Firewall
Configuring the Firewall Access Rules to Control Inbound and Outbound Traffic
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
183
6
Configuring a Firewall Access Rule
STEP 1
Click
Firewall
-> ACL Rules ->
Rule
.
The ACL Rules window opens.
STEP 2
To add a new access rule, click
Add
.
After you click Add, the Rule - Add/Edit window opens.
STEP 3
Enter the following information:
•
Enable:
Click
On
to enable the access rule, or click
Off
to create only the
access rule.
•
From Zone:
Choose the source zone for the traffic that is covered by this
access rule. For example, choose
DMZ
if the traffic is coming from a server
on your DMZ.
•
To Zone:
Choose the destination zone for the traffic that is covered by this
access rule. For example, choose
WAN
if the traffic is going to the Internet.
NOTE
Only the existing zones are selectable. To create new zones, go to the
Networking -> Zone
page. For more information about zone
configurations, see
Configuring the Zones, page 127
•
Services:
Choose an existing service or group service that is covered by
this rule. If the service or group service you want is not in the list, choose
Create New Service
to create new service objects, or choose
Create New
Group
to create new group service objects. To maintain the service and
group service objects, go to the
Networking -> Service Management
page. See
.
•
Source Address:
Choose an existing address or group address as the
source address or network that is covered by this access rule.
•
Destination Address
: Choose an existing address or group address as the
destination address or network that is covered by this access rule.
If the address or group address you want is not in the list, choose
Create
New Address
to create new address objects, or choose
Create New Group
to create new group address objects.
To maintain the address and address
group objects, go to the
Networking -> Address Object Management
page. See
