Cisco Systems OL-4015-08 How Do I Permit Specific Traffic onto My Network if I Dont Have a DMZ Network?

5-21
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
Chapter5 Create Firewall
How Do I...
Step1 If you are at the Inspection Rules window, and you have clicked Java List, click
the button to the right of the Number field and click Create a new rule (ACL)
and select. The Add a Rule window opens.
If you are at the Access Rules window, click Add to open the Add a Rule window.
Step2 From the Add a Rule window, create a standard access rule that permits traffic
from the addresses you trust. For example, if you wanted to permi t Java applets
from hosts 10.22.55.3, and 172.55.66.1, you could create the following access
rule entries in the Add a Rule window:
permit host 10.22.55.3
permit host 172.55.66.1
You can provide descriptions for the entries and a description for the rule.
You do not need to associate the rule with the interface to which you are applying
the inspection rule.
Step3 Click OK in the Add a Rule window.
Step4 If you started this procedure from the Inspection Rules window, then click OK in
the Java List window. You do not need to complete Step 5 and Step 6.
Step5 If you started this procedure in the Access Rules window, go to the Inspection
Rules window and select the inspection rule you want to create a Java list for, and
click Edit.
Step6 Check http in the Protocols column, and click Java List.
Step7 In the Java List Number field, enter the number of the access list that you created.
Click OK.
How Do I Permit Specific Traffic onto My Network if I Don’t Have
a DMZ Network?
The Firewall wizard, lets you specify the traffic that you want to allow onto the
DMZ. If you do not have a DMZ network, you can still permit specified types of
outside traffic onto your network, using the Firewall Policy feature.
Step1 Configure a firewall using the Firewall wizard.