Watchguard Firebox V10, User Manual

Page: 193 / 477

About Security Policies
Firebox Vclass User Guide 161
Policy actions
A policy action prompts the Firebox Vclass appliance to
perform certain management tasks with data that matches
qualifying traffic specifications. Your appliance can take
one or more of the following actions:
•
Protect your private networks from unauthorized
intrusions, if the traffic is external.
• Perform IP address swapping through dynamic and
static Network Address Translation.
• Encrypt and authenticate your data for secure
transmission through insecure networks.
• Enable various types of load balancing for designated
servers.
• Provide various types of network address translation
for internal networks.
• Apply Quality of Service (QoS) controls to qualifying
data traffic.
You can often combine several actions in the same policy,
as described in “Policies with multiple actions” on
page 163.
Types of policies
You can use Vcontroller to create as few or as many policies
as are needed by your particular network, with each policy
applying one or more compatible actions to qualifying traf-
fic. The range of policies includes the following:
Firewall
Firewall policies block unwanted traffic (including
hacker attacks) while permitting valid traffic to
proceed to a destination inside your network. You
can start with the default firewall policy that blocks
every type of traffic, and then insert other policies
that permit access by certain types of traffic to
specific network destinations.