Only allow SSH en Web traffic on the QA's external interfaces.