Chapter 25 Security Policy
UAG Series User’s Guide
299
25.4 Security Policy Configuration Example
The following Internet security policy example allows Doom players from the WAN to IP addresses
172.16.1.10 through 172.16.1.15 (Dest_1) on the LAN.
1
Click
Configuration > Security Policy > Policy Control
. In the summary of security policies
click
Add
to configure a new first entry. The sequence (priority) of the policies is important since
they are applied in order.
Figure 211
Security Policy Example: Security Policy Control Screen
2
At the top of the screen, click
Create new Object > Address
to configure an address object.
Configure it as follows and click
OK
.
User
Select a user name or user group to which to apply the rule. The rule is activated only
when the specified user logs into the system and the rule will be disabled when the user
logs out.
Otherwise, select
any
and there is no need for user logging.
Note: If you specified an IP address (or address group) instead of
any
in the field below, the
user’s IP address should be within the IP address range.
Address
Select the IPv4 source address or address group to which this rule applies. Select
any
to
apply the rule to all IPv4 source addresses.
Session Limit per
Host
Use this field to set a limit to the number of concurrent NAT/security policy sessions this
rule’s users or addresses can have.
For this rule’s users and addresses, this setting overrides the
Default Session per Host
setting in the general
Security Policy > Session Control
screen.
OK
Click
OK
to save your customized settings and exit this screen.
Cancel
Click
Cancel
to exit this screen without saving.
Table 133
Configuration > Security Policy > Session Control > Add/Edit (continued)
LABEL
DESCRIPTION
