Radware DefensePro 6.02, Руководство пользователя

Страница: 198 / 339

DefensePro User Guide
Security Configuration
198
Document ID: RDWR-DP-V0602_UG1201
Configuring Black Lists
The Black List comprises the traffic that the device always blocks without inspection. You use the
Black List as policy exceptions for security policies.
Enabling and Disabling the Packet Trace Feature for Black List Rules
When the Packet Trace feature is enabled for Black Lists, the DefensePro device sends blacklisted
packets to the specified physical port.
Physical Ports The Physical Port class or physical port that the rule uses.
Values:
• A Physical Port class displayed in the Classes tab
• The physical ports on the device
• None
VLAN Tag The VLAN Tag class that the rule uses.
Values:
• A VLAN Tag class displayed in the Classes tab
• None
Protocol The protocol of the traffic that the rule uses.
Values:
• Any
• GRE
• ICMP
• ICMPv6
• IGMP
• SCTP
• TCP
• UDP
Default: Any
Direction The direction of the traffic to which the rule relates.
Values:
• One-directional—The protection applies to sessions originating
from sources to destinations that match the network definitions
of the policy.
• Bi-directional—The protection applies to sessions that match the
network definitions of the policy regardless of their direction.
Default: One-directional
Action
Action (Read-only) The action for a White List rule is always Bypass.
Table 102: White List Rule Parameters
Parameter Description