Intrusion Defense Firewall 1.2 User's Guide - Trend Micro? Online ...

The FORCE ALLOW rule can be placed over the denied traffic to allow certain exceptions to pass through:
Rule Priority
Rule actions of type deny and force allow can be defined at any one of 5 priorities to allow further
refinement of the permitted traffic defined by the set of allow rules. Rules are run in priority order from
highest (Priority 4) to lowest (Priority 0). Within a specific priority level the rules are processed in order
based on the rule action (force allow, deny, allow, log only).
The priority context allows a User to successively refine traffic controls using deny/force allow
combinations to achieve a greater flexibility. Within the same priority context an allow rule can be
negated with a deny rule, and a deny rule can be negated by a force allow rule.
Rule Actions of type allow run only at priority 0 while rule actions of type log only run only at
priority 4.
Putting Rule Action and Priority together
Rules are run in priority order from highest (Priority 4) to lowest (Priority 0). Within a specific priority level
the rules are processed in order based on the rule action. The order in which rules of equal priority are
processed is as follows:
© Copyright 2010 Trend Micro Inc. www.trendmicro.com
All rights reserved. - 123 -