Cisco Systems 2.5 Make Changes to Access Rules

Chapter9 Firewall Policy
Edit Firewall Policy/ACL
9-6
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
Note Although the icons are shown on a particular interface in the diagram, a firewall
policy might contain access control entries that affect traffic not represented by
the diagram. For example, an entry that contains the wildcard icon in the
Destination column (see Make Changes to Access Rules) might apply to traffic
exiting interfaces other than the one represented by the currently chosen To
interface. The wildcard icon appears as an asterisk and stands for any network or
host.
To make changes to an access rule, see Make Changes to Access Rules. To return
to the main Firewall Policy window description see Edit Firewall Policy/ACL.
Make Changes to Access Rules
The policy panel shows the details of the rules applied to the chosen traffic flow.
The Policy panel is updated when the From and To interfaces are chosen and when
the Traffic Diagram is toggled between Originating Traffic focus and Returning
Traffic focus.
The Policy panel is blank if an access rule that contains no entries has been
associated with an interface. For example, if a rule name was associated with an
interface using the CLI, but entries for the rule were not created, this panel would
be blank. If the Policy Panel is blank, you can use the Add button to create entries
for the rule.
Rules applied to Originating traffic are indicated by a right arrow. An
icon on the From interface traffic line indicates the presence of a rule
filtering traffic inbound to the router. An icon placed on the To interface
traffic line indicates a rule filtering traffic outbound from the router. If
you place the mouse over this icon, Cisco SDM will display the names
of the rules that have been applied.
Rules applied to Returning traffic are indicated by a left arrow. An icon
on the To interface traffic line indicates the presence of a rule filtering
traffic inbound to the router. An icon on the From interface traffic line
indicates the presence of a rule filtering traffic outbound from the rout er.
The names of the rules applied are displayed when you place the cursor
over this icon.