Cisco Small Business Pro SA 520W Administration Manual page 123

Firewall Configuration
Configuring Firewall Rules to Control Inbound and Outbound Traffic
NOTE
STEP 1
STEP 2
STEP 3
STEP 4
Cisco SA 500 Series Security Appliances Administration Guide
In addition to firewall rules, there are two other methods for controlling access to
the Internet:
• You can allow access to approved websites. For more information, see
Configuring Approved URLs to Allow Access to Websites, page
• You can block URLs that contain specified keywords. For more information,
see Configuring Blocked URLs to Prevent Access to Websites,
page 141.
Click Firewall on the menu bar, and then click Firewall > IPv4 Rules or IPv6 Rules
in the navigation tree.
—OR—For IPv4 rules, you can use the Getting Started (Advanced) page. In the
Firewall and NAT Rules section, click Configure Firewall and NAT Rules.
The Firewall Rules page appears. Any existing rules appear in the List of Available
Firewall Rules table.
For IPv4 rules, you can view the list of available rules by zone. Choose the source
and destination from the From Zone and To Zone drop-down menus and click
Display Rules.
To add a rule, click Add.
Other options: Click the Edit button to edit an entry. To delete an entry, check the
box and then click Delete. To change the status of a rule, check the box and then
click Enable or Disable. To select all entries, check the box in the first column of
the table heading.
The IPv4 Firewall Rules page includes the option to move a rule up, move a rule
down, or move it to a specified location in the firewall rules list. For more
information, see Prioritizing Firewall Rules, page
If you click Add or Edit, the Firewall Rules Configuration page appears.
In the Firewall Rule Configuration area, enter the following information:
• From Zone: Chose the source of the traffic that is covered by this rule. For an
outbound rule, choose SECURE (LAN) if the traffic is coming from your LAN
users or choose DMZ if the traffic is coming from a server on your DMZ.
• To Zone: For an outbound rule, choose INSECURE (WAN) if the traffic is
going to the Internet, or choose DMZ if the traffic is going to a server on your
DMZ.
128.
5
140.
123