iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
For more information, refer to Section 5.3.5.
• Priority Select this check box to display a drop-down menu, in which you can select a
priority level assigned to the packets matching the priority rule. For more information, refer to
Section 5.3.3.
• Length Select this check box if you would like to specify the length of packets, or the length
of their data portion.
• Connection Duration Select this check box to apply the filtering rule only on connections
which are open for a certain time period. After selecting the check box, choose whether the
duration of connections matching the rule should be greater or less than the time that you
specify in the adjacent field.
Figure 5.37 Connection Duration
• Connection Size Select this check box to apply the filtering rule only on connections
matching a certain data size limit. This option is best used along with the ‘Connection
Duration’ option, enabling you to fine-tune the filtering mechanism according to your needs.
After selecting the check box, choose whether the connection’s data size should be greater
or less than the number of kilobytes that you specify in the adjacent field.
Figure 5.38 Connection Size
Operation Define what action the rule will take, by selecting one of the following radio buttons:
• Drop Deny access to packets that match the source and destination IP addresses and
service ports defined above.
• Reject Deny access to packets that match the criteria defined, and send an ICMP error or a
TCP reset to the origination peer.
• Accept Connection Allow access to packets that match the criteria defined. The data
transfer session will be handled using Stateful Packet Inspection (SPI), meaning that other
packets matching this rule will be automatically allowed access.
• Accept Packet Allow access to packets that match the criteria defined. The data transfer
session will not be handled using SPI, meaning that other packets matching this rule will not
be automatically allowed access. This can be useful, for example, when creating rules that
allow broadcasting.
Logging Monitor the rule.
56