Filter
Top Products
ProSecure Unified Threat Management (UTM) Appliance Reference Manual
5-8 Firewall Protection
v1.0, January 2010
.
Table 5-3. Inbound Rules Overview
Setting Description (or Subfield and Description)
Service The service or application to be covered by this rule. If the service or application does
not appear in the list, you must define it using the Services menu (see “Adding
Customized Services” on page 5-32).
Action (Filter) The action for outgoing connections covered by this rule:
• BLOCK always.
• BLOCK by schedule, otherwise allow.
• ALLOW always.
• ALLOW by schedule, otherwise block.
Note: Any inbound traffic that is not blocked by rules you create is allowed by the
default rule.
Select Schedule The time schedule (that is, Schedule1, Schedule2, or Schedule3) that is used by this
rule.
• This pull-down menu is activated only when “BLOCK by schedule, otherwise allow”
or “ALLOW by schedule, otherwise block” is selected as the Action.
• Use the schedule screen to configure the time schedules (see “Setting a Schedule
to Block or Allow Specific Traffic” on page 5-41).
Send to LAN Server The LAN server address determines which computer on your network is hosting this
service rule. (You can also translate this address to a port number.)
Send to DMZ Server The DMZ server address determines which computer on your network is hosting this
service rule. (You can also translate this address to a port number.)
Translate to Port
Number
You can enable this setting and specify a port number if you want to assign the LAN
server or DMZ server to a specific port.
WAN Destination IP
Address
The setting that determines the destination IP address applicable to incoming traffic.
This is the public IP address that maps to the internal LAN server.
On the dual-WAN port models, it can either be the address of the WAN1 or WAN2
interface or another public IP address (when you have a secondary WAN address
configured)
. On the single-WAN port models, it can either be the address of the
single WAN interface or another public IP address (when you have a secondary WAN
address configured)
.