P O L I C Y C O N F I G U R A T I O N
Configuring Policies
9-6
Security Appliance User Guide
Version 3R2
9
•
Enable Policy Logging
—Turning policy logging on or off.
•
About Schedules
—Adding day and time schedules for the policy.
E X A M P L E : C R E A T E A P O L I C Y
Allow FTP traffic from the eth1 interface in the untrust zone to a server
with IP address 4.4.4.4 on the eth0 interface in the trust zone:
set address trust FTPtrust 4.4.4.4
set policy from untrust to trust any FTPtrust ftp permit
save
G U I E X A M P L E : C R E A T E A P O L I C Y
1
Objects > Add Address Object
2
Enter the following, then click
Apply
:
Name: FTP Trust
IP Address/Netmask: 4.4.4.4/24
Zone: Trust
3
Policy > Add Policy
4
Enter the following, then click
Apply
:
Location
Action: Permit
Source Zone: Untrust
Destination Zone: Trust
Source Address: Any
Destination Address: FTPTrust
Service: FTP
NAMING POLICIES
Use the
set policy
command with the
name
option to add a name when
you create the policy:
set policy name {name_str} from {src_zone} to {dst_zone}
{src_addr} {dst_addr} {srvc} permit | deny | reject
