Check Point UTM-1 Edge User Manual page 351

Rule Description
Allow This rule type enables you to do the following:
•
Permit outgoing access from your internal network to a specific
service on the Internet.
Permit incoming access from the Internet to a specific service in
your internal network.
•
Assign traffic to a QoS class.
If Traffic Shaper is enabled for the direction of traffic specified in the
rule (incoming or outgoing), then Traffic Shaper will handle relevant
connections as specified in the bandwidth policy for the selected
QoS class. For example, if Traffic Shaper is enabled for outgoing
traffic, and you create an Allow rule associating all outgoing Web
traffic with the Urgent QoS class, then Traffic Shaper will handle
outgoing Web traffic as specified in the bandwidth policy for the
Urgent class.
For information on Traffic Shaper and QoS classes, see Using
Traffic Shaper.
Note: You cannot use an Allow rule to permit incoming traffic, if the network or
VPN uses Hide NAT. Use an "Allow and Forward" rule instead. However, you
can use Allow rules for static NAT IP addresses.
Block This rule type enables you to do the following:
•
Block outgoing access from your internal network to a specific
service on the Internet.
•
Block incoming access from the Internet to a specific service in your
internal network.
Chapter 12: Setting Your Security Policy
Using Rules
337