Fortinet FortiGate 3000, Руководство администратора

Страница: 199 / 398

Firewall Policy
FortiGate-3000 Administration Guide 01-28006-0010-20041105
199
The policy list has the following icons and features.
Figure 80: Move to options
Policy options
Policy options are configurable when creating or editing a firewall policy.
Create new Select Create New to add a firewall policy.
ID The policy identifier. Policies are numbered in the order they are
added to the policy list.
Source The source address or address group to which the policy applies.
See “Address” on page 206 .
Dest The destination address or address group to which the policy
applies. “Address” on page 206 .
Schedule The schedule that controls when the policy should be active. See
“Schedule” on page 218 .
Service The service to which the policy applies. See “Service” on
page 210 .
Action The response to make when the policy matches a connection
attempt.
Enable Enable or disable the policy. Enabling the policy makes it
available for the firewall to match it to incoming connections.
source
->
destination (n) Policy list headings indicating the traffic to which the policy
applies. The list heading is in the format Source -> Destination ( n )
where n is the number of policies in the list.
The Delete and Edit/View icons.
The Insert Policy before icon. Add a new policy above the
corresponding policy (the New Policy screen appears).
The Move to icon. Move the corresponding policy before or after
another policy in the list.