Chapter 3 IPS Filtering

Example 2: Security Profile Zone Configuration

Security Profile

Applies To Security Zone Pair

 

 

#4

ANY ==> ANY

 

 

#5

ANY ==> WAN

 

 

#6

LAN ==> WAN

 

 

In Example 2, a packet going from the LAN zone to the WAN zone matches Security Profiles #4, #5 and #6. However, the X family device applies filtering rules from Security Profile #6 to the packet because the LAN zone is more specific than the ANY zone.

For additional information on Security Profiles, see the following topics:

“Managing Security Profiles” on page 19

“Configuring DV Filters” on page 25

“Configure Filter Limits/Exceptions based on IP Address” on page 34

18 X Family LSM User’s Guide V 2.5.1