#Configuration Guide# IPS Network Security Policy for Inbound connection

Problem

You have one server Natted on internet to receive inbound connection from anyone on the web.

I didn't find a clear documentation on how to protect it using IPS rules, so I write one .. :-)

Network Layout

Internal Server IP: A.B.C.20

External Server IP: E.F.G.166

( just a little bit of obfuscation for some address bytes )

Target

I need to protect with IPS rules the server A.B.C.20 from inbound connection.

Solution

1. Define Nat Rules.

2. Define Access Rules.

remember to use real address on Destination Address.

3. Define IPS Object

4. Define Network Security Policy

Here is the trick -> you have to define internal IP address as it is done on Access Rules.

Then bound the object you created before.

Follow the standard way to apply the policy.

Here is the result and monitor security log.

Thanks for sharing

Thanks for sharing

Thanks for the valuable information.

Thanks for sharing

Thanks for sharing

Thanks for sharing

Your article has been adopted by Sangfor Community and rewarded with 4000 coins. Please check the "System" message on the homepage.