Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 8: Creating Rules and Rule Groups
Creating IP Filter rules
3 In the Idle Timeout field, specify the amount of time (in seconds) that a
session will remain open when there is no new traffic within an established
session. Valid values are 1–65535. (The minimum value is one second.)
4 [TCP only] In the Limit Connection Rate area, you can limit the number of
connections that will be allowed per second by selecting Yes, and entering
the number of connections that you want allowed per second in the Rate
field. Valid values are 0—1000000000.
To disable connection rate limitations, select No.
5 [UDP only] In the Limit Packet Rate area, you can limit the number of
packets that will be allowed per second in either direction by selecting Yes,
and entering the number of packets that you want allowed per second in the
Rate field. Valid values are 0—1000000000.
To disable packet rate limitations, select No.
6 [Conditional] In the Stateful Session Failover field, select Yes to enable
stateful session sharing, or select No to disable stateful session sharing.
This field can only be modified if you are connected to an HA cluster. (For
more information on stateful session sharing, see “Sharing IP Filter
sessions in an HA cluster” on page 128.)
7 In the Allowed Control and Error Responses area, select the response
types that you want to allow for this rule by selecting the check box next to
each response type you want to allow. A check mark will appear next to
response types that are selected. To deselect a response type, click the
check box to clear it.
Note: This section controls the ICMP messages generated by this rule’s TCP/
UDP traffic. These messages do not need separate ICMP rules.
8 Click Add to save your changes, or click Cancel to reset the fields to the
values that were previously entered.
9 [Conditional] If you selected Add and want this rule to begin managing
traffic, add this newly configured rule to an active rule group and save the
changes.
Your TCP/UDP IP Filter rule is now configured.
Configuring the ICMP Advanced tab
1 To enable stateful inspection for this rule, select the Stateful Packet
Inspection check box. You will not be able to configure other fields in this
tab without this option selected.
To disable stateful packet inspection, clear the Stateful Packet Inspection
check box.
2 In the Response Timeout field, specify the amount of time (in seconds) that
a session will await responses after the final request. The minimum value is
1 second.
235