Cisco QuickVPN - PC Administration Manual page 131

Firewall Configuration
Configuring Firewall Rules to Control Inbound and Outbound Traffic
STEP 4
Cisco SA 500 Series Security Appliances Administration Guide
For more information about schedules, see
NOTE
Firewall Rules, page
• Source Hosts: You can apply the rule to all users or you can specify users
by entering an IP address or address range.
- If you choose Single Address, enter an IP address in the From field.
- If you choose Address Range, enter the first address in the From field and
enter the last address in the To field.
• Destination Hosts (available only if the traffic flow is from DMZ to LAN): You
can apply the rule to all users or you can specify users by entering an IP
address or address range.
- If you choose Single Address, enter an IP address in the From field.
- If you choose Address Range, enter the first address in the From field and
enter the last address in the To field.
• Local Server: Shows the IP address of the local server (only applies to IPv4
Firewall rules.)
• Log: You can choose whether or not to log the packets for this rule. Click
Never if you do not want to log the packets, or click Always to log the
packets.
For a WAN-to-LAN or a WAN-to-DMZ rule, enter the following information in the
Destination NAT Settings area:
• Internal IP Address: Enter the IP address of the server that is hosting the
service.
• Enable Port Forwarding: Check the box to forward traffic to a particular
port.
• Translate Port Number: If you enabled port forwarding, enter the port
number that will be the destination for the forwarded traffic.
• External IP Address: Select one of the following options to specify the IP
address that is exposed to the public:
- Dedicated WAN: The public will connect to this service by using the IP
address that is associated with your WAN interface.
123.
5
Creating Schedules for a
131