Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 4: Understanding Policy Configuration
Proxy rule basics
Suppose you want to allow all groups access to external FTP sites but only the
engineering group access to FTP host 192.55.12.3. Table 15 shows the proxy
rules in the order that they should be added to the rule group.
Table 15: Proxy rules for sample configuration shown in Figure 49
Proxy rule
Criteria
Rule 1:
allow_eng_ftp
Rule 2:
deny_other_ftp
Service Type Proxy Proxy Proxy
Service FTP FTP FTP
Action Allow Deny Allow
Rule 3:
allow_oth_ftp
Source Burb Internal Internal Internal
Source eng_net_group any (leave blank) any (leave blank)
Destination Burb Internet Internet Internet
Destination 192.55.12.3 192.55.12.3 any (leave blank)
User Group any (leave blank) any (leave blank) any (leave blank)
Authentication SafeWord
Times/Days Fri 7am-7pm
Application
Defense (FTP)
Allow Put/Get deny_all Allow Put/Get
The following list summarizes key points to consider for the proxy rules listed in
Table 15.
• Rule 1 allows all systems in the engineering group authenticated FTP
access to IP address 192.55.12.3 on the Internet, but only on Friday
between 7:00 a.m. and 7:00 p.m.
• This rule requires users to authenticate themselves via SafeWord before an
FTP connection is allowed.
• Rule 2 denies all systems in the trusted burb named internal from FTP
service to IP address 192.55.12.3 on the Internet.
• Rule 3 allows FTP service from all systems in the internal trusted burb to
any external system in the Internet burb.
117