Kerio Tech KERIO WINROUTE FIREWALL 6, Administrator'S Manual

Page: 71 / 368

71
Chapter 7
Traffic Policy
Traffic Policy belongs to of the basic WinRoute configuration. All the following settings are
displayed and can be edited within the table:
• security (protection of the local network including the WinRoute host from Internet
intrusions
• IP address translation (or NAT , Network Address Translation — technology which en-
ables transparent access of the entire local network to the Internet with one public IP
address only)
•
access to the servers (services) running within the local network from the Internet
(port mapping)
• controlled access to the Internet for local users
Traffic policy rules can be defined in Configurations
→
Traffic Policy . The rules can be defined
either manually (advanced administrators) or using the wizard (recommended).
It is recommended to create basic traffic rules and later customize them as desired. Advanced
administrators can create all the rules according to their specific needs without using the
wizard.
7.1 Network Rules Wizard
The network rules wizard demands only the data that is essential for creating a basic set of
traffic rules. The rules defined in this wizard will enable access to selected services to the
Internet from the local network, and ensure full protection of the local network (including the
WinRoute host) from intrusion attempts from the Internet. To guarantee reliable WinRoute
functionality after the wizard is used, all existing rules are removed and substituted by rules
created automatically upon the new data.
Click on the Wizard button to run the network rules wizard.
Note: The existing traffic policy is substituted by new rules after completing the entire process
after confirmation of the last step. This means that during the process the wizard can be
stopped and canceled without losing existing rules.
Step 1 — information
To run successfully, the wizard requires the following parameters on the WinRoute host:
•
at least one active adapter connected to the local network
• at least either one active adapter connected to the Internet or one dial-up defined. This
connection is not required to be dialed at the moment of the wizard’s startup.