- Kerio WinRoute Firewall Administrator's Guide

86
Chapter 6
Traffic Policy
Traffic Policy belongs to of the basic WinRoute configuration. All the following settings
are displayed and can be edited within the table:
• security (protection of the local network including the WinRoute host from Internet
intrusions
• IP address translation (or NAT, Network Address Translation — technology which
enables transparent access of the entire local network to the Internet with one public
IP address only)
• access to the servers (services) running within the local network from the Internet
(port mapping)
• controlled access to the Internet for local users
Traffic policy rules can be defined in Configurations → Traffic Policy. The rules can be
defined either manually (advanced administrators) or using the wizard (recommended).
It is recommended to create basic traffic rules and later customize them as desired. Ad-
vanced administrators can create all the rules according to their specific needs without
using the wizard.
6.1 Network Rules Wizard
The network rules wizard demands only the data that is essential for creating a basic set
of traffic rules. The rules defined in this wizard will enable access to selected services
to the Internet from the local network, and ensure full protection of the local network
(including the WinRoute host) from intrusion attempts from the Internet. To guarantee
reliable WinRoute functionality after the wizard is used, all existing rules are removed
and substituted by rules created automatically upon the new data.
Click on the Wizard button to run the network rules wizard.
Note: The existing traffic policy is substituted by new rules after completing the entire
process after confirmation of the last step. This means that during the process the
wizard can be stopped and canceled without losing existing rules.