Firewall
Configuring Firewall Rules to Control Inbound and Outbound Traffic
Cisco ISA500 Series Integrated Security Appliances Administration Guide
204
6
Configuring Firewall Rules to Control Inbound and Outbound
Traffic
The zone-based firewall can permit or deny inbound or outbound traffic based on
the zone, service, source and destination address, and schedule.
Refer to the following topics:
•
Default Firewall Settings, page 206
•
Priorities of Firewall Rules, page 207
•
Preliminary Tasks for Configuring Firewall Rules, page 207
•
General Firewall Settings, page 208
•
Configuring a Firewall Rule, page 209
•
Configuring a Firewall Rule to Allow Multicast Traffic, page 211
•
Configuring Firewall Logging Settings, page 212
About Security Zones
A security zone is a group of interfaces to which a security policy can be applied
to control traffic between zones. For ease of deployment, the Cisco ISA500 has
several predefined zones with default security settings to protect your network.
You can create additional zones as needed.
Each zone has an associated security level. The security level represents the level
of trust, from low (0) to high (100). Default firewall rules are created for all
predefined zones and your new zones, based on these security levels. For
example, by default all traffic from the LAN zone (with a Trusted security level) to
the WAN zone (with an Untrusted security level) is allowed but traffic from the
WAN (Untrusted) zone to the LAN (Trusted) zone is blocked. You can create and
modify firewall rules to specify the permit or block action for specified services,
source and destination addresses, and schedules.
To learn more, see the
Security Levels and Predefined Zones
table.
