Figure-1 Configuration flowchart
Table-1 Configuration procedure
Step |
Description |
Remarks |
To use objects and object groups, you must first create objects and object groups. For more information, see "Object and object group." |
Optional. |
|
To use IPS policies, you must first create IPS policies. For more information, see "IPS." |
Optional. |
|
To use antivirus policies, you must first create antivirus policies. For more information, see "Antivirus." |
Optional. |
|
Create a firewall and attach it to a network resource for the firewall to take effect. |
Required. |
|
Add rules for the created firewall to filter traffic. |
Required. You can add firewall rules one by one or import firewall rules in bulk. |
|
Change the matching priorities of firewall rules. |
Optional. If multiple rules exist in a firewall, the system matches firewall rules against packets by rule priority until a match is found. A rule with higher priority is matched first. For more information, see "Edit rule priorities." |
|
Verify that firewall, IPS, and antivirus settings on the system have been synchronized to the SDN controller. |
Required. |
The signature databases of the SDN controller and firewall devices must be updated in time. For more information about database update, see the related documents for the SDN controller. |