Cisco Small Business Pro SA 520W Administration Manual page 131

Firewall Configuration
Firewall Rule Configuration Examples
Cisco SA 500 Series Security Appliances Administration Guide
Parameter
From Zone
To Zone
Service
Action
Source Hosts
From
To
Send to Local Server
(DNAT IP)
Blocking Outbound Traffic By Schedule and IP Address Range
Use Case: Block all weekend Internet usage if the request originates from a
specified range of IP addresses.
Solution: Set up a schedule called "Weekend" to define the time period when the
rule is in effect. Configure an outbound rule that applies to traffic from marketing
group, which has an IP address range of 10. 1 . 1 . 1 to 10. 1 . 1 . 1 00.
Parameter
From Zone
To Zone
Service
Action
Schedule
Source Hosts
From
Value
INSECURE (Dedicated WAN/Optional WAN)
Secure (LAN)
CU-SEEME:UDP
ALLOW always
Address Range
132. 1 77.88.2
134. 1 77.88.254
192. 1 68.75. 1 1
(internal IP address)
Value
Secure (LAN)
INSECURE (Dedicated WAN/Optional
WAN)
HTTP
BLOCK by schedule
Weekend
Address Range
10. 1 . 1 . 1
5
131