Summary

This chapter discussed the GUI provided for access to VPN-1/FW-1. It looked at the process to create each of the possible object types available for use within an enterprise security policy, including network objects, servers, and resources. You should now feel comfortable creating objects to support your own implementations .

This chapter also discussed the SmartDashboard, and saw how to use these newly created objects to create rules. These rules will be the embodiment of your written security policy, and are the definitions that FW-1 enforces. It also demonstrated how FW-1 has included something called an implied rule, how to edit them, and how to view them. With regards to editing, this chapter also covered the various methods of editing the rule base, including adding new rules, deleting existing ones, and rearranging the rule base with cut/paste functions.

Global Properties and how these settings impact the behavior of the firewall was also discussed. This chapter finished with a look into some of the additional tools provided with VPN-1/FW-1. The SmartView Tracker and the SmartView Status tools were introduced, as well as the SmartUpdate tool.