iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
• Log Packets Matched by This Rule Select this check box to log the first packet from a
connection that was matched by this rule.
Schedule By default, the rule will always be active. However, you can define time segments
during which the rule may be active, by selecting ‘User Defined’ from the ‘Schedule’ drop-down
menu. If more than one scheduler rule is defined, the ‘Schedule’ drop-down menu will allow you to
choose between the available rules. To learn how to configure scheduler rules, refer to
Section 6.9.3.
The order of the rules’ appearance represents both the order in which they were defined and the
sequence by which they will be applied. You may change this order after your rules are already
defined (without having to delete and then re-add them), by using the action icon and
action icon.
Figure 5.39 Move Up and Move Down Action Icons
5.2.8.2 Adding ALG Rules
The ‘ALG Rule Sets’ section enables you to define address and port processing rules for certain
application protocols (such as, FTP, TFTP, SIP, and others), which carry the IP address inside the
application data. Most of these protocols will not work with the NAT, unless the NAT is aware of
them and does the appropriate translation.
The NAT is application independent, therefore a specific Application Level Gateway (ALG) is
required to perform payload monitoring and needed alterations to allow the application’s traffic to
pass through the firewall. The ‘Input’ and ‘Output’ subsections of the ‘ALG Rule Sets’ feature (see
Figure 5.35) are designated to display ALG rules for inbound and outbound traffic respectively.
Note that iPECS SBG-1000 is automatically configured with ALG rules for several widespread
protocols. You can edit a rule by clicking its respective action icon, or remove it by clicking the
action icon.
To create an ALG rule, either inbound or outbound, click the ‘New Entry’ link that corresponds to
the rule type you would like to define. The ‘Add ALG Rule’ screen appears.
57