User manual

Wireless Controller User Manual
105
 Web server host in the DMZ, IP address: 192.168.12.222
 Access to Web server: (simulated) public IP address 10.1.0.52
E
x
a
m
p
l
e
4
:
B
l
o
c
Example 4: Block traffic by schedule if generated from specific range of machines
Use Case: Block all HTTP traffic on the weekends if the request originates from a
specific group of machines in the LAN having a known range of IP addresses, and
anyone coming in through the Network from the WAN (i.e. all remote users).
Configuration:
1. Setup a schedule:
 To setup a schedule that affects traffic on weekends only, navigate to
Security: Schedule, and name the schedule ―Weekend‖
 Define ―weekend‖ to mean 12 am Saturday morning to 12 am Monday
morning – all day Saturday & Sunday
 In the Scheduled days box, check that you want the schedule to be active for
―specific days‖. Select ―Saturday‖ and ―Sunday‖
 In the scheduled time of day, select ―all day‖ – this will apply the schedule
between 12 am to 11:59 pm of the selected day.
 Click apply – now schedule ―Weekend‖ isolates all day Saturday and
Sunday from the rest of the week.
Parameter
Value
From Zone
Insecure (WAN1/WAN2)
To Zone
Public (DMZ)
Service
HTTP
Action
ALLOW always
Send to Local Server (DNAT IP)
192.168.12.222 ( web server local IP address)
Destination Users
Single Address
From
10.1.0.52
WAN Users
Any
Log
Never