Example 3.36. Setting up a SAT Policy to an Internal Web Server
In this example, a SAT policy will be set up to allow external public Internet traffic to access an
internal web server with an IP of
server_ip
.
Command-Line Interface
gw-world:/> add IPPolicy SourceInterface=wan
SourceNetwork=all-nets
DestinationInterface=core
DestinationNetwork=wan_ip
Service=http-all
Name=http_to_server
Action=Allow
DestinationAction=SAT
DestNewIP=server_ip
Web Interface
1.
Go to: Policies > Firewalling > Add > IP Policy
2.
Now enter:
•
Name: http_to_server
•
Action: Allow
•
Source Interface: wan
•
Source Network: all-nets
•
Destination Interface: core
•
Destination Network: wan_ip
•
Service: http-all
3.
Select Address Translation
4.
Select the SAT option
5.
Enter the web server's IP address for New IP
Geolocation
An additional traffic filtering option that is only available in NetDefendOS
IP Policy
objects is
Geolocation
. This feature allows filterering of IPv4 and IPv6 addresses for the traffic source and/or
destination according to its geographic association. Some IP addresses may not have a known
geographic association but these can also be targeted by this feature.
The geolocation feature can be used in two ways:
•
The
Geolocation
property value can be set in an
IP Policy
object that allows matching traffic
connections. This will include traffic from the specified areas.
•
The
Geolocation
property value can be set in an
IP Policy
object that drops matching traffic
Chapter 3: Fundamentals
248
Summary of Contents for NetDefendOS
Page 30: ...Figure 1 3 Packet Flow Schematic Part III Chapter 1 NetDefendOS Overview 30 ...
Page 32: ...Chapter 1 NetDefendOS Overview 32 ...
Page 144: ...Chapter 2 Management and Maintenance 144 ...
Page 284: ...Chapter 3 Fundamentals 284 ...
Page 392: ...Chapter 4 Routing 392 ...
Page 419: ... Host 2001 DB8 1 MAC 00 90 12 13 14 15 5 Click OK Chapter 5 DHCP Services 419 ...
Page 420: ...Chapter 5 DHCP Services 420 ...
Page 573: ...Chapter 6 Security Mechanisms 573 ...
Page 607: ...Chapter 7 Address Translation 607 ...
Page 666: ...Chapter 8 User Authentication 666 ...
Page 775: ...Chapter 9 VPN 775 ...
Page 819: ...Chapter 10 Traffic Management 819 ...
Page 842: ...Chapter 11 High Availability 842 ...
Page 866: ...Default Enabled Chapter 13 Advanced Settings 866 ...
Page 879: ...Chapter 13 Advanced Settings 879 ...