Samsung Ubigate iBG3026, Configuration Manual

Page: 274 / 718

CHAPTER 23. Firewall NAT
234
© SAMSUNG Electronics Co., Ltd.
Figure 23.2 Three Legged Firewall Network
Access Policy Database
Access Policy Database is firewall’s central database, commonly referred as
policy database. This database makes use of all the other databases in firewall
and enables in deciding whether a datagram needs to be allowed or denied and
other actions associated to processing.
A policy is nothing but a rule that defines from host A to host B what action
needs to be taken. Every time a new connection comes from host A to host B,
this policy will be referred and the corresponding action will be taken.
This policy is available on network basis and within that direction. Currently
supported policy categories are
Outbound: Policies that govern traffic originated from one map to the
external world.
Inbound-Policies that govern traffic bound to map from the external world.
internet
PAT
Reverse
NAT
Wan interface
ethernet 0/2
interface
FIREWALL ethernet 0/4
interface
corp dmz
Host1 Host3
Host2
Web-server Mail-server