Cisco VPN 3000, Руководство пользователя

Страница: 279 / 502

Configuration | Policy Management | Traffic Management | Filters
13-29 VPN 3000 Concentrator Series User Guide
Configuring a filter involves two steps:
1 Configuring its basic parameters (name, default action, etc.) by clicking Add Filter , Modify Filter , or
Copy Filter , and
2 Assigning rules to a filter by clicking Assign Rules to Filter .
You apply filters to interfaces under Configuration | Interfaces , and these are the most important filters for
security since they govern all traffic through an interface. You also apply filters to groups and users
under Configuration | User Management , and thus govern tunneled traffic through an interface.
Caution: The Cisco-supplied default filters and rules are intended as templates that you should examine and
configure to fit your network and security needs. If incorrectly configured, they could present security
risks. You should also be especially careful about adding rules to the
Public (Default) filter, which allows
only tunneled and ICMP traffic.
Figure 13-13: Configuration | Policy Management | Traffic Management | Filters screen