Network; Firewall Policy - Cisco OL-4015-08 User Manual

Chapter 5 Create Firewall
Step 1
Step 2
Step 3
Step 4
Step 5
Step 6
Step 7
How Do I Permit Specific Traffic onto My Network if I Don't Have
a DMZ Network?
Step 1
OL-4015-08
If you are at the Inspection Rules window, and you have clicked Java List, click
the button to the right of the Number field and click Create a new rule (ACL)
and select. The Add a Rule window opens.
If you are at the Access Rules window, click Add to open the Add a Rule window.
From the Add a Rule window, create a standard access rule that permits traffic
from the addresses you trust. For example, if you wanted to permit Java applets
from hosts 10.22.55.3, and 172.55.66.1, you could create the following access
rule entries in the Add a Rule window:
permit host 10.22.55.3
permit host 172.55.66.1
You can provide descriptions for the entries and a description for the rule.
You do not need to associate the rule with the interface to which you are applying
the inspection rule.
Click OK in the Add a Rule window.
If you started this procedure from the Inspection Rules window, then click OK in
the Java List window. You do not need to complete Step 5 and Step 6.
If you started this procedure in the Access Rules window, go to the Inspection
Rules window and select the inspection rule you want to create a Java list for, and
click Edit.
Check http in the Protocols column, and click Java List.
In the Java List Number field, enter the number of the access list that you created.
Click OK.
The Firewall wizard, lets you specify the traffic that you want to allow onto the
DMZ. If you do not have a DMZ network, you can still permit specified types of
outside traffic onto your network, using the Firewall Policy feature.
Configure a firewall using the Firewall wizard.
Cisco Router and Security Device Manager Version 2.2 User's Guide
How Do I...
5-21