Filter
Top Products
C H A P T E R 3 SSL Processing
3-23
Combining automapping and manual mapping
NOTE: If both manual
mappings and applicable
automappings are
available, the 7110/7115
always uses the manual
mapping.
Any combination of automapping and manual mapping entries, up to
a total of 1000, can be used provided the server IP address and
network port combinations are unique. Several of the scenarios in
Chapter 4 include step-by-step mapping procedures.
Blocking
NOTE: Blocking is
always performed before
mapping.
For security purposes, the 7110/7115 allows the blocking of
particular IP addresses and ports. IP/port combinations can be
blocked on the basis of:
• Specific IP, specific port
• Subnet of IPs, specific port
• All IPs, specific port
Specific IP, Specific Port
To block a specific server IP and specific port combination:
1. Type the create block command.
2. Type the IP address.
3. Press Enter to accept the default IP mask
4. Type the specific port.
5. Press Enter to accept the default port mask.
Example:
Intel 7115> create block
Client IP to block [0.0.0.0]: 10.1.2.1
Client IP mask [0.0.0.0]: 255.255.255.255
Server IP to block [0.0.0.0]: 20.1.2.1
Server IP mask [0.0.0.0]: 255.255.255.255
Server Port to block: 80
Server Port mask [0xffff]:<Enter>
Use the show block command to verify:
Intel 7115> show block
(1) block 10.1.2.1 255.255.255.255 20.1.2.1
255.255.255.255 80 0xffff