User's Manual Part 2

Using Rules
156 Check Point Safe@Office User Guide
Rule Description
Allow This rule type enables you to do the following:
• Permit outgoing access from your internal
network to a specific service on the Internet.
Note: You can allow outgoing connections for
services that are not permitted by the default
security policy.
• Permit incoming access from the Internet to
a specific service in your internal network.
• Assign traffic to a QoS class.
If Traffic Shaper is enabled for the direction
of traffic specified in the rule (incoming or
outgoing), then Traffic Shaper will handle
relevant connections as specified in the
bandwidth policy for the selected QoS class.
For example, if Traffic Shaper is enabled for
outgoing traffic, and you create an Allow rule
associating all outgoing Web traffic with the
Urgent QoS class, then Traffic Shaper will
handle outgoing Web traffic as specified in
the bandwidth policy for the Urgent class.
For information on Traffic Shaper and QoS
classes, see Using Traffic Shaper on page
120.
This option is only available in Safe@Office
225.
Note: You cannot use an Allow rule to permit incoming
traffic, if the network or VPN uses Hide NAT. However,
you can use Allow rules for static NAT IP addresses.
Block This rule type enables you to do the following:
• Block outgoing access from your internal
network to a specific service on the Internet.
• Block incoming access from the Internet to a
specific service in your internal network.