McAfee SG310 Administration Manual page 150

Firewall menu options
Controlling packet traffic
Figure 155 UTM Firewall Packet Flow
Rate limiting – All packets are subject to packet flood rate limiting if it is enabled in Connection tracking.
For details, see Configuring connection tracking.
NAT – The destination IP addresses and ports of incoming packets are modified by the UTM Firewall
appliance. See About port forwarding.
Packet filtering – Traffic is then subjected to packet filtering. See Packet filtering. Also, if rate limiting on
a rule is enabled, a second rate limiting is applied. See Rate limiting a packet filter rule.
After packet filtering rules are applied, packets are directed either to Incoming Access or Access Control.
150 McAfee UTM Firewall 4.0.4 Administration Guide