User Manual

UPS Network Management Card 3 User Guide47
It is recommended that you add one of the following as the lowest priority rule in your firewall policy:
• To use the firewall as a white list, add
250 Dest any / Source any / protocol any / discard
• To use the firewall as a black list, add
250 Dest any / Source any / protocol any / allow
Delete a policy:
Select Delete Policy to open the Confirm Deletion page.
Click Apply to confirm, and the selected firewall file is removed from the file system.
Path: Configuration > Security > Firewall > Load Policy
Upload a policy (with the .fwl suffix) from a source external to this device.
Path: Configuration > Security > Firewall > Test
Temporarily enforce the rules of a chosen policy for a time that you specify.
802.1X Security Configuration
Path: Configuration > Security > 802.1X Security
The NMC takes the role of a supplicant in an EAPoL (Extensible Authentication Protocol over LAN)
architecture used in IEEE 802.1X port-based network access control. The NMC supports EAP-TLS as an
authentication method which requires you to upload 3 client-side certificates. The private key is stored in an
encrypted format. You need to provide a valid passphrase to be able to enable 802.1X security access.
NOTE: The NMC supports only EAP-TLS authentication method.
Protocol
Specify which protocol the rule applies to.
• any: any protocol.
• tcp: used for reliable information transfer between applications.
• udp: alternative to TCP using for faster, lower bandwidth information
transfer. Though it has fewer delays, UDP is less reliable than TCP.
• icmp: used to report errors for troubleshooting.
• icmpv6: used to report errors for troubleshooting on applications using
IPv6.
Action
allow: Allow the packet that matches this rule.
discard: Discard the packet that matches this rule.
Log
If this rule applied to a packet, regardless of whether the packet is blocked or
allowed, this will add an entry to the Firewall Log. See “Firewall Log” on
page 78.
Setting Description