Firewall Rule Configuration Examples - Cisco Small Business Pro SA 520W Administration Manual

Firewall Configuration

Firewall Rule Configuration Examples

STEP 3
STEP 4
STEP 5
STEP 6
Firewall Rule Configuration Examples
Cisco SA 500 Series Security Appliances Administration Guide
For example: If you choose WAN and LAN from the Zone drop-down menus, only
the rules for the WAN to LAN security zones appear.
To reorder the rules, click Move.
The Move Firewall Rules page appears.
In the List of Available Firewall Rules table, check the box next the rule you want to
reorder and select one of the following:
• MoveUp: Moves the rule up one position.
• MoveDown: Moves the rule down one position.
• Move To: Moves the rule to a specified location. Enter the target index
number to move the selected rule to.
For example: A target index of 2 moves the rule to position 2 and moves the
other rules down to position 3 in the list.
When finished, you are returned to the IPv4 Firewall Rules page.
Verify that the rules were reordered by choosing the appropriate source and
destination the Zone drop-down menus and click Display Rules.
Allowing Inbound Traffic to a Web Server Using the WAN IP Address
Situation: You host a public web server on your DMZ. You want to allow inbound
HTTP requests from any outside IP address. The inbound traffic is addressed to
your WAN IP address but is directed to a web server.
Solution: Create an inbound rule as follows:
Parameter
From Zone
To Zone
Service
Action
Value
Insecure (WAN1)
DMZ
HTTP
ALLOW always
5
129