HP Jetdirect J7974E, Руководство администратора

Страница: 105 / 186

The items on the IPsec/Firewall policy pages are described below.
Table 5-1 IPsec Policy page
Item Description
Enable IPsec
or
Enable Firewall
Enter a check mark in the checkbox to enable your IPsec/Firewall policy. Clear this
checkbox to disable IPsec/Firewall operation.
If a rule is added, the policy will be enabled automatically.
IPsec/Firewall Rules An IPsec/Firewall policy consists of rules for processing IP packets. Up to ten rules may
be configured.
Each rule is defined by the following fields:
● An Enable checkbox indicates whether a configured rule is enabled or disabled
for the policy.
●
Address Template : Identifies the IP addresses for which the rule applies. You
may select among several predefined templates, or specify a custom template.
Click on an entry to its view configuration settings.
● Services Template : Identifies the services for which the rule applies. You may
select among several predefined templates, or specify a custom template. Click
on an entry to view its configuration settings.
CAUTION If all services are not specified, a security risk may exist.
Future networking applications that are deployed after the IPsec Policy is
in place may not be IPsec-protected unless the
All Services template is
used.
For example, installing a third-party Chai service plug-in, or upgrading
firmware for the printer or print server, may result in a new service that is
not covered by the IPsec policy, Policies should be revisited whenever
firmware is updated or a new Chai applet is installed.
●
Action : Identifies how to process the IP traffic that contains the addresses and
services specified.
For Firewall operation, the traffic will be allowed or dropped, depending on the
action specified by the user.
For IPsec operation, the traffic may be allowed without IPsec protection, dropped,
or IPsec-protected using the custom IPsec template specified by the user. Click
on the template name to view the IPsec configuration settings.
● Delete : Each rule contains a button to delete the rule from the list.
Add Rule
Delete Rule
The rules are configured through an IPsec wizard, which is run when you press Add
Rule .
To delete a rule, click Delete Rule
ENWW 95