Table of Contents
Advertisement
Adding a new External To DMZ Policy:
Step 1: Click the New Entry button and the Add New Policy window will appear.
Step 2:
Source Address: Select names of the external networks from the drop down
list. The drop down list contains the names of all external networks defined in
the External section of the Address menu. To create a new source address,
please go to the Internal section under the Address menu.
Destination Address: Select the name of the DMZ network from the drop
down list. The drop down list contains the names of the DMZ network created
in the Address menu. It will also contain Mapped IP addresses from the Virtual
Server menu that were created for the DMZ network. To create a new
destination address, please go to the Virtual Server menu. (Please refer to
the sections entitled Address and Virtual Server for details)
Service: Select a service from drop down list. The drop down list will contain
services defined in the Custom or Group section under the Service menu.
These are services/application that are allowed to pass from the External
network to the DMZ network. Choose ANY for all services. To add or modify
these services, please go to the Service menu. (Please refer to the section
entitled Services for details)
Action: Select Permit or Deny from the drop down list to allow or reject the
packets travelling from the specified external network to the DMZ network.
Logging: Select Enable to enable flow monitoring.
Statistics: Select Enable to enable flow statistics.
Alarm Threshold: Set a maximum flow rate (in Kbytes/Sec). An alarm will be
send if a flow rate exceeds the specified value.
75
Advertisement
Table of Contents
