Is Antsle protected from malware?

Hi,

I was wondering, is Antsle itself protected from a malware running on an antlet for analysis purposes?

For example, I'm running Flare VM and REMnux on two separate antlets for malware analysis. I do have other antlets running in the network but I added firewall rules (ufw) to block any inbound traffic coming from these two antlets. I know I can create a vlan to segregate this network, however, for convenience, I rather not so that I can update Flare VM and REMnux using the Internet easily and it's already segregated to other LANs at my home network because I'm using a physical firewall for that.

I just want to know if I have to add iptables rules to Antsle to deny potential inbound traffic from my malware lab antlets.

Thanks!

Antlets share a virtual network with the host, so a compromised antlet can reach your antsle's own services (antMan and SSH) unless you block it. For a malware lab, put those antlets on their own VLAN or bridge, add host firewall rules that drop traffic from them to the antsle itself, and keep the root password strong. Snapshot your clean lab antlets so you can roll them back after each analysis.

— Antsle Team