Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 8: Creating Rules and Rule Groups
Creating IP Filter rules
Entering Application
Defense rule
information
Creating IP Filter
rules
228
The Application Defense tab is used to determine which Application Defense
(or group if you selected Service Group in the Service Type field) will be used
by a rule. Select one of the following options:
Note: Proxy rules that use Secure Web Application Defenses with the Decrypt
Web Traffic option enabled must have redirection configured.
• Use the default Application Defense/Group—Select this option to use the
current default Application Defense group. The current default Application
Defense that will be used is displayed next to this option. Ensure that this is
the correct Application Defense Group for this rule.
• Select an Application Defense/Group—Select this option to select the
Application Defense (or group if you selected a service group in the Service
Type field) that you want to apply to this rule. Only Application Defenses
that are applicable to the type of rule you are creating will appear in the
table. For example, if you are creating an HTTP rule, you will only see Web
Application Defenses in the table. To view the properties for a particular
defense, select the appropriate table row and click View.
To create a new Application Defense for this rule, click New. To modify one
of the existing Application Defenses, highlight the appropriate table row and
click Modify. (If you want to create a new defense based on an existing
defense, highlight the defense and click Duplicate.) For information on creating
or modifying an Application Defense, see Chapter 6.
To view the other areas where an Application Defense is used, highlight
that defense and click Usage.
Important: If the defense you want to modify is currently being used by other
rules, you will receive a pop-up window listing the areas where this defense is
used and asking you whether you want to continue modifying the defense. Click
Yes to modify the defense, or click No to return to the Application Defense tab
without modifying the defense.
This section provides information on creating IP Filter rules. For overview
information on IP Filter rules, see Chapter 4.
To create an IP Filter rule, follow the steps below.
Important: IP Filter rules that you create will not be active until you place them in a
rule group that is part of the active IP Filter rules. For information on adding an IP
Filter rule to a rule group and ensuring that it is included in the active IP Filter rules,
see “Creating and managing rule groups” on page 236 and “Selecting your active
policy rules” on page 239.