Compatible Systems 5.4 manual Security Policies Firewall Path Dialog Box, Current Security Policy

136 Chapter 8 - IntraGuard Firewall Configuration

Security Policies: Firewall Path Dialog Box

Security Policies: Firewall Path Dialog Box

This dialog box can be accessed by selecting FirewallPath/Security Policies from the Device View. This dialog box displays the overall security policy for an IntraGuard Firewall path and the individual policy settings for each protocol. It can be used to change the overall security policy, but not the indi- vidual protocol policy settings. To change individual protocol settings, see the Security Policy Protocol Setting Dialog Box.

Current Security Policy

This pull-down menu sets the overall Security Policy for the path. There are five general policy sets, each of which has an associated list of protocol settings which define how the interfaces belonging to the path will handle those types of packets.

Definitions of the five sets of security policies follow:

•Blocked is the most secure policy set, which does not allow packets in or out along the path.

•Strict is a restrictive policy set. A small set of outgoing client sessions are permitted through the firewall and all incoming sessions are excluded.

•Standard is a moderately restrictive policy set. Almost all outgoing client sessions are permitted and almost all incoming server sessions are