Table of Contents
Advertisement
range of the P2P policy to only intranet, and skip detection against DMZ. Thus, false-positives
can be reduced, while maintaining performance.
If the detection scope is defined as Directional, the scope is distinguished by source and destina-
tion.
If it is defined as Non-directional, the rule will manage. Therefore, an administrator does not have
to choose the detection scope from the combo box. Instead it is fine tuned before the policy data-
base is published. The only thing the administrator needs to do is to apply the templates or the pol-
icy to the hosts or the groups.
NOTE
D
K
EFINE
EYWORD
Some patterns have constraint parameters. If such a pattern rule is selected, there is a constraint
parameter section as following.
Keyword: The user defined keyword to match the content of packets.
Only schedules already defined show in the combo
box. If you want to use custom schedule, you need to
define it first. See "The Schedule Screen" on page 72.
C
ONTENT
Information Security Gateway
Chapter 4: Policy -- 65
Advertisement
Table of Contents
