Firewall Protection
186
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Enable Source MAC Filtering
The Source MAC Filter screen enables you to permit or block traffic coming from certain
known computers or devices.
By default, the source MAC address filter is disabled. All the t
raffic received from computers
with any MAC address is allowed. When the source MAC address filter is enabled,
depending on the selected policy, traffic is either permitted or blocked if it comes from any
computers or devices whose MAC addresses are listed in MAC Addresses table.
Note: For additional ways of restricting outbound traffic, see Outbound
Rules (Service Blocking) on page 133.
To enable MAC filtering and add MAC addresses to be permitted or blocked:
1. Select Security > Address
Filter. The Address Filter submenu tabs display, with the
Source MAC Filter screen in view. (The following figure shows one address in the MAC
Addresses table as an example.)
Figure 111.
2. In the MAC Filtering Enable section, select the Yes radio button.
3. In
the same section, from the Policy for MAC Addresses listed below drop-down list, select
one of the following options:
• Block and Permit
the rest. Traffic coming from all addresses in the MAC Addresses
table is blocked. Traffic from all other MAC addresses is permitted.
• Permit
and Block the rest. Traffic coming from all addresses in the MAC Addresses
table is permitted. Traffic from all other MAC addresses is blocked.