# Get host-enforced firewall rules

`GET /v1/sandboxes/{sandbox}/firewall`

**In this build:** Real.

**Scope:** `network.read`

**CLI:** `harebox firewall`

## Response: 200

`Firewall`

| Field | Type | Notes |
|---|---|---|
| `inbound` (required) | `array` |  |
| `outbound` (required) | `array` |  |
| `default_outbound` | `string` | One of: `allow`, `deny` |

Errors follow [one format](../errors.html).