Select Rule Action Options dialog box (Inspection Permit)
Use this dialog box to override and specify the options for the permit action.
Option | Definition |
---|---|
Override Default Settings | When selected, overrides default settings. |
Terminate the Single Connection | Creates entries that stop matching current connections, but which are not stored for any time. |
Block Traffic Between Endpoints | Creates entries that stop matching connections and block traffic between the matching IP addresses for the set duration. |
Duration | Specifies how long the Block list entry is stored on the Secure SD-WAN Engine. If you leave the value as 0, the Block list entry only cuts the current connections. Select the unit of time from the drop-down list on the right. |
IP Protocol |
To block traffic that uses a different protocol, click Select, then select an IP-proto Service. If you do not select an IP-proto Service, the block listing is applied to the protocol detected from the traffic. This option is useful if you want to block traffic where the opening connection is, for example, TCP traffic, but the following connection then changes to using the UDP protocol. If you select TCP or UDP as the protocol, we recommend that you set Endpoint 1 Port and Endpoint 2 Port to be Predefined TCP or Predefined UDP, respectively. For other protocols, set the ports to the Ignored option. |
Endpoint 1 Address or Endpoint 2 Address |
|
Endpoint 1 Port or Endpoint 2 Port |
|
Block List Executors | Select the Secure SD-WAN Engines to which the block list requests are sent. Click Add to add an element to the list, or Remove to remove the selected element. |
Include the Original Observer in the List of Executors | Deselect this option if you do not want to include the Secure SD-WAN Engine that detects the situation in the list of block list executors. |