Security 8-65
FFF
Fiiiillllttttee
e
errrr p
p
p
prrrriiiio
o
o
orrrriiiittttyyy
y
Continuing the customs inspectors analogy, imagine the inspectors lined up to examine a package. If the
package matches the first inspector’s criteria, the package is either rejected or passed on to its destination,
depending on the first inspector’s par ticular orders. In this case, the package is never seen by the remaining
inspectors.
If the package does not match the first inspector’s criteria, it goes to the second inspector, and so on. You can
see that the order of the inspectors in the line is ver y impor tant.
For example, let’s say the first inspector’s orders are to send along all packages that come from Rome, and the
second inspector’s orders are to reject all packages that come from France. If a package arrives from Rome,
the first inspector sends it along without allowing the second inspector to see it. A package from Paris is
ignored by the first inspector, rejected by the second inspector, and never seen by the others. A package from
London is ignored by the first two inspectors, so it’s seen by the third inspector.
In the same way, filter sets apply their filters in a par ticular order. The first filter applied can pass or discard a
packet before that packet ever reaches any of the other filters. If the first filter can neither pass nor discard the
packet (because it cannot match any criteria), the second filter has a chance to pass or reject it, and so on.
Because of this hierarchical structure, each filter is said to have a priority. The first filter has the highest priority,
and the last filter has the lowest priority.
packet
first
filter
match?
yes
pass or
discard?
to network
discard
(delete)
pass
no
to next
filter
send
Summary of Contents for D3100-I
Page 8: ...viii User s Reference Guide ...
Page 10: ...User s Reference Guide ...
Page 14: ...1 14 User s Reference Guide ...
Page 20: ...2 20 User s Reference Guide ...
Page 26: ...3 26 User s Reference Guide ...
Page 32: ...4 32 User s Reference Guide ...
Page 34: ...User s Reference Guide ...
Page 90: ...8 90 User s Reference Guide ...
Page 104: ...User s Reference Guide ...
Page 110: ...A 110 User s Reference Guide ...
Page 114: ...B 114 User s Reference Guide ...
Page 118: ...C 118 User s Reference Guide ...
Page 132: ...132 User s Reference Guide ...
Page 136: ...Index 136 ...
Page 138: ...138 User s Reference Guide ...