🔥🛡️

Firewall Rule CLI Generator

Generate firewall commands for iptables, UFW, firewalld, Windows Firewall, pfSense, Palo Alto, Fortinet & Cisco ASA/NGFW

iptables UFW firewalld Windows Firewall pfSense Palo Alto Fortinet Cisco ASA

Free online firewall CLI command generator — supports Linux iptables, UFW, firewalld, Windows Defender Firewall, pfSense, Palo Alto PAN-OS, Fortinet FortiGate, Cisco ASA and Cisco NGFW (FTD). No login required.

⚙️ Rule Configuration

 Firewall Platform iptables (Linux) UFW (Ubuntu / Debian) firewalld (RHEL / CentOS) pfSense (pfctl) Windows Defender Firewall (netsh) Palo Alto Networks (PAN-OS) Fortinet FortiGate (FortiOS) Cisco ASA (ASA-OS) Cisco NGFW / FTD (FMC CLI)

 Action

 Direction

 Protocol TCP UDP ICMP (Ping) Any / All

 Source IP / CIDR (blank = any)

 Source Zone (PAN-OS / FortiGate / ASA)

 Destination IP / CIDR (blank = any)

 Destination Zone (PAN-OS / FortiGate / ASA)

 Port / Port Range (e.g. 80, 443, 8000:9000)

 Application / Service (PAN-OS App-ID / FortiGate service)

 Network Interface (optional)

 Rule / Policy Name

 ACL Name (Cisco ASA / FTD)

 Enable Logging / Log Action

 Attach Security Profile Group (PAN-OS)

⚡ Quick Presets

 Generated Command

# Select your firewall platform and configure options to generate your command

✅ Copied to clipboard!

 Downloaded!

 Command Explanation

Select your options to see a plain-English explanation of each command part here.

 Platform Notes & Tips

 Common Ports Reference

SSH22/TCP

HTTP / HTTPS80 / 443 TCP

DNS53/UDP+TCP

MySQL / MariaDB3306/TCP

RDP3389/TCP

SMTP / SMTPS25 / 465 / 587 TCP

FTP21/TCP

PostgreSQL5432/TCP

MSSQL1433/TCP

SNMP161/UDP

LDAP / LDAPS389 / 636 TCP

Syslog514/UDP

 Command History (0 saved)

No saved commands yet. Generate a command and click  Save Current.

About This Firewall CLI Generator

This free Firewall Rule CLI Generator supports 8 major firewall platforms used by network engineers, security analysts, and DevOps professionals worldwide. Whether you need Linux iptables rules, UFW commands, Palo Alto PAN-OS security policies, Fortinet FortiGate firewall policies, or Cisco ASA access control lists (ACLs) — this tool generates accurate, production-ready CLI syntax instantly.

 Palo Alto Networks PAN-OS

Generates set security policies CLI commands using PAN-OS hierarchical configuration format. Supports App-ID application names, zone-based policy, security profile groups, and log-at-session-end settings. Commit command is included automatically.

 Fortinet FortiGate (FortiOS)

Generates config firewall policy commands in FortiOS CLI format. Supports source and destination zone (srcintf/dstintf), address objects, custom services, NAT settings, logging, and action (accept/deny). Includes next and end terminators.

 Cisco ASA (ASA-OS)

Generates standard access-list extended ACL entries and access-group interface binding commands. Compatible with Cisco ASA 5500-X series. Supports permit/deny actions, protocol, source/destination host or subnet notation.

 Cisco NGFW / FTD (Firepower)

Generates Cisco Firepower Threat Defense (FTD) / FMC-style access control policy CLI syntax. Uses Firepower CLI mode with configure access-control-policy structure including rule actions, zones, networks, and port objects.

iptables generator UFW command builder firewalld CLI tool Windows firewall netsh pfSense pfctl rules Palo Alto PAN-OS CLI FortiGate FortiOS CLI Cisco ASA ACL generator Cisco FTD Firepower CLI

 Firewall Rule CLI Generator — Free, browser-based. No data stored or transmitted.
⚠ Always test firewall rules in a lab or staging environment before production deployment.