Samsung Ubigate iBG3026, Руководство по настройке

Страница: 275 / 718

Ubigate iBG3026 Configuration Guide/Ed.00
© SAMSUNG Electronics Co., Ltd.
235
Figure 23.3 Access policy database lookup
For packets coming from untrusted to trusted side, firewall looks for a transit
inbound firewall policy in the trusted map. For packets coming from trusted to
untrusted side, firewall looks for a transit outbound firewall policy in the
trusted map. If the packet is originated from the firewall, then the firewall
looks for a self outbound firewall policy on the packet destined map. For self
packets going towards internet, firewall looks for the outbound self policies on
internet map. If the packet is destined to the firewall, then the firewall looks
for a self inbound firewall policy on the packet originated map. For self
packets going coming from internet, firewall looks for the inbound self
policies on internet map.
Access Policy Database Lookup
Policy Lookup
Session initiation
Trusted Side
(corp)
Untrusted Side
(internet)
Host-A
To Host-B
Host-A
To Firewall
Firewall
To Host-A
Host-A
Host-B
Transit Polidies Self Policies Self Policies
inbound outbound inbound outbound inbound outbound
FI
R
E
W
A
LL
Host-A
To Host-B
Host-A
To Firewall
Firewall
To Host-A