Cisco 515E - PIX Restricted Bundle Getting Started Manual page 35

Chapter 2 Scenario: DMZ Configuration
processes the traffic, whether the traffic is incoming or outgoing, the origin and
destination of the traffic, and the type of traffic protocol and service to be
permitted.
In this section, you create an access rule that permits incoming HTTP traffic
originating from any host or network on the Internet, if the destination of the
traffic is the web server on the DMZ network. All other traffic coming in from the
public network is denied.
To configure the access control rule, perform the following steps:
In the ASDM window:
Step 1
a.
b.
c.
78-17645-01
Click the Configuration tool.
In the Features pane, click Security Policy.
Click the Access Rules tab, and then from the Add pull-down list, choose
Add Access Rule.
The Add Access Rule dialog box appears.
Configuring the Security Appliance for a DMZ Deployment
PIX 515E Security Appliance Getting Started Guide
2-19