Access Control For Interfaces On The Procurve Secure Router - HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual

Access Control for Interfaces on the
ProCurve Secure Router
In addition to blocking known cyber attacks with its stateful-inspection
firewall, the ProCurve Secure Router OS can filter both inbound and outbound
traffic, enabling you to control the traffic that enters and exits your corporate
network. You can filter traffic based on specific types of criteria:
source IP address
source and destination IP addresses
IP protocols
UDP and TCP port numbers
For example, you can block certain types of traffic, such as FTP or Telnet
traffic, from entering your corporate network, or you can permit traffic from
only certain IP addresses. You can also limit WAN traffic to certain network
segments on your internal network. This granularity allows you to configure
the router to enforce your company's security guidelines—no matter what
those guidelines are.
Before you begin to configure access controls on the router, you should
evaluate your security guidelines and determine the type of traffic that you
want to allow or discard on each interface. Then when you begin to configure
your access policies, you will not mistakenly block traffic that should be
permitted to enter an interface, and you will not allow traffic that could be a
security risk to your company.
You can use Table 5-1 to begin the process of evaluating traffic that is entering
and exiting each interface. A general example is provided for you, illustrating
the process of determining the traffic that users need to transmit and the traffic
that could create a security risk. The more detailed you are in evaluating
traffic, the more equipped you are to apply access controls on each interface.
Applying Access Control to Router Interfaces

Access Control for Interfaces on the ProCurve Secure Router

5-3