Watchguard V10 User Manual page 195

Multi-tenant
Scheduling
Policies with multiple actions
You can combine one or more actions in a policy. For exam-
ple, suppose you created a VPN policy that permits two
server-farm sites to share data with one another. You might
also want to implement load balancing, so that the data is
distributed equally among several servers. The required
policy would focus on the two gateway appliances as
source and destination and then apply both an IPSec action
and a load-balancing action.
Not all actions can be combined. The following table shows
the combinations of actions that can be applied in a single
policy.
Firewall
Firewall na
IPSec YES
Virtual IP/ YES
a
NAT
Dynamic YES
NAT
Firebox Vclass User Guide
automatically dumps the excess traffic and protects
your systems from stalling or crashing.
You can route VLAN traffic through a Firebox
Vclass appliance, including inter-VLAN
forwarding, or you can establish a number of user
domains to virtually define restricted groups of
network tenants and then route traffic to and from
the members of that domain.
You can establish hours and days for specific
actions that your appliance will take with certain
data, while allowing other data to pass unimpeded
or unaffected.
IPSec Virtual
IP/NAT
YES YES
na YES
YES na
YES NO
About Security Policies
Dynamic Static
NAT NAT
YES YES
YES YES
NO NO
na NO
QoS
YES
YES
YES
YES
163