82
FWX120 Operation Manual
4
Enhancing security
Adding a policy
In the “Configure and view the status of policy
filter” screen of the interface for which you want to
set a policy, create a policy (up to 256 policies for
each policy set).
NOTE
• Policies are sequentially processed from the top
of the policy list. The product does not allow the
types of connections that are not registered with the
policy. Therefore, you must create a policy to allow
all connections at the end of the list.
• However, if no policy is created at all, the product
allows all connections.
Tip
When adding a policy, you can also specify a set of
interfaces, addresses, and services as a group. For
more details, refer to “Managing interfaces, addresses,
and services in a group” (page 85).
For more details on the settings, click “Help” on the
setup screen and refer to the description displayed.
To open the “Configure policy filter” screen
From “Basic configuration page”, click the buttons
on the setup screen in the following order:
“Advanced settings” in the top page
“Configure” in “Configure policy filter”
“Execute” of the interface for which you want to
add a policy
(Click “Execute” of “Configure and view status
of IPv4 policy filter” if IPv4 addresses are used
for connection, or “Execute” of “Configure and
view status of IPv6 policy filter” if IPv6 addresses
are used.)
Selecting a policy set in which you want to set
a policy in the “Detail of policy set” section and
then clicking “Add”