HP VPN Firewall Appliances Access Control Configuration Guide

84
3. Click Browse, and then choose the configuration file.
4. Only the files suffixed with .xml can be imported.
5. Click Apply to import all configurations in the file.
Displaying packet statistics of an interzone policy
1. Select Firewall > Security Policy > Policy Matching Statistics from the navigation tree.
2. Select the source and target zone, and then click Search.
The page displays the results matching the search conditions. Table 24 desc
ribes the fields on the
page.
Figure 72 Statistics of an interzone policy
To clear the packets statistics of the related interzone policy, click Reset in the Operation column. At this
time the system starts to perform statistics again.
Table 24 Field description
Item Descri
p
tion
Permitted Packets
Number of packets that match the interzone policy and are forwarded
during the statistics time.
Denied Packets
Number of packets that match the interzone policy and are dropped
during the statistics time.
Start Time Start time of the statistics.
End Time End time of the statistics.
Interzone policy configuration example
Network requirements
As shown in Figure 73, Firewall connects the corporate network to the Internet. The corporate network
belongs to zone Trust, and the external network belongs to zone Untrust.
Configure an interzone policy, allowing internal host Public to access the external network at any time
and denying all the other internal hosts’ access to the external network during working hours (from 8:00
to 18:00) on working days (from Monday through Friday).