Hirschmann HiSecOS EAGLE20 - Page 142

Network Security > Packet Filter > FLM
Network Security
142
RM GUI HiSecOS EAGLE20/30
Release 3.0 09/2015
Action Specifies how the device handles received data packets when it applies
the rule.
Possible values:
 accept (default setting)
The device accepts the data packets according to the ingress rules.
Afterwards, the device applies the egress rules before sending the
data packets.
 drop
The device discards the data packet without informing the sender.
 reject
The device discards the data packet and informs the sender.
 enforce-modbus
The device applies the rule specified in the "DPI Profile Index" column
to the data packets.
 enforce-opc
The device applies the rule specified in the "DPI Profile Index" column
to the data packets.
To apply the changes to the data stream, click the "Set" button. To save
the changes in the non-volatile memory, proceed as follows:
 Open the
Basic Settings > Load/Save dialog.
 In the table, highlight the desired configuration profile.
 If in the "Selected" column the checkbox is
unmarked , click the
"Select" button.
 Click the "Save" button.
Ingress Interfaces Displays whether the device applies the rule to data packets received or
sent on an interface.
Possible values:
 ingress
The device applies the rule to data packets received on the routing
interface.
 egress
The device applies the rule to data packets sent on the routing
interface.
Active Activates/deactivates the rule.
Possible values:
 marked (default setting)
The rule is active.
 unmarked
The rule is inactive.
Show only FLM
Rules
Activates/deactivates the hiding of non-"Firewall Learning Mode" rules.
Possible values:
 marked (default setting)
Hiding non-"Firewall Learning Mode" rules is active.
 unmarked
Hiding non-"Firewall Learning Mode" rules is inactive.
Parameters Meaning