## Configure network security

URL: https://docs.atlan.com/product/connections/self-deployed-runtime/how-tos/configure-network-security

> Configure firewall rules and network policies to secure communication between Self-Deployed Runtime and Atlan services

Configure network security for Self-Deployed Runtime to permit only required encrypted traffic between the runtime and Atlan services. This ensures secure communication while blocking unauthorized access.

## Prerequisites

Before you begin, make sure you have:
* Administrative access to your firewall or network security groups

## Configure firewall rules

1. **Access your firewall management interface**: Log into your firewall management system (AWS Security Groups, Azure NSGs, enterprise firewall console, or iptables for Linux).

2. **Permit outbound connections**: Configure your firewall to permit the following outbound connections from your Self-Deployed Runtime deployment:

 ```yaml
 firewall_rules:
 outbound_allowed:
 - destination: "<your-tenant>.atlan.com"
 port: 443
 protocol: HTTPS
 - destination: "<your-tenant>-temporal.atlan.com" 
 port: 443
 protocol: gRPC/TLS
 ```

2. **Block all inbound traffic**: Configure your firewall to deny all inbound connections to Self-Deployed Runtime:

 ```yaml
 firewall_rules:
 inbound_blocked:
 - all_traffic: DENY # No inbound connections to agent
 ```

## Need help

If you are still facing issues and need help, contact [**security@atlan.com**](mailto:security@atlan.com) for assistance.

## See also

- [Security](https://docs.atlan.com/llms/platform/self-deployed-runtime/security/llms.txt): Security architecture, authentication, encryption, and compliance controls for Self-Deployed Runtime.
- [Route egress through a proxy](https://docs.atlan.com/llms/platform/self-deployed-runtime/route-egress-through-a-proxy/llms.txt): Send outbound traffic through a forward or egress proxy to inspect and audit it—complements the firewall rules here.
- [Verify container images](https://docs.atlan.com/llms/platform/self-deployed-runtime/verify-container-images/llms.txt): Confirm image authenticity and integrity with Cosign before deployment.

---