Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 4: Understanding Policy Configuration
Policy configuration basics
100
Figure 46: Traffic passing through the active rule groups
traffic
1. Traffic enters
the Sidewinder G2
and is processed
by the active
IP Filter rules.
active IP Filter rules proxies
Rule group A
Rule
Rule group B
Rule group C
Rule
2. No match is found,
so traffic is forwarded
to the proxies.
Proxy
Proxy
Proxy - enabled
Proxy
Proxy
3. A match is found at
Proxy C, so the traffic is
forwarded to the active
proxy rules.
active proxy rules
Rule group A
Rule group B
Rule group C
Tip: Always place the deny_all rule at the end of the active proxy rules list. This
rule denies any traffic that reaches it. Therefore, any rules that are listed after the
deny_all rule will not process any traffic.
An example of traffic being processed by the active rules
The following scenario walks you through the basic process used by the
Sidewinder G2 to process an outbound Telnet connection request. For
simplicity, this scenario assumes that the active rules table consists of the
following items:
• Some non-TCP/UDP IP Filter rules.
• A rule called NetMeeting that allows users to use audio and video
conferencing components for NetMeeting ® .
• A rule group called Administration, which allows Sidewinder G2
administrators to access the Sidewinder G2.
• A rule called Internet Services, which includes a service group that allows
access to the most commonly used Internet services, including Telnet. (For
information on service groups, see “Service groups” on page 108.)
• All proxies included in those rules are enabled in the appropriate burbs.
• A deny_all rule that will deny any requests that did not match any other
rules. This rule acts as a safeguard against traffic that did not meet any rule
criteria, and may or may not be desirable depending on your site’s security
policy.
Rule
Rule
4. A match is found in Rule
Group B. The traffic is
processed by the rule
specifications.