Intrusion Defense Firewall 1.2 User's Guide - Trend Micro? Online ...

About Firewall Rules
IDF Firewall Rules have both a rule action and a rule priority. Used in conjunction, these two properties
allow you to create very flexible and powerful rule-sets. Unlike rule-sets used by other firewalls, which
may require that the rules be defined in the order in which they should be run, IDF Firewall Rules are run
in a deterministic order based on the rule action and the rule priority, which is independent of the order in
which they are defined or assigned.
Rule Action
Each rule can have one of four actions.
1. Bypass: if a packet matches a bypass rule, it is passed through both the firewall and the DPI
Engine regardless of any other rule (at the same priority level).
2. Force Allow: if a packet matches a force allow rule it is passed regardless of any other rules
(at the same priority level).
3. Deny: if a packet matches a deny rule it is dropped.
4. Allow: if a packet matches an allow rule, it is passed. Any traffic not matching one of the allow
rules is denied.
5. Log Only: if a packet matches a log only rule it is passed and the event is logged.
Adding an ALLOW rule will deny everything else:
A DENY rule can be implemented over an ALLOW to block certain kinds of traffic:
© Copyright 2010 Trend Micro Inc. www.trendmicro.com
All rights reserved. - 122 -