Improving Web Application Security: Threats and - CGISecurity

782 Improving Web Application Security: Threats and CountermeasuresAfter creating the second rule, the MyPolicy Properties dialog box should look likethe one in Figure 6.Figure 6MyPolicy Properties dialog boxYour IPSec policy is now ready to use. To activate the policy, right-click MyPolicyand then click Assign.Summary of What You Just DidIn the previous three procedures, you performed these actions:●●●You started by creating two filter actions: one to allow traffic and one to blocktraffic.Next, you created two IP filter lists. The one called MatchAllTraffic matches on alltraffic, regardless of port. The one called MatchHTTPAndHTTPS contains twofilters that match TCP traffic from any source address to TCP ports 80 and 443.Then you created an IPSec policy by creating a rule that associated the MyBlockfilter action with the MatchAllTraffic filter list and the MyPermit filter action withthe MatchHTTPAndHTTPS filter list. The result of this is that the Web server onlyallows TCP traffic destined for port 80 or 443. All other traffic is rejected.