McAfee SG310 Administration Manual page 176

Firewall menu options
NAT
Creating an advanced port forwarding rule
The Advanced page allows additional configuration for a port forwarding rule. You can specify the incoming
interface and source address on the Advanced page; otherwise, a rule is applied to all WAN interfaces and
all source addresses are matched. You can also disable the automatically created packet filter rule and
manually create one that meets your specific requirements.
From the Firewall menu, click NAT. The Port Forwarding page appears.
1
If this is the first rule, click New. Otherwise, you can also click the add above or below icon to add the
2
rule in the location you want above or below an already defined rule. If you use the New button, the rule
is added to the bottom of the list. The Modify Port Forward page appears.
Click Advanced. The Advanced Port Forward page appears
3
Figure 180 Modify Port Forward (advanced)
[Optional] Enter a name for the rule in the Descriptive Name field.
4
Leave the Enable checkbox selected. To temporarily disable the rule, clear the checkbox.
5
[Optional, recommended] To create a corresponding packet filter rule to accept NATed packets, leave the
6
Create Packet Filter Rule checkbox selected. If you want to manually create a more restrictive filter
rule in the Packet Filter Rules page, clear the checkbox. See
This rule is applied to packets matching the criteria described by the entries in the Match packet
fields pane:
Select the interface that receives the request from the Incoming Interface list.
7
In the Source Address field, enter or select the address from which the request originated. You can
8
specify this (rather than allowing default to Any) to restrict access of the internal service from a only
specific remote location.
Select the destination address of the request from the Destination Address list, or click New to enter
9
the address. This is the address altered by the port forwarding process.
Select the packet protocol from the Protocol list. Available options are:
10
• TCP
• UDP
Enter the destination service port or ports of the request in the Ports field. Multiple public ports can be
11
forwarded to a single internal port.
176 McAfee UTM Firewall 4.0.4 Administration Guide
(Figure 180).
Creating a packet filter rule.