Resource Groups are the core of the Bandura Cyber TIG’s packet filtering system. The Bandura
Cyber TIG examines Resource Groups to determine which internet packets to drop or transmit.
Resource Groups determine what internet services you will offer on your network, and what kind
of services your local users can access on the outside.
One or more Resource comprise a Resource Group, and each Resource is the internet address
of one of your local computers or networks. If the Bandura Cyber TIG receives traffic for a
computer listed in a Resource, then it will allow traffic according to the associated Resource
Group. Each Resource includes a protocol and port or range or ports, so you can restrict which
services that a computer will offer to the internet, or you can specify which outside services a
particular computer can use.
If a computer is found in a Resource, then the Bandura Cyber TIG will allow communications
based on the Resource Group’s restrictions. If a computer is not included in any Resources, it
will follow the restrictions found in one of the DEFAULT Resource Groups.
There are two kinds of Resource Groups:
● Inbound
Resource Groups determine the kind of internet traffic allowed into your
network. Each inbound rule shows a particular computer and service that will be visible
to the internet.
● Outbound
Resource Groups determine how your local computers can access the
internet. Each inbound rule shows which particular outside internet service a computer
can access.
A Bandura Cyber TIG has two default Resource Groups, DEFAULT_INBOUND and
DEFAULT_OUTBOUND, which allow all traffic to and from the internet. You may edit these
groups policies, but they cannot be deleted. You can create your own comprehensive Resource
Groups to implement your security policy, and any computer not found in one of your custom
Resource Groups will be processed by one of the DEFAULT groups.
25
