For example, if
Dynamic Web Content Filtering
is to be enabled with an
IP Policy
object then the
associated
Service
object must have its
Protocol
property set to
HTTP
.
Application control is the one IP policy option which does not require the
Service
object to have
its
Protocol
property set since application control does not make use of an ALG.
Viewing the IP Rules Created by IP Policies
IP Policy
objects are implemented in the background using
IP Rule
objects. These background IP
rules cannot be viewed through the Web Interface. However, they can be viewed in the output
from the following CLI command:
gw-world:/> rules
Usually, the administrator never needs to be aware of the IP rules that are used to implement an
IP policy.
Example 3.35. Setting up a Policy to Allow Connections to a DMZ
In this example, new HTTP connections will be allowed from the internal
lan_net
network on the
lan
interface to the network
dmz_net
on the
dmz
interface.
Command-Line Interface
gw-world:/> add IPPolicy SourceInterface=lan
SourceNetwork=lan_net
DestinationInterface=dmz
DestinationNetwork=dmz_net
Service=http-all
Name=lan_to_dmz
Action=Allow
Web Interface
1.
Go to: Policies > Firewalling > Add > IP Policy
2.
Now enter:
•
Name: lan_to_dmz
•
Action: Allow
•
Source Interface: lan
•
Source Network: lan_net
•
Destination Interface: dmz
•
Destination Network: dmz_net
•
Service: http-all
3.
Select OK
Chapter 3: Fundamentals
247
Содержание NetDefendOS
Страница 30: ...Figure 1 3 Packet Flow Schematic Part III Chapter 1 NetDefendOS Overview 30 ...
Страница 32: ...Chapter 1 NetDefendOS Overview 32 ...
Страница 144: ...Chapter 2 Management and Maintenance 144 ...
Страница 220: ... Enable DHCP passthrough Enable L2 passthrough for non IP protocols 4 Click OK Chapter 3 Fundamentals 220 ...
Страница 267: ... SourceNetwork lannet DestinationInterface any DestinationNetwork all nets 4 Click OK Chapter 3 Fundamentals 267 ...
Страница 284: ...Chapter 3 Fundamentals 284 ...
Страница 360: ...The ospf command options are fully described in the separate NetDefendOS CLI Reference Guide Chapter 4 Routing 360 ...
Страница 392: ...Chapter 4 Routing 392 ...
Страница 396: ...Web Interface 1 Go to Network Ethernet If1 2 Select Enable DHCP 3 Click OK Chapter 5 DHCP Services 396 ...
Страница 419: ... Host 2001 DB8 1 MAC 00 90 12 13 14 15 5 Click OK Chapter 5 DHCP Services 419 ...
Страница 420: ...Chapter 5 DHCP Services 420 ...
Страница 424: ...2 Now enter Name lan_Access Action Expect Interface lan Network lannet 3 Click OK Chapter 6 Security Mechanisms 424 ...
Страница 573: ...Chapter 6 Security Mechanisms 573 ...
Страница 575: ...This section describes and provides examples of configuring NAT and SAT rules Chapter 7 Address Translation 575 ...
Страница 607: ...Chapter 7 Address Translation 607 ...
Страница 666: ...Chapter 8 User Authentication 666 ...
Страница 775: ...Chapter 9 VPN 775 ...
Страница 819: ...Chapter 10 Traffic Management 819 ...
Страница 842: ...Chapter 11 High Availability 842 ...
Страница 866: ...Default Enabled Chapter 13 Advanced Settings 866 ...
Страница 879: ...Chapter 13 Advanced Settings 879 ...