SANGFOR IAM v2.1 User Manual
83
Under the above configuration page, click the <Edit> button and the [Edit Firewall Rule
LAN<->DMZ] configuration page. Click the <Enable> button to enable this rule; or click the
<Add> button and the [Edit Firewall Rule LAN<->DMZ] configuration page pops up, as shown in
the following figure:
Firewall rules are to be matched from top to bottom. If a rule is matched, the rules below it
will not to be matched, therefore, please arrange the rules in needed order. Order arrangement
of the firewall rules cannot only be fulfilled through the [Firewall Rule List], but be
numbered by [Sequence Number] (in the above figure).
The Firewall defaults to deny the data packets if none of the firewall rules is matching, that is