Customizing The Firewall - Colubris Networks CN3000 Administrator's Manual

Chapter 2 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - How it works - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Chapter 2
Preset firewall
The easiest way to make use of the firewall is to use one of the preset settings. Three
levels of security are provided: high, medium, and low.
Custom Firewall
If you have specific security requirements, you may want to create a custom firewall.
This enables you to target specific protocols or ports.
Customizing the To customize the firewall, you define one or more rules. A rule lets you target a specific
type of data. If the CN3000 finds data that matches the rule, the rule is triggered, and
firewall
the data is rejected/accepted by the firewall.
Rules operate on IP datagrams (sometimes also called packets). Datagrams are the
individual packages of data that travel on an IP network. Each datagram contains
addressing and control information along with the data it is transporting. The firewall
analyses the addressing and control information to apply the rules you define.
The CN3000 applies the firewall rules in the order that they appear in the list. An
intelligent mechanism automatically adds the new rules to the list based on their scope.
Rules that target a large amount of data are added at the bottom. Rules that target
specific datagram attributes are added at the top.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 44 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -