F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Access Control Configuration Guide-6PW100

Figure 75 Interzone policy group configuration page

{ Configure the interzone policy group as described in 618HTable 26.

{ Click Apply.

Table 26 Configuration items

Item Descri

tion

Source Zone

Select a source zone for the interzone policy group.

Any means all zones on the virtual device.

Dest Zone

Select a destination zone for the interzone policy group.

Any means all zones on the virtual device. Virtual device name-Any means all shared zones

on the virtual device with the specified name.

If you specify a zone, instead of Any, for Source Zone, do not specify Any or Virtual device

name-Any for Dest Zone.

Selected ACLs

Select the IPv4 advanced ACLs to be referenced by the interzone policy group.

The selected ACLs are listed in the order they are selected, which is also the match order. An

ACL listed earlier has a higher priority, and is matched earlier.

For any ACL referenced by an interzone policy group, only the five tuples (source IP address,

destination IP address, source port, destination port, and protocol type) are used.

Enable Select this box to enable interzone policy group settings.

314BConfiguring an IPv6 interzone policy group

• Configuration prerequisites