Firewall Model - Alcatel AST570 User Manual

17.2 Firewall Model

AST570 Firewall Model
AST570 Firewall
modules
3EC 17766 AAAA TCZZA Ed. 04
The following figure shows a model of the AST570 Firewall:
(1)
Input
Static NA(P)T
Module
The following modules can be identified (See Firewall model):
Router Module
"
This module, which has nothing to do with the AST570 IP
router, is responsible for the traffic within" the AST570
Firewall, i.e. it routes the packets towards the Sink PIP or
Forward PIP .
Forward Module
"
This module is responsible for forwarding the packets toward
the output.
Static/Dynamic NA(P)T Modules
"
These modules are responsible for the translation of IP
addresses, in case NA(PT) is used.
17 Security Services - Firewalling
Sink
Source
Forward
(3)
Forward
Router
Module
Module
(2)
Output
Dynamic NA(P)T
Module
219 / 300