Chapter 16 Firewall
NXC Series User’s Guide
190
User This field is not available when you are configuring a to-NXC rule.
Select a user name or user group to which to apply the rule. The firewall rule is activated
only when the specified user logs into the system and the rule will be disabled when the
user logs out.
Otherwise, select any and there is no need for user logging.
Note: If you specified a source IP address (group) instead of any in the field below, the
user’s IP address should be within the IP address range.
Source Select a source address or address group for whom this rule applies. Select any if the
policy is effective for every source.
Destination Select a destination address or address group for whom this rule applies. Select any if
the policy is effective for every destination.
Service Select a service or service group from the drop-down list box.
Access Use the drop-down list box to select what the firewall is to do with packets that match
this rule.
Select deny to silently discard the packets without sending a TCP reset packet or an
ICMP destination-unreachable message to the sender.
Select reject to deny the packets and send a TCP reset packet to the sender. Any UDP
packets are dropped without sending a response packet.
Select allow to permit the passage of the packets.
Log Select whether to have the NXC generate a log (log), log and alert (log alert) or not
(no) when the rule is matched.
OK Click OK to save your customized settings and exit this screen.
Cancel Click Cancel to exit this screen without saving.
Table 93 Configuration > Firewall > Add/Edit (continued)
LABEL DESCRIPTION
To Next Page
Loading...
