Network Security > Packet Filter
Network Security
132
RM GUI HiSecOS EAGLE20/30
Release
3.0
09/2015
Network Security > Packet Filter
4.2 Packet Filter
In this menu, you specify the settings for the packet filters. The packet filter
contains rules which the device applies successively to the data stream on
its routing interfaces. The packet filter evaluates the data stream status-
oriented and filters undesired data packets selectively. The device considers
the status of the connection, thus also detecting data packets that belong to
a specific connection (Stateful Packet Inspection).
If a data packet complies with the criteria of one or more rules, the device
applies the action specified in the first rule applying on the data stream. The
device ignores the rules following.
If no rule applies, the packet filter applies the standard rule. In the default
setting, the standard rule has the value
accept
. You have the option of
changing the standard rule in the
Network Security > Packet Filter >
Global dialog.
The device provides a multi-step approach for setting up and applying the
rules:
Create rule.
Assign rule to a router interface.
Up to this step, changes have no effect on the behavior of the device and
the data stream.
Apply the rule to the data stream; to do this, click in the
Network
Security > Packet Filter > Global
dialog the "Commit Changes"
button.
Comparing packet filters to ACLs:
Packet filters process data traffic using software, resulting in slower
transient times.
Packet filters provide fine filtering.
Packet filters process data traffic after ACL processing.
You assign Packet filters to a router interface.
To Next Page
Loading...