Amer Networks E5Web GUI - Manual (Page 207)

Command-Line Interface
Device:/> add IPPolicy
Name=http_to_server
Action=Allow
SourceInterface=wan
SourceNetwork=all-nets
DestinationInterface=core
DestinationNetwork=wan_ip
Service=http-all
DestinationAction=SAT
DestNewIP=server_ip
InControl
Follow the same steps used for the Web Interface below.
Web Interface
1. Go to: Policies > Firewalling > Add > IP Policy
2. Now enter:
• Name: http_to_server
• Action: Allow
• Source Interface: wan
• Source Network: all-nets
• Destination Interface: core
• Destination Network: wan_ip
• Service: http-all
3. Select Address Translation
4. Select the SAT option
5. Enter the web server's IP address for New IP
3.6.8. Application Control
IP rules or IP policies can be set up so they apply only to traffic related to specific applications. An
example of an application that might require this kind of administrator control is traffic related to
BitTorrent. Applying IP rules or IP policies based on the application type is known in cOS Core as
Application Control.
The application control subsystem is driven using a database of application signatures. Each
signature corresponding to one type of application. The entire signature database is listed in the
separate document entitled cOS Core Application Control Signatures.
For application control to work, the current cOS Core license must allow the feature and the
effect of not having a license that allows it is discussed later in this section.
Chapter 3: Fundamentals
207