F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Configuration Guide-6PW100
iii
Displaying and maintaining interzone policies ································································································ 100
Interzone policy rule configuration example ···································································································· 100
Interzone policy group configuration example ································································································ 103
Using a wizard to configure a firewall policy ·········································································································· 105
Configuration prerequisites ································································································································ 105
Configuration procedure ···································································································································· 106
Managing sessions ················································································································································· 113
Overview ······································································································································································· 113
How session management works ······················································································································ 113
Session management functions ·························································································································· 113
Configuring session management in the Web interface·························································································· 114
Configuring basic session management settings ····························································································· 114
Displaying session table information ················································································································· 117
Displaying global session statistics ···················································································································· 118
Displaying history session statistics ··················································································································· 120
Displaying session statistics by the IP address or the security zone ······························································ 121
Configuring session management at the CLI ············································································································· 124
Session management task list ····························································································································· 124
Configuring session logging ······························································································································ 127
Displaying and maintaining session management ·························································································· 128
Configuring virtual fragment reassembly ·············································································································· 130
Overview ······································································································································································· 130
Configuring virtual fragment reassembly in the Web interface ····································································· 130
Configuration procedure ············································································································································· 130
Virtual fragment reassembly configuration example ······················································································· 132
Configuring virtual fragment reassembly at the CLI ································································································· 133
Configuration procedure ···································································································································· 133
Configuration example ······································································································································· 134
Configuring ASPF ···················································································································································· 136
Overview ······································································································································································· 136
Configuring ASPF in the Web interface ···················································································································· 136
Configuration procedure ···································································································································· 136
ASPF configuration example ······························································································································ 137
Configuring ASPF at the CLI ······································································································································· 138
Configuring session acceleration ··························································································································· 139
Feature and hardware compatibility ·························································································································· 139
Overview ······································································································································································· 139
Configuring session acceleration ······························································································································· 139
Configuration guidelines ············································································································································· 139
Configuring connection limits ································································································································· 141
Overview ······································································································································································· 141
Configuring connection limit policies in the Web interface ···················································································· 141
Configuring connection limit policies at the CLI ······································································································· 143
Connection limit configuration task list ············································································································· 143
Creating a connection limit policy ····················································································································· 143
Configuring the connection limit policy ············································································································ 143
Applying the connection limit policy ················································································································· 144
Displaying and maintaining connection limit policies ····················································································· 144
Connection limit configuration example ··········································································································· 144
Troubleshooting connection limiting ·················································································································· 146