Content Security Gateway User’s Manual

Step 2: Configure the parameters.

Source Address: Select names of the WAN networks from the drop down list. The drop down list contains the names of all WAN networks defined in the WAN section of the Address menu. To create a new source address, please go to the LAN section under the Address menu.

Destination Address: Select the name of the DMZ network from the drop down list. The drop down list contains the names of the DMZ network created in the Address menu. It will also contain Mapped IP addresses from the Virtual Server menu that were created for the DMZ network. To create a new destination address, please go to the Virtual Server menu. (Please refer to the sections entitled Address and Virtual Server for details)

Service: Select a service from drop down list. The drop down list will contain services defined in the Custom or Group section under the Service menu. These are services/application that are allowed to pass from the WAN network to the DMZ network. Choose ANY for all services. To add or modify these services, please go to the Service menu. (Please refer to the section entitled Services for details)

Schedule: Select the item listed in the schedule to enable the policy to automatically execute the function in a certain time and range.

Tunnel: Select the specific VPN tunnel to enable the VPN traffic in Policy rule.

Action: Select Permit or Deny ALL from the drop down list to allow or reject the packets travelling from the specified WAN network to the DMZ network.

Traffic Log: Select Enable to enable flow monitoring.

Statistics: Select Enable to enable flow statistics.

IDP: Check to enable IDP feature.

Max. Concurrent Sessions: The maximum concurrent sessions that allows to pass through CS-500. 0 means it is unlimited.

QoS: Select the item listed in the QoS to enable the policy to automatically execute the function in a certain time and range.

NAT: Select enable to replace Internet user’s IP address with DMZ interface IP, in order to allow Internet user to access DMZ resource if the DMZ server only allows to be accessed with the same IP subnet.

Step 3: Click OK.Modifying a WAN To DMZ policy:

Step 1: In the WAN To DMZ window, locate the name of policy desired to be modified and click its corresponding Modify option in the Configure field.

- 161 -