Eicon Networks S92 Instrukcja Użytkownika Pobierz pdf (Strona 69)

YuChakTinMichael‘sGIACGCFWProjectAssignment

Page 69

NetworkObjects:

Beforewesetupanyrule,alltherelevantnetworkobjectsmustbebuiltfirst. The

followingissuesmustbeconsidered:

n TheIDSis“invisible”totheoutsideworld,andisnotneededinthisrulebase.

n NATisneededfortheEcommercewebserver,theEmailserverandtheDNS

server.

n FW1supportsantispoofingbyautomaticallygeneratingrulesthatrejectpackets

withinternalIPaddressesarrivingontheexternalinterface.Forthisfeatureto

work,theInterfacespropertiesmustbeproperlyconfiguredsothatwhatis

consideredtobeinternalisclearlydefined.

WWW

n TheEcommercewebserver

n Theserver’saddressinthenetworkis192.168.8.3.

n Theserver’s“public”addressforoutsideaccessis192.168.7.8.Thismustbe

definedviatheNATtab.ThecorrespondingNATruleswillbeautomatically

generated.

n Internaltothefirewall

1 2 ... 64 65 66 67 68 69 70 71 72 73 74 ... 208 209

Brak uwag

Eicon Networks S92 Instrukcja Użytkownika Strona 69