Aruba IAP-335 User Manual page 272

Table 58: Access Rule Configuration Parameters
Service
Category
Action
Destination
Log
Blacklist
Aruba Instant 6.5.0.0-4.3.0.0 | User Guide
Description
1. Select the Application Throttling check box.
2. Specify the downstream and upstream rates in Kbps.
Select any of following actions:
Select Allow to allow access to users based on the access rule.
l
Select Deny to deny access to users based on the access rule.
l
Select Destination-NAT to allow changes to destination IP address.
l
Select Source-NAT to allow changes to the source IP address.
l
The destination-NAT and source-NAT actions apply only to the network services rules.
Select a destination option for the access rules for network services, applications, and
application categories. You can allow or deny access to any the following destinations
based on your requirements.
to all destinations—Access is allowed or denied to all destinations.
l
to a particular server—Access is allowed or denied to a particular server. After
l
selecting this option, specify the IP address of the destination server.
except to a particular server—Access is allowed or denied to servers other than the
l
specified server. After selecting this option, specify the IP address of the destination
server.
to a network—Access is allowed or denied to a network. After selecting this option,
l
specify the IP address and netmask for the destination network.
except to a network—Access is allowed or denied to networks other than the
l
specified network. After selecting this option, specify the IP address and netmask of the
destination network.
to domain name—Access is allowed or denied to the specified domains. After
l
selecting this option, specify the domain name in the Domain Name text box.
to master IP—Access is allowed or denied to the master IP address.
l
Select this check box to create a log entry when this rule is triggered. Instant supports
firewall-based logging function. Firewall logs on the IAPs are generated as security logs.
Select the Blacklist check box to blacklist the client when this rule is triggered. The
blacklisting lasts for the duration specified in Auth failure blacklist time on the
Blacklisting tab of the Security window. For more information, see
page 176.
Blacklisting Clients on
Deep Packet Inspection and Application Visibility | 272