P O L I C Y C O N F I G U R A T I O N
Configuring Policies
9-8
Security Appliance User Guide
Version 3R2
9
Set policy id 2 from trust to untrust any any ftp deny
G U I E X A M P L E : R E O R D E R I N G P O L I C I E S
1
Policy > Configuration > Edit (for ID1)
2
Enter the following, then click
Apply
:
Location
Action: Permit
Source Address: Any
Destination Address: Any
Service: Any
3
Policy > Configuration > Edit (for ID2)
4
Enter the following, then click
Apply
:
Location
Action: Deny
Source Address: Any
Destination Address: Any
Service: FTP
By default, the freeGuard Blaze 2100 software assigns a newly created
policy a policy ID and adds it to the bottom of the policy list. To restrict
FTP traffic from trust to untrust Policy 2 reordered in front of Policy 1.
Use the
set policy
command with the
move
option to re-order policies
in the policy database:
set policy move {id_num} { before | after } {target_id}
The
{id_num}
number specifies the policy number that is moved; the
{target_id}
is the policy number that the policy is moved before or after.
DISABLING POLICIES
Use the
set policy
command with the
disable
option to disable a policy
rather that delete it from the policy database:
set policy id {id_num} disable
