Configuring Security Policies - Dell PowerConnect J-SRX100SU Getting Started Manual

3 .3 Configuring Security Policies

Security policies provide a set of rules for transit traffic to use
to identify which traffic can pass through the firewall and what
actions to take on the traffic as it passes through the firewall. To
assign an IP address:
For example, to define a security policy between the untrust and
the DMZ zones that will allow HTTP/SSH traffic between them:
1 . Click the Configure tab, choose Security > Policy > FW
Policies, and then click Add.
22
Dell PowerConnect J-Series J-SRX100S/SU Services Gateway Getting Started Guide
2 . In the Policy tab, enter the policy name and select the Policy
Action as permit from the list.
3 . In the Policy tab, select untrust from the list for From Zone
and DMZ from the list for To Zone.
4 . In the Source Address and Destination Address areas, move
any to Matched.
NOTE: For any specific source or destination address,
select Add new destination address.
5 . In Applications, move junos-https and junos-ssh to Matched
and then click OK.
NOTE: To allow HTTP/SSH traffic from the DMZ to
the untrust zone, create a new policy and configure
a security policy from the DMZ to the untrust zone.
To perform this, follow the steps mentioned in "3 .3
Configuring Security Policies;" however, you need
select DMZ from the list for From Zone and untrust from
the list for To Zone.