. . . . .
A D V A N C E D P O L I C Y C O N F I G U R A T I O N
User Guide
6-3
Configuring Global Policies
Global policies are not assigned to a specific zone and either allow or deny packets to all zones.
Use the
set zone command and specify global as the zone to create a global policy:
set policy global {src_addr} {dst_addr} {srvc} {permit | deny | reject}
[NOTE]
You must configure the src_addr and dst_addr in the global zone.
Configuring Policies
This section describes how to create, modify and delete policies. This section includes the
following topics:
•
Creating Policies
•
Naming Policies
•
Reordering Policies
•
Disabling Policies
•
Re-enabling Policies
•
Deleting Policies
•
Viewing Policies
Creating Policies
The service type, location of end points, and policy action are the primary elements of a policy.
Use the
set policy command to create a policy:
set policy from {src_zone} to {dst_zone} {src_addr} {dst_addr} {srvc} {permit
| deny | reject }[alert] [netflow] [dpi-profile] [top-talkers]
Table 6-1
explains the parameters in the above command. See also the
CLI Reference Guide that
comes with your appliance.
Table 6-1: Addresses and Zones
P a r a m e t e r
D e s c r i p t i o n
{src_zone}, {dst_zone}
The
{src_zone} and {dst_zone} objects are
used to define the direction of the policy and
whether the traffic is interzone.
{src_addr}, {dst_addr}
The
{src_addr} and {dst_addr} are source and
destination address objects. This information is
also used for route lookups determining the
ingress and egress interface of the policy.
{srvc}
The
{srvc} object defines the destination port for
the traffic.
permit
The
permit action allows traffic matching the
policy to pass through.
alert
The
alert action configures or displays
information about conditions for which the
system should alert the user.
Summary of Contents for freeGuard Slim 100
Page 10: ...FSL100 User Guide x ...
Page 24: ...G E T T I N G ST A R T E D 1 1 14 User Guide ...
Page 42: ...SY S T E M M A NA G E M E N T 2 2 18 User Guide ...
Page 50: ...M A N A G I N G T R A F F IC F L O W 3 3 8 User Guide ...
Page 58: ...C O N F IG U R I N G A TT A C K PRE VE N T I O N 4 4 8 User Guide ...
Page 84: ...T R A F F I C F LO W R E P O R T I N G 5 5 26 User Guide ...
Page 122: ...M O N I T O R I N G T R A FF I C 7 7 16 User Guide ...
Page 134: ...U SI N G S N M P 8 8 12 User Guide ...
Page 166: ...A L PH AB E T I C LI S T I NG OF LO G M E SS AG E S C C 4 User Guide ...
Page 170: ...N O TI F I C A T I O N A N D S A F E T Y ST A TE M E N T S Battery Statement D D 4 User Guide ...