Freedom9 freeGuard Slim 100, User Manual

Page: 115 / 170

. . . . .
M O N I T O R I N G T R A F F I C
User Guide
7-9
Setting Up Policies
Policies are set up to specify which traffic is allowed and what actions are to be taken under certain
circumstances. A policy is a set of rules that determines how traffic passes between security zones
(inter-zone policy), between interfaces bound to the same zones (intra-zone policies), and
between addresses in the Global zone (Global addresses). For example, all traffic will be allowed
to pass (since the purpose of using the Freedom9 network appliance in this example is to monitor
the flow).
The following commands in
Table 7-9 to set up the policies that are used with this scenario. For
more information about CLI commands, see the CLI Command Reference Guide provided with
your appliance.
Table 7-9: Commands to Set Up Policies
Performing Traffic Analysis Using NetFlow
The following describes the procedure to analyze traffic using NetFlow:
• The packet arrives at the interface of the appliance.
• The appliance validates whether the flow associated with this packet has
NetFlow enabled. This information is obtained from a prior policy lookup timestamp.
• The timestamp is updated in the flow when the packet is received.
• The NetFlow export module running at the sampling interval (based on internal bandwidth
based calculations), will extract the packet information from the flow and send the
information to the collector in NetFlow Format.
Command Description
set policy default-permit-all netflow Allows all traffic to go through and enables
NetFlow on all traffic.
set route 0.0.0.0/0 interface br0 gateway
192.168.65.240
Sets a default route for the management
traffic.
This setting should be your gateway
address.