Table of Contents
Advertisement
Chapter 6 Configuration Basics
To-ISG50 firewall rules control access to the ISG50. Configure to-ISG50 firewall rules for remote
management. By default, the firewall only allows management connections from the LAN or WAN
zone.
MENU ITEM(S)
PREREQUISITES
Example: Suppose you have a SIP proxy server connected to the DMZ zone for VoIP calls. You
could configure a firewall rule to allow VoIP sessions from the SIP proxy server on DMZ to the LAN
so VoIP users on the LAN can receive calls.
Create a VoIP service object for UDP port 5060 traffic (Configuration > Object > Service).
1
Create an address object for the VoIP server (Configuration > Object > Address).
2
Click Configuration > Firewall to go to the firewall configuration.
3
Select from the DMZ zone to the LAN1 zone, and add a firewall rule using the items you have
4
configured.
• You don't need to specify the schedule or the user.
• In the Source field, select the address object of the VoIP server.
• You don't need to specify the destination address.
• Leave the Access field set to Allow and the Log field set to No.
Note: The ISG50 checks the firewall rules in order. Make sure each rule is in the correct
place in the sequence.
6.6.14 IPSec VPN
Use IPSec VPN to provide secure communication between two sites over the Internet or any
insecure network that uses TCP/IP for communication. The ISG50 also offers hub-and-spoke VPN.
MENU ITEM(S)
PREREQUISITES
WHERE USED
Example: See
6.6.15 Bandwidth Management
Use bandwidth management (BWM) to configure a BWM rule for a specific IP address, destination
port or IP range and specify allowed amounts of bandwidth and priorities.
MENU ITEM(S)
PREREQUISITES
102
Configuration > Firewall
Zones, schedules, users, user groups, addresses (source, destination), address groups
(source, destination), services, service groups
Configuration > VPN > IPSec VPN; you can also use the Quick Setup VPN Setup
wizard.
Interfaces, certificates (authentication), authentication methods (extended
authentication), addresses (local network, remote network, NAT), to-ISG50 firewall,
firewall
Policy routes, zones
Chapter 7 on page
107.
Configuration > BWM
Zones
ISG50 User's Guide
Advertisement
Table of Contents
Troubleshooting
