Managing the Access Policy
Quantum Spark 1500, 1600 and 1800 Appliance Series R80.20.40 Locally Managed Administration Guide | 160
To configure Access Policy rules manually:
Go to the
Access Policy
>
Policy
page.
In the
Access Policy
>
Blade Control
page:
n
When no manual rules are configured, you can click the
Firewall Policy
link to add manual rules to
the Firewall policy.
n
When manual rules are configured, it shows the number of rules that are added. Click
manual rules
to see them in the Access Policy.
Click
Servers
to see how many servers are defined in the appliance. If no servers are configured, click
Add
aserver
to add one. A server object is a defined IP address to which you can also define a specific access
policy and also incoming NAT rules if necessary. For example, Port forwarding NAT. Automatically
generated access rules to servers are created above the default policy rules and can be seen in the
Access
Policy
>
Firewall Policy
page. You can create exception rules for servers as well in the
Access Policy
>
Firewall Policy
page.
Application & URL Filtering
The Application & URL Filtering section lets you define how to handle applications and URL categories on
traffic from your organization to the Internet.
Application & URL Filtering are service based features and require Internet connectivity to download the
latest signature package for new applications and to contact the Check Point cloud for URL categorization.
This page lets you define the default policy for Application & URL Filtering control. It is recommended by
default to block browsing to security risk categories and applications. You can also configure additional
applications and categories to block by default according to your company's policy. In addition, you can also
select to limit bandwidth consuming applications for better bandwidth control.
In addition to the
On
and
Off
buttons, you can select the
URL Filtering Only
mode. When you select this
option, only URLs and custom applications defined by URLs are blocked. Predefined applications initially
installed on your computer or added with automatic updates are not blocked.
When you select the
URL Filtering Only
mode:
n
Rules that contain URLs are enforced. Any applications inside rules are not enforced.
n
Rules that contain custom URLs and custom applications are enforced.
n
Rules that contain application groups with both predefined applications and URLs are enforced only
for the URLs and custom applications. They are not enforced for the predefined applications.
n
Applications are not updated through the automatic updates.
