User's Manual

Firewall
Configuring the Firewall Access Rules to Control Inbound and Outbound Traffic
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 183
6
Configuring a Firewall Access Rule
STEP 1 Click Firewall -> ACL Rules -> Rule.
The ACL Rules window opens.
STEP 2 To add a new access rule, click Add.
After you click Add, the Rule - Add/Edit window opens.
STEP 3 Enter the following information:
• Enable: Click On to enable the access rule, or click Off to create only the
access rule.
• From Zone: Choose the source zone for the traffic that is covered by this
access rule. For example, choose DMZ if the traffic is coming from a server
on your DMZ.
• To Zone: Choose the destination zone for the traffic that is covered by this
access rule. For example, choose WAN if the traffic is going to the Internet.
NOTE Only the existing zones are selectable. To create new zones, go to the
Networking -> Zone page. For more information about zone
configurations, see Configuring the Zones, page 127.
• Services: Choose an existing service or group service that is covered by
this rule. If the service or group service you want is not in the list, choose
Create New Service to create new service objects, or choose Create New
Group to create new group service objects. To maintain the service and
group service objects, go to the Networking -> Service Management
page. See Service Management, page 154.
• Source Address: Choose an existing address or group address as the
source address or network that is covered by this access rule.
• Destination Address: Choose an existing address or group address as the
destination address or network that is covered by this access rule.
If the address or group address you want is not in the list, choose Create
New Address to create new address objects, or choose Create New Group
to create new group address objects. To maintain the address and address
group objects, go to the Networking -> Address Object Management
page. See Address Management, page 152.