> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aviatrix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create Distributed Cloud Firewall Egress Rules

> Creating Distributed Cloud Firewall Rules

You can manually create Distributed Cloud Firewall (DCF) egress rules on the
Security > Distributed Cloud Firewall > Rules tab to define the access control
to apply on the traffic going to the Internet.

DCF rules are also created automatically when you:

* Monitor a VPC/VNet: VPC/VNet is added to the Monitored-VPCs rule.
* Protect a VPC/VNet: VPC/VNet is added to the Protected-VPCs rule; additional
  rules are created based on the trusted domains that are selected. These
  methods create the SmartGroup and the WebGroup at the same time as the DCF
  rule.

<Note>
  DCF rules are automatically enforced (pushed to Aviatrix gateways) as soon as
  they are created and committed, unless they are just being watched.
</Note>

To create a new Egress rule:

1. In Aviatrix PaaS, navigate to *Security > Distributed Cloud Firewall*.

2. Click *+ Rule*. The Create Egress Rule dialog displays.
   <img src="https://mintcdn.com/aviatrix-14b37c43/EV0VWzgSoSn4nUA6/docs/cloud/images/dcf-rule-create.png?fit=max&auto=format&n=EV0VWzgSoSn4nUA6&q=85&s=1a037d65bce7e780db9c4638d52aecab" alt="create egress rule page" width="1004" height="1512" data-path="docs/cloud/images/dcf-rule-create.png" />

3. Use the Distributed Cloud Firewall Field Reference to create your rule.

4. Click *Save in Drafts*.

5. Click *Commit*.

<Note>
  If you want to protect a VPC/VNet in a similar way to how a VPC/VNet is
  protected in the Egress workflow, the DCF rule for the VPC/VNet must deny all
  traffic from that VPC/VNet (Protocol = Any and no values in the Port field).
</Note>

## View Distributed Cloud Firewall Rule Details

You can open a previously created rule to view the details related to the
execution of that particular rule. You can view:

* Source Entities: origin(s) of the traffic for this rule (SmartGroup)
* Destination Entities: where the traffic terminates for this rule (SmartGroup,
  ExternalGroup, Threat Feed, Country)
* Statistics: traffic statistics from the last hour, day, week, or custom time
  period. The resulting graph indicates if the traffic is Observed, Enforced &
  Allowed, or Enforced & Denied.
  <img src="https://mintcdn.com/aviatrix-14b37c43/EV0VWzgSoSn4nUA6/docs/cloud/images/dcf-monitored-rule.png?fit=max&auto=format&n=EV0VWzgSoSn4nUA6&q=85&s=f1037f926d709a26c86cc86e3ca6fd65" alt="DCF rules page" style={{ maxHeight: "500px" }} width="3102" height="1428" data-path="docs/cloud/images/dcf-monitored-rule.png" />


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.