Freedom9 freeGuard Slim 100, Руководство пользователя

Страница: 86 / 170

A D V A N C E D P O L I C Y C O N F I G U R A T I O N
6
6-2
User Guide
Figure 6-1 displays the use of security policies:
Figure 6-1 Security Policies
About Security Policy Types
You can configure three types of policies for the appliance as described in the following sections:
• Interzone Policy. See Configuring Interzone Policies .
• Global Policies. See Configuring Global Policies .
Configuring Interzone Policies
An interzone policy controls traffic between zones. These policies can allow, deny, or reject traffic
that is to pass from one zone and destined for another. For example, in Figure 6-2 , the
appliance is configured with a policy that allows HTTP traffic initiated from Host A in the
trust zone to Server B in the untrust zone using the following command:
set policy from trust to untrust Host_A Server_B http permit
save
If Server B initiates an HTTP connection, the appliance drops the packet, since
no configured policy allows any HTTP requests from the untrust zone to the trust zone.
Figure 6-2 Interzone Policy