Aruba IAP-335 User Manual page 192

Table 40: Inbound Firewall Rule Configuration Parameters
Parameter
Action
Service
Source
Destination
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Description
Select any of following actions:
Select Allow to allow to access users based on the access rule.
l
Select Deny to deny access to users based on the access rule.
l
Select Destination-NAT to allow making changes to the destination IP address.
l
Select Source-NAT to allow making changes to the source IP address.
l
The destination-NAT and source-NAT actions apply only to the network services rules.
Select a service from the list of available services. You can allow or deny access to any or
all of the services based on your requirement:
any—Access is allowed or denied to all services.
l
custom—Available options are TCP, UDP, and Other. If you select the TCP or UDP
l
options, enter appropriate port numbers. If the Other option is selected, ensure that an
appropriate ID is entered.
Select any of the following options:
from all sources—Traffic from all sources is either allowed, denied, or the IP address
l
is translated at the source or the destination as defined in the rule.
from a host—Traffic from a particular host is either allowed, denied, or the IP address
l
is translated at the source or the destination as defined in the rule. After selecting this
option, specify the IP address of the host.
from a network—Traffic from a particular network is either allowed, denied, or the IP
l
address is translated at the source or the destination as defined in the rule. After
selecting this option, specify the IP address and netmask of the source network.
Select a destination option for the access rules for network services, applications, and
application categories. You can allow or deny access to any the following destinations
based on your requirements.
to all destinations—Traffic for all destinations is allowed, denied, or the IP address is
l
translated at the source or the destination as defined in the rule.
to a particular server—Traffic to a specific server is allowed, denied, or the IP address
l
is translated at the source or the destination as defined in the rule. After selecting this
option, specify the IP address of the destination server.
except to a particular server—Access is allowed or denied to servers other than the
l
specified server. After selecting this option, specify the IP address of the destination
server.
to a network—Traffic to the specified network is allowed, denied, or the IP address is
l
translated at the source or the destination as defined in the rule. After selecting this
option, specify the IP address and netmask for the destination network.
except to a network—Access is allowed or denied to networks other than the
l
specified network. After selecting this option, specify the IP address and netmask of the
destination network.
to domain name—Traffic to the specified domain is allowed, denied, or the IP address
l
is translated at the source or the destination as defined in the rule. After selecting this
option, specify the domain name in the Domain Name text box.
Roles and Policies | 192