Protecting network devices by a firewall

A system, comprising:

• at least one processor;
• and
• memory storing instructions configured to instruct the at least one processor to:
• receive a client access list comprising a script;
• derive a set of firewall rules from the client access list;
• execute the script to obtain one or more destinations;
• update the set of firewall rules based on the obtained destinations;
• and
• apply the set of firewall rules to selectively block and allow network traffic between a client device and one or more network devices.

A non-transitory computer readable storage medium storing computer-readable instructions, which when executed, cause a computer system to at least:

• receive a client access list comprising a script;
• derive a set of firewall rules from the client access list;
• execute the script to obtain one or more destinations;
• update the set of firewall rules based on the obtained destinations;
• and
• apply the set of firewall rules to selectively block and allow network traffic between a client device and one or more network devices.