Planet BM-2101, Руководство пользователя

Страница: 186 / 278

Chapter 13
P
P
o
o
l
l
i
i
c
c
y
y
The BM-2101 can detect every packet pass by the devices , and to valuate if the
packets can fit the policy. When the packets can qualified by the policy , the BM-2101
will allow the packets to go through the policy. In other words , if the packets can not fit
the policy , then it will be blocked .
The policy parameter included the source address , destination address , service ,
schedule , authenticatoin user , VPN trunk , action, WAN port , traffic log , statistics ,
IDP , content blocking , anti-virus , Qos , MAX.concurrent sessions , quota per session
and quota per day . The MIS engineer can use these parameters to set the outgoing and
incoming service in data transmission by policy management.
How to use the Policy ?
The BM-2101 can divide the Policy into 6 function depends on the data packets in
different source address . The MIS engineer can easy to set the policy of source IP ,
source port , destination IP and destination port by data packets .
1. Outgoing
：
The source IP is in LAN and the destination IP is in WAN .The MIS
engineer can set the outgoing policy included the network packets and
services .
2. Incoming
：
The source IP is in WAN and the destination IP is in LAN ( For
example , the IP mapped and virtual server ) . The MIS engineer can set the
incoming policy included the network packets and services.
3. WAN To DMZ
：
The source IP is in WAN and the destination IP is in DMZ (For
example , the IP mapped and virtul server ) .The MIS engineer can set the
WAN To DMZ policy included the network packets and services .
１８５