Port Triggering - Cisco Small Business Pro SA 520W Administration Manual

Firewall Configuration

Port Triggering

STEP 2
STEP 3
STEP 4
STEP 5
Port Triggering
Cisco SA 500 Series Security Appliances Administration Guide
In the MAC Filtering Enable area, enter the following information:
• Enable MAC Address Filtering?: Check the box to enable Source MAC
Address Filtering.
• Policy for MAC Addresses listed below: Choose one of the following
options:
- Block and permit the rest: All addresses in the MAC Addresses table
are blocked. All other addresses are allowed.
- Permit and block the rest: All addresses in the MAC Addresses table
are permitted. All other addresses are blocked.
- Click Apply to save your settings, or click Reset to revert to the saved
settings.
To add a MAC address to the table, click Add.
Other options: Click the Edit button to edit an entry. To delete an entry, check the
box and then click Delete. To select all entries, check the box in the first column of
the table heading.
After you click Add or Edit, the MAC Filtering Configuration page appears.
Enter the MAC Address.
Click Apply to save your settings, or click Reset to revert to the saved settings.
Port triggering opens an incoming port for a specified type of traffic on a defined
outgoing port. When a LAN device makes a connection on one of the defined
outgoing ports, the security appliance opens the specified incoming port to
support the exchange of data. When the exchange is completed, the ports are
closed.
Port triggering is more flexible than the static port forwarding that you can
configure in a firewall rule. Port triggering rules do not have to reference specific
LAN IP addresses or IP addresses ranges. In addition, the ports are not left open
when they are not in use, thereby providing a level of security that static port
forwarding does not offer.
5
135