Configuration flowchart

Figure-1 Configuration flowchart

 

Table-1 Configuration procedure

Step

Description

Remarks

Create object groups

To use objects and object groups, you must first create objects and object groups. For more information, see "Object and object group."

Optional.

Create an IPS policy

To use IPS policies, you must first create IPS policies. For more information, see "IPS."

Optional.

Create an antivirus policy

To use antivirus policies, you must first create antivirus policies. For more information, see "Antivirus."

Optional.

Create a firewall

Create a firewall and attach it to a network resource for the firewall to take effect.

Required.

Create firewall rules

Add rules for the created firewall to filter traffic.

Required.

You can add firewall rules one by one or import firewall rules in bulk.

Edit rule priorities

Change the matching priorities of firewall rules.

Optional.

If multiple rules exist in a firewall, the system matches firewall rules against packets by rule priority until a match is found. A rule with higher priority is matched first. For more information, see "Edit rule priorities."

Verify the configuration

Verify that firewall, IPS, and antivirus settings on the system have been synchronized to the SDN controller.

Required.

 

The signature databases of the SDN controller and firewall devices must be updated in time. For more information about database update, see the related documents for the SDN controller.