

This is a regression introduced in VMware ESXi version 7.0 U2 that leads to the rulesets getting disabled.

Resolution

This issue is resolved in ESXi version 7.0 U3

 

Workaround:

 

Manually enable the firewall ruleset by running the below esxcli command:

 

esxcli network firewall ruleset set -e 1 -r <ruleset name>

Additional Information

For more information related esxcli firewall commands, please refer: ESXCLI Firewall Commands