Sangfor IAM 2.1, Руководство пользователя, Страница: 153 / 319

SANGFOR IAM v2.1 User Manual
152
Having completed configuring this page, you have to click the <OK> button to save the settings.

The related reminder pages can be defined and modified in [Advanced] > [Page
Customization] page.

In some rule modules (such as [Access Control], [Web Filter], etc.), there is a [Default Action]
and an option [If several policies are associated, adopt the default action of the next policy
and continue matching downwards]. If you DO NOT check the latter, the access control
policy will apply the [Default Action] of the current control policy, instead of having the data
packets continue to match the rules of the access control policies followed.

In other rule modules, it takes the first rule as the final when matching the access control
policy. These rule modules include [Access Control] > [Proxy Control], [SSL Management],
[Email Filter], [Application Audit], [Flow/Time Statistics] and [Risk Ident].

Generally speaking, the rules of a policy are matched from top to bottom. A rule will take
effect once it is matched, and the next rule of the same type will not be matched once again.
For this reason, it is recommended that the more detailed rules are the upper ones while the
general rules are at the bottom of the rule list. If the detailed rules are involved in the general
rules, logic error of rules being matched will occur. Please DO arrange the rules in a right
order.