Watchguard Firebox V10, Руководство пользователя

Страница: 218 / 477

CHAPTER 8: About Security Policies
186 Vcontroller
1 (Public)
Also considered the “external” interface. This
interface receives traffic originating from external
networks, such as the Internet.
2 (DMZ)
Also considered an “optional” interface. This
interface receives traffic originating from both
external networks as well as your internal
networks. This interface is not available on the V10
or V100 models.
3 (DMZ2)
Also considered an “optional” interface. This
interface receives traffic originating from both
external networks as well as your internal
networks. This interface is not available on the V10
or V100 models.
Internal
The traffic originates from within the appliance
itself. For example, you would use this option if
you created a policy that permits RADIUS query
traffic to go to a VLAN network.
Using Tenants
Using Vcontroller, you can create policies that direct traffic
in a multi-tenant network environment. Generally used in
a service provider environment, a customer’s tenant assets
are segregated into separate Virtual LANs (VLANs). This
provides a secured environment for tenants because all
network traffic between different VLANs is separated by
VLAN switches.
All Vclass security appliances support IEEE 802.1q VLAN
packets, which allows a network administrator to create
separate policies for each tenant using a single shared secu-