Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 601 / 861

600 Field descriptions
Policy field descriptions
Rule Properties—Description tab
Optionally, provides an extended description. This information is useful to help track changes or it can
be used as criteria for searches.
The maximum length is 20,000 alphanumeric characters.
Packet Filters
Packet filters let you discard packets that should not be forwarded or serviced locally. A well
constructed filter reduces a significant portion of undesired traffic, freeing up valuable resources to
address legitimate connections. Packet filters are order-dependent and use different logic from
authorization rules, which are based on best fit.
Packet Filter Properties—General tab
The filters and filter groups you create specify an allow or a deny action and an ordered set of match
criteria.
A filter consists of at least one instance of a protocol and direction, matched to a specific pair of
network entities. All filters are characterized as A -> B and B -> A, where the letters A and B stand for
the network entities. The direction of the arrow specifies which entity can initiate the connection.
Associated tasks
The task that you can perform with this tab is:
■
“Creating a packet filter” on page 290
Table D-32 Packet Filter Properties—General tab
Field Description
Filter Name A unique name for the filter.
The maximum length is 256 characters.
Allowed characters are a-z, A-Z, numerals, periods (.), dashes (-), and underscores (_).
Do not include spaces in the name. The characters @,!,#,$,%,^,&,*,<,> and other reserved
characters are also invalid.
Action
■
Allow
Lets the filter pass traffic. The default is Allow.
■
Deny
The traffic is not allowed to pass.
Entity A Displays a list of network entities to serve as entity A for this filter.
Entity B Displays a list of network entities to serve as entity B for this filter.
Caption An optional, brief description of the filter.
The maximum length is 128 characters.
For longer descriptions, use the Description tab.