Samsung Ubigate iBG3026 Configuration Manual page 275

For packets coming from untrusted to trusted side, firewall looks for a transit
inbound firewall policy in the trusted map. For packets coming from trusted to
untrusted side, firewall looks for a transit outbound firewall policy in the
trusted map. If the packet is originated from the firewall, then the firewall
looks for a self outbound firewall policy on the packet destined map. For self
packets going towards internet, firewall looks for the outbound self policies on
internet map. If the packet is destined to the firewall, then the firewall looks
for a self inbound firewall policy on the packet originated map. For self
packets going coming from internet, firewall looks for the inbound self
policies on internet map.
© SAMSUNG Electronics Co., Ltd.
Access Policy Database Lookup
Trusted Side
(corp)
Host-A
To Host-B
Host-A
To Firewall
Host-A
Firewall
To Host-A
Transit Polidies Self Policies
inbound outbound inbound outbound
Figure 23.3 Access policy database lookup
Ubigate iBG3026 Configuration Guide/Ed.00
Untrusted Side
(internet)
Host-A
To Host-B
Host-A
To Firewall
Firewall
To Host-A
Self Policies
inbound outbound
Policy Lookup
Session initiation
Host-B
235