3Com 3CR990 Administration Manual page 10

1 Planning and Overview
4
Management
console
Internet
Corporate
firewall
EFW allows an administrator to specify policies for EFW devices using the Management
Console. A policy is a set of security criteria enforced by an EFW device. A policy comprises
various settings and an ordered list of rules, called an access control list (ACL), that
determine what actions take place and what events are audited for any EFW device
associated with that policy.
A rule consists of various parameters that determine the characteristics for which
incoming and outgoing packets are screened, and specifies what action is taken if a
match occurs. For more detailed information on policies and rules, see Chapter 4,
"Managing Policies."
A device set is a group of EFW devices (3CR990 NICs) that enforce a specific policy. Each
device set in the EFW system must have a policy assigned to it. A single policy may be
assigned to more than one device set. For more detailed information on device sets, see
Chapter 3, "Managing EFW Devices Using the Policy Servers."
Server
Server
device
EFW
device
EFW
device
EFW
device
Policy
server
EFW
device
Remote
client
Server
EFW
device
EFW
EFW
device
EFW
device
Workstation
EFW
device Workstation
Workstation