Filter
Top Products
Firewall Protection
147
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
3. Enter the settings as explained in Table 33 on page 137. In addition to selections from the
Service, Action, and Log drop-down lists, you need to make selections from the following
drop-down
lists:
• LA
N Users
• W
AN Users
Unless your selection from the Action drop-down list is BLOCK always, you also need to
m
ake a selection from the following drop-down list:
• Select
Schedule
4. Click App
ly to save your changes. The new rule is now added to the Inbound Services
table.
Configure DMZ WAN Rules
• Create DMZ WAN Outbound Service Rules
• Create LAN WAN Inbound Service Rules
The firewall rules for traffic between the DMZ and the Internet are configured on the DMZ
W
AN Rules screen. The default outbound policy is to block all traffic from and to the Internet.
You can then apply firewall rules to allow specific types of traffic either going out from the
DMZ to the Internet (outbound) or coming in from the Internet to the DMZ (inbound).
There is no drop-down list that lets you set the
default outbound policy as there is on the LAN
WAN Rules screen. You can change the default outbound policy by enabling all outbound
traffic and then blocking only specific services from passing through the VPN firewall. You do
so by adding outbound services rules (see Create DMZ WAN Outbound Service Rules on
page 149).
Note: Inbound rules on the LAN WAN Rules screen take precedence over
inbound rules on the DMZ WAN Rules screen. When an inbound
packet matches an inbound rule on the LAN WAN Rules screen, the
packet is not matched against the inbound rules on the DMZ WAN
Rules screen.
To access the DMZ WAN Rules screen for IPv4 or to change existing IPv4 rules:
Select Security > Fi
rewall > DMZ WAN Rules. In the upper right of the screen, the IPv4
radio button is selected by default. The DMZ WAN Rules screen displays the IPv4 settings.
(The following figure contains examples.)