Freedom9 freeGuard Slim 100, Руководство пользователя

Страница: 93 / 170

. . . . .
A D V A N C E D P O L I C Y C O N F I G U R A T I O N
User Guide
6-9
set alert conn-bandwidth name cbr-webserver threshold 200 kbps minute action
log once
set policy id 3 untrust to trust any any smtp permit alert cbr-webserver
save
See the CLI Guide for more information about the set alert command.
Configuring Address Objects
Before you can configure any policies to deny or permit access to or from a host or network, you
must create address objects and assign them to a zone. These objects can be a single host, a
subnet or a group of multiple address objects.
This section describes how to create, modify and delete address objects. The following topics are
included in this section:
• Creating Address Objects
• Deleting Address Objects
• Modifying Address Objects
• Creating Address Groups
• Adding Objects to an Address Group
• Deleting Address Groups
• Adding Objects to an Address Group
Creating Address Objects
All address objects bind to a security zone specified during creation.
Use the
set address command to create host objects or subnet objects which are defined by an
IP address and subnet mask:
set address {zone} {name_str} {ip_addr/mask}
[NOTE]
The pre-defined address object any refers to all hosts in that zone.
Example: Creating an Address Object
Figure 6-4 Address Objects