> For the complete documentation index, see [llms.txt](https://docs.cloudeka.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cloudeka.ai/guidance-for-enterprise/deka-gpu/deka-gpu-deka-guard/create-deka-guard/create-with-form.md).
# Create with Form
On the Deka Guard page, click the **+ Create Guard** button and select **Create with Form**.
The Create Guard page will be displayed. Complete the required fields, including **Name**, **Namespace**, and **Endpoint Selector**.
The **Endpoint Selector** section is used to define the target pod for the rule by using a label selector. In this example, use **app=web-app** as the label selector, then click **Add**.
Configure the global options for **Ingress Deny** or **Egress Deny**.
When **Ingress Deny** is enabled, all incoming traffic to the selected endpoint is blocked. When **Egress Deny** is enabled, all outgoing traffic from the selected endpoint is blocked. To allow specific traffic, add a **CIDR** or **Selector** rule using the **New Rule** button under the Ingress Deny or Egress Deny section. This guide uses an example of adding a rule to **Ingress Deny**. Click **New Rule**.
The **Create Ingress** window will be displayed. Select the desired **Type**.
If **Selector** is selected, only the **Selector** and **Port** fields are displayed.
If **CIDR** is selected, the **Selector**, **Port**, and **Exception** fields are displayed. After completing the configuration, click **Add**.
Click **Submit** to create the Deka Guard.
A notification stating **"Guard has been successfully created."** will appear when the Deka Guard is successfully created in Service Portal Cloudeka.