Setting up the communication rules requires that the applications are running on both sides of the firewall so you can test and verify that you have properly created the rules that allow all communications for each application. This is especially true if you are creating custom rules. Once the rules are created, exercise the various capabilities of the applications and ensure that you have created all of the necessary rules. You may need to create multiple rules for an application to work properly.
It is sometimes helpful to analyze the communications logs on the syslog server to troubleshoot rule creation especially if you are creating custom rules. The firewall's internal logging creates information for simple analysis which may not be sufficient for all situations.
We will start by creating a ping rule for each of the ongoing ping communications currently working. Ping rules allow you to maintain the ping communications and verify that the computers are able to communicate with each other as you create and test the application rules. This is an optional step and can be skipped if desired. The ping rules are also used to test that setting the firewall to Normal mode does not impact communications. After all the desired communications are set up and the firewall is working as desired these rules will be deleted or disabled as they are no longer required for normal operation.
Because you want to see separate communications for each ping command, you should create a separate rule for each inbound and outbound ping request. An inbound ping originates from the external computer and goes to a DeltaV workstation. An outbound ping originates from a DeltaV workstation and goes to an external computer.
Firewalls are directional in that rules also control the direction of communications. An inbound rule allows an external computer to initiate communications to an internal computer. The internal computer responds to the external request as part of the established communications. An outbound rule is not necessary to respond to an external communications request. An outbound rule allows an internal computer to initiate communications to an external computer. An inbound rule is not necessary to respond to an outbound communications request.