Cisco Systems CL-28826-01 Add and Edit Extended Access Control Entry Dialog Boxes

6-56
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 6 Managing Policy Objects
Creating Access Control List Objects
Add and Edit Extended Access Control Entry Dialog Boxes
Use the Add or Edit Extended Access Control Entry dialog box to add an access control entry (ACE) or
an ACL object to an Extended ACL object.
Navigation Path
From the Add or Edit Access List Dialog Boxes, page 6-55 for Extended ACL objects, click the Add
button in the ACE table, or select a row and click the Edit button.
Related Topics
•Creating Extended Access Control List Objects, page 6-50
Access Control Entry table The access control entries (ACEs) and ACL objects that are part of the
ACL. The table displays the name of the entry or object, description,
options, services, and other attributes of the entry.
In the Permit column, a green checkmark indicates that the entry
permits traffic (typically, the traffic is considered a match for the
service you are defining), whereas a red circle with a slash indicates
that traffic is denied (typically, the traffic is considered to not match,
and the service you are defining is not applied to the denied traffic).
The source and, if applicable, destination addresses can be host IP
addresses, network addresses, or network/host policy objects.
•To add an ACE, click the Add button and fill in the dialog box for
the type of ACL you are creating:
– Add and Edit Extended Access Control Entry Dialog Boxes,
page 6-56
– Add and Edit Standard Access Control Entry Dialog Boxes,
page 6-59
– Add and Edit Web Access Control Entry Dialog Boxes,
page 6-60
•To edit an ACE, select it and click the Edit button.
•To delete an ACE, select it and click the Delete button.
•To change the position of an entry, select it and click the Up/Down
arrow buttons as required. Entries are evaluated top to bottom, so
correct positioning is crucial for you to get the results you intend.
Category The category assigned to the object. Categories help you organize and
identify rules and objects. See Using Category Objects, page 6-12.
Allow Value Override per
Device
Overrides
Edit button
Whether to allow the object definition to be changed at the device level.
For more information, see Allowing a Policy Object to Be Overridden,
page 6-18 and Understanding Policy Object Overrides for Individual
Devices, page 6-17.
If you allow device overrides, you can click the Edit button to create,
edit, and view the overrides. The Overrides field indicates the number
of devices that have overrides for this object.
Table6-20 Add and Edit Access List Dialog Boxes (Continued)
Element Description