18.07.2013 Views

Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Chapter 8: Creating Rules and Rule Groups<br />

Creating IP Filter rules<br />

234<br />

Figure 116: IP Filter<br />

(TCP and ICMP)<br />

Advanced tabs<br />

About the IP Filter<br />

Advanced tabs<br />

2 To configure advanced configuration information for this IP Filter rule, select<br />

the Advanced tab. Depending on the rule type, different options appear.<br />

• For TCP/UDP IP Filter rules, see “Configuring the TCP/UDP Advanced<br />

tab” on page 234.<br />

• For ICMP IP Filter rules, see “Configuring the ICMP Advanced tab” on<br />

page 235.<br />

• The Advanced tab is not available if you selected Other as the IP Filter<br />

rule type.<br />

The IP Filter Advanced tab option vary depending on the initial rule type. The<br />

options change as follows:<br />

• TCP—Allows you to configure stateful packet inspection, connection and<br />

idle timeouts, connection rates, stateful session failover, and allowed<br />

control and error responses.<br />

• UDP—Allows you to configure stateful packet inspection, idle timeouts,<br />

packet rates, stateful session failover, and allowed control and error<br />

responses packets.<br />

• ICMP—Allows you to configure stateful packet inspection, request<br />

timeouts, request rates, and which message types will be allowed or<br />

denied.<br />

• Other—The Advanced tab is not available for IP Filters <strong>of</strong> type Other.<br />

Configuring the TCP/UDP Advanced tab<br />

1 To enable stateful inspection for this rule, select the Stateful Packet<br />

Inspection check box. You will not be able to configure other fields in this<br />

tab without this option selected.<br />

To disable stateful packet inspection, clear the Stateful Packet Inspection<br />

check box.<br />

2 [TCP only] In the Connection Timeout field, specify the amount <strong>of</strong> time (in<br />

seconds) that a TCP session will wait for a connection to be established<br />

once it is started. Valid values are 1–65535. (The minimum value is one<br />

second.)

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!