Does VM firewall configuration overwrites Cluster Wide firewall configuration?

[jackylian]

If I set a DENY rule in Cluster Wide firewall configuration, will it be overwritten with an associated PERMIT VM firewall configuration?
From the following documentation, it indicates that Host firewall configuration overwrites Cluster Wide firewall configuration, but I like to know whether this applies to VM firewall configuration?
https://pve.proxmox.com/wiki/Firewall

 

[Chris]

Hi,
the cluster wide and host firewall rules are not inherited to the VMs/CTs firewall. If you want to define rules for multiple VMs you can use security groups https://pve.proxmox.com/pve-docs/chapter-pve-firewall.html#pve_firewall_security_groups

 

[jackylian]

Thanks Chris!