Packet Filtering - McAfee SG310 Administration Manual

Firewall menu options

Packet filtering

From the Firewall menu, click Definitions > Interfaces tab. The Interfaces page appears.
1
Click New. The Interface Group page appears
2
Figure 164 Interfaces selections example
Enter LAN Interfaces in the Name field.
3
Select the Switch A and WIFI checkboxes.
4
Click Finish.
5
An action successful message is displayed, and the new interface group now appears in the Interfaces list
(Figure 165).
Figure 165 LAN Interfaces example
Packet filtering
The majority of firewall customization is typically accomplished by creating Packet Filter and NAT (Network
Address Translation) rules. Packet filter rules match network packets based on a combination of incoming
and outgoing interface, source and destination address, and destination port and protocol. Once a packet is
matched, it can be logged and allowed, disallowed (dropped), or rejected. No further processing is
performed on packets that are dropped, so even if a later rule would allow the packet, that rule is never
enacted. Packets that are accepted are passed along to Access Control or Incoming Access for further
processing. For further information about the actions performed on packets, see
McAfee UTM Firewall 4.0.4 Administration Guide
(Figure 164).
Packet filtering actions.
159