iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
Figure 5.36 Add Advanced Filter
The ‘Matching’ and ‘Operation’ sections of this screen define the operation to be executed when
matching conditions apply.
Matching Use this section to define characteristics of the packets matching the rule.
• Source Address The source address of packets sent or received by iPECS SBG-1000. Use
this drop-down menu to specify the computer or group of computers on which you would like
to apply the rule. Select an address or a name from the list to apply the rule on the
corresponding host, or ‘Any’ to apply the rule on any host trying to send data. If you would
like to add a new address, select the ‘User Defined’ option in the drop-down menu. This will
commence a sequence that will add a new Network Object, representing the new host.
Refer to Section 6.9.2 in order to learn how to do so.
• Destination Address The destination address of packets sent or received by iPECS
SBG-1000. This address can be configured in the same manner as the source address. For
example, use this drop-down menu to specify an IP address of a remote application server
(such as a security server), which requires that the incoming packets have a specific IP
address (e.g., one of those defined in your NAT IP address pool).
• Protocol You may also specify a traffic protocol. Selecting the ‘Show All Services’ option
from the drop-down menu expands the list of available protocols. Select a protocol or add a
new one using the ‘User Defined’ option. This will commence a sequence that will add a new
Service, representing the protocol. Refer to Section 6.9.2 in order to learn how to do so.
• DSCP Select this check box to display two DSCP fields, which enable you to specify a
hexadecimal DSCP value and its mask assigned to the packets matching the priority rule.
55