Cisco PIX 520 - PIX Firewall 520, Online Help Manual

Page: 121 / 256

This example shows the detailed view of the same access rule. It shows the source and destination
interface names and IP addresses.
Adding a New Rule
Follow these steps to add a new rule:
Click Add on the Rules menu. Optionally, you can click Add on the PDM toolbar, or right-click
over the rule and click Add. 1.
The Add Rule dialog box appears. See Adding a Rule for more information. 2.
Alternatively, you can click Insert Before or Insert After on the Rules menu to add a rule before or
after a selected rule. The Insert Rule Before or Insert Rule After dialog box appears, letting you
configure the rule you want to add.
Editing a Rule
Follow these steps to edit an existing rule:
Select the rule you want to edit. 1.
Click Edit on the Rules menu. Optionally, you can click Edit on the PDM toolbar, or right-click
over the rule and click Edit. 2.
The Edit Rule dialog box appears. See Editing a Rule for more information. 3.
Pasting a Rule
Pasting Access Rules
PDM will open the Paste Rule dialog box containing the copied/cut rule when you attempt to paste a
rule. This is provided to let you make changes before pasting the rule.
❍
Because rules are grouped by interface, PDM does not let you add a rule to a group on an interface
while the rule is applied to a different interface.
❍
Pasting a rule before or after a rule created from an outbound rule is not permitted. PDM will issue a
warning. This is not permitted because PDM sorts outbound rules in the order that PIX Firewall will
apply them to traffic.
❍
Pasting AAA Rules
When you copy or cut an AAA rule and then try to paste it before or after a rule with a different
action, the Paste Rule dialog box will appear letting you edit the rule.
For example, if you copy or cut an Authentication rule and then attempt to paste it before or after an
Authorization rule, you will only be able to select Authorize or Do not Authorize as the action.
This is because you are using an Authorization rule as a reference for a Paste Before or Paste
After operation. Paste (as opposed to Paste Before or Paste After) does not use a reference row and
will let you select any action.