Freedom9 freeGuard Slim 100, User Manual, Page: 89 / 170

. . . . .
A D V A N C E D P O L I C Y C O N F I G U R A T I O N
User Guide
6-5
Service: FTP
Naming Policies
Use the
set policy command with the name option to add a name when you create the policy:
set policy name {name_str} from {src_zone} to {dst_zone} {src_addr}
{dst_addr} {srvc} permit | deny | reject
Use the
set policy command with the name option to add a name to an existing policy:
set policy id {number} name {name} from {src_zone} to {dst_zone} {src_addr}
{dst_addr} {srvc} permit | deny | reject
Example: Adding a Name to the Policy From the Previous Example
set policy id 1 name ftpcorp from untrust to trust any 4.4.4.4 ftp permit
save
GUI EXAMPLE: Adding a Name to the Policy from the Previous Example
1.
Set Policy > Configuration Edit.
2.
Enter the following, then click Apply .
Enable Policy
Name: ftpcorp
Action: permit
Source Zone: untrust
Destination Zone: trust
Source Address: any
Destination: 4.4.4.4
Service: FTP
Reordering Policies
Because the policy database is searched from top to bottom when matching against traffic, you
should order polices in the database from most specific to least specific. Doing this ensures that
a more general policy does not block a more specific policy as illustrated by the policy example
below. In this example, policy 2 never matches against FTP requests initiated from the trust zone
to a server on the untrust zone because the deny policy follows a more general allow policy.
Example: Reordering Policies
Set policy id 1 from trust to untrust any any any permit
Set policy id 2 from trust to untrust any any ftp deny
GUI Example: Reordering Policies
1.
Select Policy > Configuration > Edit (for ID1)
2.
Enter the following, then click Apply :
Location