The firewall included in Panda GateDefender Integra is a stateful packet filter. Panda GateDefender Integra controls access at the level of network addresses. It also validates that packets belong to a connection request or a connection between two devices and applies security mechanisms when a TCP or UDP connection is established. The rules to enter in order to configure the firewall according to the policies you want are added through a simple and intuitive menu.
The rules are defined in accordance with a specific network interface, the source and destination IP addresses (network layer), the UDP and TCP service ports (transport layer), the TCP connection indicators, type of IP protocol and the types of ICMP messages (network layer). The firewall filters the traffic that enters and leaves through each interface, allowing different rules to be defined.
The rules will appear ordered by the priority of the Action in the following order:
DNAT: Rules used to translate destination addresses.
Filter (Allow/Deny/Reject): These are the packet filtering rules through which to establish the Accept/Deny policies. When the action Deny is applied in a rule, the packet is rejected and no response is returned to the packet source. When the action Reject is applied in a rule, the packet is rejected but the Port unreachable response is returned to the packet source.
SNAT: Rules used to translate source addresses.
To alter the priority of a rule, follow the steps below:
Select a filter rule from the list.
If you want to raise the rule a position, click on the Up button.
If you want to drop the rule a position, click on the Down button.
- When creating a new rule, having previously selected another rule from the list, the new rule will take the place of the selected rule. This last rule will be placed one position below the recently created one.
IMPORTANT: Bear in mind that depending on the conditions established, the creation or modification of a firewall rule can leave Panda GateDefender Integra and other users without services.
If you want more information about the types of NAT addresses that can be configured in Panda GateDefender Integra, click here.