Samsung Ubigate iBG3026, Configuration Manual

Page: 273 / 718

Ubigate iBG3026 Configuration Guide/Ed.00
© SAMSUNG Electronics Co., Ltd.
233
Figure 23.1 Virtual Firewall
For firewall to kick in, the IP interfaces need to be registered with security
(maps/ virtual firewall). It is necessary that at least one interface be registered
for untrusted side(internet) and one for trusted side. Then, any interface in the
router which can be a source/destination for traffic to/from the untrusted
interface MUST be registered with security.
Typical Firewall Configuration (Three Legged Firewall
Network)
A small firm has divided its corporate network into two security zones.
1.
corp(private network of the firm)
2.
dmz(web and mail servers exposed to internet)
Firewal
Corp
Firewall
dmz
Firewall
internet
Firewall
Inciming Policy
Database
Outing Policy
Database
Inciming Policy
Database
Outing Policy
Database
Inciming Policy
Database
Outing Policy
Database
Transit
traffic
policies
Self
traffic
policies
Transit
traffic
policies
Self
traffic
policies
Transit
traffic
policies
Self
traffic
policies
Transit
traffic
policies
Self
traffic
policies
Transit
traffic
policies
Self
traffic
policies
Transit
traffic
policies
Self
traffic
policies