H3C Technologies H3C SecBlade IPS Cards - Manual (Page 189)

18-10
z Click the icon, and the Apply Policy page as shown in Figure 18-11 appears, where you can
configure not only the segment and management zone but also the advanced parameters such as
internal/external zone IP addresses and excluded IP addresses.
Figure 18-10 Define the policy application scopes
Figure 18-11 Apply policy
Table 18-7 describes the configuration items of defining the policy application scopes.
Table 18-7 Configuration items of defining the policy application scopes
Item Remarks
Segment
Specify the ID of the segment to which the policy is to be applied.
Select System Management > Network Management > Segment Configuration
to configure the segments available for selection.
A segment cannot be configured in multiple entries in the Apply Policy to area.
Management Zone
Specify the zones to be controlled by the policy, including internal zone and external
zone.
Internal Zone IP
Addresses
Internal Zone Excluded
IP Addresses
Configure the policy to take effect on only the set IP addresses, excluding the set
excluded IP addresses in the internal zone.
The excluded IP addresses, if specified, must be contained in the IP addresses of the
internal zone.
If the internal zone IP addresses are not configured, the policy takes effect on all IP
addresses in the internal zone.