Hirschmann HiSecOS EAGLE20 - Page 148

Network Security > Packet Filter > Rule
Network Security
148
RM GUI HiSecOS EAGLE20/30
Release 3.0 09/2015
Action Specifies how the device handles received data packets when it applies
the rule.
Possible values:
 accept (default setting)
The device accepts the data packets according to the ingress rules.
Afterwards, the device applies the egress rules before sending the
data packets.
 drop
The device discards the data packet without informing the sender.
 reject
The device discards the data packet and informs the sender.
 enforce-modbus
The device applies the rule specified in the "DPI Profile Index" column
to the data packets.
The value is only available in the
? variant - see the Software Level
characteristic value in the product code.
 enforce-opc
The device applies the rule specified in the "DPI Profile Index" column
to the data packets.
The value is only available in the
? variant - see the Software Level
characteristic value in the product code.
To apply changes to the data stream, click the "Set" button.
Log Activates/deactivates the logging in the log file (system log).
Possible values:
 marked
Logging is activated.
The device places an entry in the log file (system log) when it applies
the rule to a data packet.
 unmarked (default setting)
Logging is deactivated.
Trap Activates/deactivates the sending of SNMP traps when the rule is applied
to data packets.
Possible values:
 marked
The device sends an SNMP trap when it applies the rule to a data
packet.
 unmarked (default setting)
The sending of SNMP traps is deactivated.
The prerequisite for sending SNMP traps is that you enable the function in
the
Diagnostics > Status Configuration > Alarms (Traps) dialog and
specify at least 1 SNMP manager.
Parameters Meaning