AirLive RS-1000 - Manual (Page 102)

９７
Policy
This section provides the Administrator with facilities to sent control policies for packets with
different source IP addresses, source ports, destination IP addresses, and destination ports.
Control policies decide whether packets from different network objects, network services, and
applications are able to pass through the Security
Bandwidth Manager.
What is Policy?
The device uses policies to filter packets. The policy settings are: source address,
destination address, services, permission, packet log, packet statistics, and flow alarm. Based
on its source addresses, a packet can be categorized into:
(1). Outgoing: a client is in the LAN networks, while a server is in the WAN networks.
(2) Incoming, a client is in the WAN networks, while a server is in the LAN networks.
How do I use Policy?
The policy settings are source addresses, destination addresses, services, permission, log,
statistics, and flow alarm. Among them, source addresses, destination addresses and IP
mapping addresses have to be defined in the Address menu in advance. Services can be
used directly in setting up policies, if they are in the Pre-defined Service menu. Custom
services need to be defined in the Custom menu before they can be used in the policy
settings.
If the destination address of an incoming policy is a Mapped IP address or a Virtual Server
address, then the address has to be defined in the Virtual Server section instead of the
Address section.