Firewall Protection
137
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Table 33. Inbound rules overview
Setting Description Inbound Rules
Service The service or application to be covered by this rule. If the
service or
application does not display in the list, you need to
define it using the Services screen (see Add Customized
Services on p
age 172).
All rules
Action The action for outgoing connections covered by this rule:
• BLOCK always
• BLOCK by schedule, otherwise allow
• ALLOW always
• ALLOW by schedule, otherwise block
Note: Any i
nbound traffic that is not blocked by rules you create
is allowed by the default rule.
All rules
Select Schedule The time schedule (that is, Schedule1, Schedule2, or
Sch
edule3) that is used by this rule.
• This drop-down list is activated only when BLOCK by
sch
edule, otherwise allow or ALLOW by schedule, otherwise
block is selected as the action.
• Use the Schedule screen to configure the time schedules (see
Set a Schedule to Block or Allow Specific Traffic on p
age 185).
All rules when BLOCK
by schedule,
otherwise allow or
ALLOW by schedule,
otherwise block is
selected as the action
Send to LAN Server The LAN server address determine
s which computer on your
network is hosting this service rule. (You can also translate this
address to a port number.) The options are:
• Single address. En
ter the required address in the Start field to
apply the rule to a single device on your LAN.
• Ad
dress range. Enter the required addresses in the Start and
Finish fields to apply the rule to a range of devices.
IPv4 LAN WAN rules
Send to DMZ Server The DMZ server address determines which computer on your
network is
hosting this service rule. (You can also translate this
address to a port number.)
IPv4 DMZ WAN rules
Translate to Port
Number
If the LAN server or DMZ server that
is hosting the service is
using a port other than the default port for the service, you can
select this setting and specify a port number. If the service is
using the default port, you do not need to select this setting.
IPv4 LAN WAN rules
IPv4 DMZ WAN rules
WAN Destination IP
Ad
dress
The setting that determines the destination IP address applicable
to incoming traffic. This is the public IP address that maps to the
internal LAN server.
This can be either the address of the WAN interface or another
publ
ic IP address.
You also have the option to enter an address range. Enter the
re
quired addresses in the Start and Finish fields to apply the rule
to a range of devices.
IPv4 LAN WAN rules
IPv4 DMZ WAN rules