Filter
Top Products
Chapter 5: Using the Web Interface
51
Change the Default Policy
Onceenabled,thefirewallhasadefaultpolicybuiltinthatacceptstraffic
fromallIPaddresses.ThismeansanyIPaddressesnotdroppedbya
specificrulewillbepermittedtoaccesstheDominionPX.Youcan
changethedefaultpolicytoDROP,inwhichcasetrafficfromallIP
addre
sseswillbedroppedexcepttrafficallowedbyaspecificACCEPT
rule.
Tochangethedefaultpolicy:
1. ChooseDeviceSettings‐‐>Security.TheSecuritySettingswindow
appears.ThepanelattheupperrightislabeledIPAccessControl.
Thiscontrolsthefirewall.
2. MakesurethecheckboxlabeledEnableIPAcc
essControlis
checked.
3. ThedefaultpolicyisshownintheDefaultPolicyfield(refertothe
figureshownabove).Tochangeit,selectthepolicyyouwantfrom
thedrop‐downlistinthefield.
4. ClickApply.Thenewdefaultpolicyisapplied.
Create Firewall Rules
FirewallrulesacceptordroptrafficintendedfortheDominionPX,based
ontheIPaddressofthehostsendingthetraffic.Whencreatingfirewall
rules,keepthefollowinginmind:
• Ruleorder Theorderoftherulesisimportant.Whentrafficreaches
theDominionPX,therulesareexecutedinnumericalor
der.Thefirst
rulethatmatchestheIPaddressdetermineswhetherthetrafficis
acceptedordropped.AnysubsequentrulesmatchingtheIPaddress
havenoeffectonthetraffic
• Subnetmask WhentypingtheIPaddress,youMUSTspecify
boththeaddressandasubnetmask.Forexample,tospecifyasi
ngle
addressinaClassCnetwork,usethisformat:
x.x.x.x/24
where/24=asubnetmaskof255.255.255.0.Tospecifyanentire
subnetorrangeofaddresses,changethesubnetmaskaccordingly.
Tocreatefirewallrules:
1. ChooseDeviceSettings‐‐>Security.TheSecuritySettingswindow
a
ppears.ThepanelattheupperrightislabeledIPAccessControl.
Thiscontrolsthefirewall.