Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Figure 4-2. Example of
active rules
rule group
Rule 1
Rule group A
Rule group B
Rule 9
active rules
Rule 1
Rule 2
Rule 3
Rule 4
Rule 5
Rule 6
Rule 7
Rule 8
Rule 9
Policy configuration basics
contents of
rule group A
contents of
rule group B
The rules within an active group are processed in sequential order.
When traffic arrives at the Sidewinder G2, it will first be processed by
the active IP Filter rules. If the traffic does not match any IP Filter
rules, it is forwarded on to the active proxy rules. If a rule match is
found, the traffic is processed according to that rule and will not be
processed by any other rules. Therefore, the order of the rules and
nested rule groups within an active rule group is very important.
The rule groups you specify in the Active Rules window (one for
proxy and one for IP Filter) work together as follows: All traffic
coming into and leaving the Sidewinder G2 is compared to any active
IP Filter rules that you have configured. The IP Filter rules examine
packets at the IP layer. If a match is not found in the IP Filter rules,
the traffic is then examined by the active proxy rules, which examine
the traffic at the Application layer.
Understanding Policy Configuration 4-3