Got it

Huawei Enterprise Support Community

Community Forums Security

USG6305 Security Policy List

Created: Nov 4, 2017 19:48:42Latest reply: Nov 8, 2017 07:16:29 1795 2 1 0 0

Hi,

i have a question because of the security policy configuration. There is a default security policy with action permit. When i installed the USG it was set to permit. My question is, this setting should be deny right? But if i set to deny, there is no

more traffic possible from trusted to untrusted zone. Do you have any idea how the security setting should be to setup the

following scenario.

trust zone = LAN

untrust zone = WAN

Traffic from WAN to LAN deny! Traffic from LAN to WAN allowed. simple...

Thanks!

Cheers,

Dominik

x
convention：
Emotion(0)

Like (1) Dislike (0) Favorite(0) Report

 Previous: IPSEC VPN could establish a tunnel,but one end can not ping another

Next: USG6330 domain authentication



(1) (0)

^2#

WoodWood Created Nov 6, 2017 10:46:57

waiting for help ,please

x
convention：

(1) (0)

^3#

kobewadearenas Created Nov 8, 2017 07:16:29

user_2910347 发表于 2017-11-06 10:46 waiting for help ,please

you should deny the default policy, and configure policy to permit traffic from trust to untrust zone and move this policy to top.

x
convention：

Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:

Politically sensitive content
Content concerning pornography, gambling, and drug abuse
Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy

Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.

Please bind your phone number to obtain invitation bonus.

USG6305 Security Policy List

Third Party’s Trade Secret

`@trans`drinking_poetry`~trans`

`@trans`bright_future`~trans`

`@trans`universal_genius`~trans`

My Followers

Enterprise

Consumer

Corporate

Carriers

USG6305 Security Policy List

Third Party’s Trade Secret

`@trans`drinking_poetry`~trans`

`@trans`bright_future`~trans`

`@trans`universal_genius`~trans`

My Followers