Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 4: Understanding Policy Configuration
Policy configuration basics
Policy
configuration
basics
98
Figure 44: Basic rule
group structure Sample rule group
Your site’s security policy is implemented and enforced by applying rules to all
traffic that passes through the Sidewinder G2. Each rule is basically a mini
policy that contains criteria which are used to inspect incoming or outgoing
traffic. Rules determine whether that traffic will be allowed to continue to its
destination. There are two distinct rules types that you can configure on the
Sidewinder G2:
• Proxy rules—Proxy rules allow you to control access to Sidewinder G2
proxies and servers. Proxy rules determine whether traffic will be allowed
through the Sidewinder G2 or denied using various criteria such as source
and destination address.
Proxy rules are automatically bi-directional, meaning that a rule allows traffic
or sessions to be initiated from both source and destination addresses.
Also, each rule automatically allows the response(s) to the initial request.
Note: When you are configuring proxy rules for a particular proxy or service,
you must ensure that the corresponding proxies and/or servers have also been
enabled and configured before the rule will pass traffic. This can be verified at
Policy Configuration > Proxies and Policy Configuration > Servers.
• IP Filter rules—IP Filter rules allow you to configure your Sidewinder G2 to
securely forward IP packets between networks. IP Filter rules operate
directly on the IP packets, allowing you to configure filtering for TCP/UDP
and non-TCP/UDP traffic passing between networks.
After you plan and create all of the rules you need to enforce your security
policy, you can organize them into sets, called rule groups. A rule group can
consist of both rules and nested rule groups. A nested rule group is a rule
group that you place within another rule group. You can nest multiple rule
groups within a rule group.
Figure 44 demonstrates the basic structure of a rule group that uses nested
rules.
Rule 1
Rule group
Rule group
Rule 9
Rule Rule 21
Rule 3
Rule 4
Rule 5
Rule 6
Rule 7
Rule 8