Case 1: Deny Specific Source Ip Address - Host - Planet FGSW-2402VS User Manual

Deny Policy Sample
Case 1: Deny specific Source IP Address – Host
Purpose:
Verify positive and negative matches to a specific host IP address with a 32 bit mask, no matter the rule defined as
permit or deny. Check for Class A,B, and C address.
1. To set a Host as the target at this case.
2. Once the deny policy be applied, all IP packets from the target Host IP Address will be dropped.
3. No matter IP packets form the target be transmitted to Internet or Intranet within the same IP segment, they will
be dropped.
Case Design:
Action
Match
Source IP Address
Destination IP Address
Device Connection and Configuration:
Target
Host
ACL Policy Configuration:
DENY
IP
Host IP
192.168.1.1 / 255.255.255.255
ANY
ID Source Address
1 192.168.1.1
Stream
Destination Address
Any
Protocol
Any
- 78 -