Table of Contents
Advertisement
5.8 Advanced Filtering
Advanced filtering is designed to allow comprehensive control over the fire-
wall's behavior. You can define specific input and output rules, control the
order of logically similar sets of rules and make a distinction between rules
that apply to WAN and LAN devices.
To access the Advanced Filtering screen, select the Advanced Filtering tab. The
Advanced Filtering screen will appear (see figure 5.17).
You can configure two sets of rules, Input rules and Output rules. Each set of
rules is comprised of three subsets: Initial rules, Network devices rules and
Final rules. These subsets determine the sequence by which the rules will be
applied. Following is a description of the set ordering for inbound and out-
bound packets.
Inbound packets – Input rule sets
• Initial rules.
• All rules defined for the network device on which the packet is.
• Local servers rules from the Local servers tab in the security screen.
• Rules to accept all the packets on a device in case the firewall check box
Internet connection firewall in the connection settings screen is unchecked.
• Remote administration rules from the Remote administration tab.
• DMZ host rules from the DMZ host tab.
• Final rules.
Outbound packets – Output rules sets
Figure 5.17: Advanced Filtering
122
Advertisement
Table of Contents
