General Policy Settings - IBM TS3100 Setup, Operator, And Service Manual

Table 36. General Policy settings
Name of setting
Policy Name
Policy Type
Direction
Traffic Selector
Available values
Name of the policy
v Protect
v Bypass
v Discard
v Inbound
v Outbound
v Asynchronous
Comments
User definable name to describe the
policy
It defines the action that is taken by
the policy if the policy selector
matches the packet.
v Protect
The normal use of a policy. The
packet is processed with the
parameters and algorithms that are
defined in the policy.
v Bypass
The packet is forwarded to the
target without any modification.
Often used to allow special
message types to be transferred
without protection to avoid the
"chicken and egg" problem during
initiating a secured connection.
v Discard
The packet is discarded and not
forwarded to any target.
It defines for which direction of
communication the policy is usable.
Different algorithms or security
parameters can be used for each
direction.
v Inbound
Only arriving packets are
processed (if the other parameters
are also fit)
v Outbound
Only packets to send are processed
(if the other parameters are also fit)
v Asynchronous
Packets in both directions are
processed
The Traffic Selector is an important
part of a policy. The contents of the
Traffic Selector fields provide packet
detection to process according to the
chosen policy. Each part of the
selector must be fulfilled by the
packet to initiate the processing.
Operations
139