About the IMAP-Proxy

1. Select Firewall > Firewall Policies.
2. Click Add Policy.
3. For the Select a policy type option, select Proxies.
4. From the first drop-down list, select IMAP-Proxy.
5. From the second drop-down list, select an IMAP proxy action.
6. Click Add Policy.

1. Click .
   Or, select Edit > Add Policies.
   The Add Policies dialog box appears.
2. In the Proxies folder, select IMAP-proxy.
3. Click Add Policy.
   The New Policy Properties dialog box appears.

On the Settings tab, you can set basic information about a proxy policy, such as whether it allows or denies traffic, create access rules for a policy, or configure policy-based routing, static NAT, or server load balancing. The Settings tab also shows the port and protocol for the policy, as well as an optional description of the policy. You can use the settings on this tab to set logging, notification, automatic blocking, and timeout preferences.

• Specify the access rules for the policy. This includes:
• The disposition for connections the policy applies to. This can be Allowed, Denied, or Denied (send reset).
• The sources and destinations for connections the policy applies to, configured in the From and To lists.

For more information about access rules, see Set Access Rules for a Policy.

• Configure Policy-based routing, if multi-WAN is enabled or if you have configured a virtual BOVPN interface.
  For more information, see Configure Policy-Based Routing.
• In the To list, configure static NAT to route connections to a server based on the port.
  For more information, see Configure Static NAT.
• In the To list, configure server load balancing for increased scalability.
  For more information, see Configure Server Load Balancing.
• Enable Intrusion Prevention Service (IPS). IPS is enabled for all policies by default.
  For more information, see Enable or Disable IPS for a Policy.
• Enable time and bandwidth usage quotas.
  For more information, see About Quotas.
• If you set the policy disposition to Denied or Denied (send reset), you can select Auto-block sites that attempt to connect to automatically block sites that try to use IMAP.
  For more information, see Block Sites Temporarily with Policy Settings.
• You can specify a custom idle timeout, which is the maximum length of time that a connection stays active when no traffic is sent through the connection.
  For more information, see Set a Custom Idle Timeout.
• Configure settings for log messages and notifications.
  For more information, see Set Logging and Notification Preferences.
• To enable content inspection, select an option from the TLS Support drop-down list.
  For more information, see IMAP-Proxy: TLS.

TLS Support for the IMAP-Proxy is available in Fireware OS v12.1 and higher.

If Application Control is enabled on your Firebox, you can set the action this proxy uses for Application Control.

1. Select the Application Control tab.
2. From the Application Control Action drop-down list, select an application control action to use for this policy, or create a new action.
3. (Optional) Edit the Application Control settings for the selected action.
4. Click Save.

For more information, see Enable Application Control in a Policy.

If you have enabled Traffic Management, on the Traffic Management tab, you can select the Traffic Management actions for the policy. You can also create new Traffic Management actions. For more information about Traffic Management actions, see Define a Traffic Management Action in v11.9 and Higher and Add Traffic Management Actions to a Policy.

You can choose a predefined proxy action or configure a user-defined proxy action for this proxy. For more information about how to configure proxy actions, see About Proxy Actions.

To configure the proxy action:

1. Select the Proxy Action tab.
2. From the Proxy Action drop-down list, select the proxy action to use for this policy.
   Or, to create a new proxy action, select Clone the current proxy action.
   For information about proxy actions, see About Proxy Actions.
3. Configure the proxy action settings. For more information, see Configure the IMAP Proxy Action.
4. Click Save.

On the Scheduling tab, you can specify an operating schedule for the policy. You can select an existing schedule or create a new schedule.

1. Select the Scheduling tab.
2. From the Schedule Action drop-down list, select a schedule.
   Or, to create a new schedule, select Create New and configure the settings as described in the topics Create Schedules for Firebox Actions and Set an Operating Schedule.
3. Click Save.

The Advanced tab includes settings for NAT, QoS, multi-WAN, ICMP, and connection rate options.

To edit or add a comment to this proxy policy configuration, type the comment in the Comment text box.

For more information on the options for this tab, see:

• Apply NAT Rules (Both 1-to-1 NAT and dynamic NAT are enabled by default in all policies.)
• Set the Sticky Connection Duration for a Policy
• Set ICMP Error Handling
• Set Connection Rate Limits
• Enable QoS Marking and Prioritization in a Policy

To set access rules and other options, select the Policy tab.

• Specify the access rules for the policy. This includes:
• The disposition for connections the policy applies to. This can be Allowed, Denied, or Denied (send reset).
• The sources and destinations for connections the policy applies to, configured in the From and To lists.

For more information about access rules, see Set Access Rules for a Policy.

• In the To list, configure static NAT to route connections to a server based on the port.
  For more information, see Configure Static NAT.
• In the To list, configure server load balancing for increased scalability.
  For more information, see Configure Server Load Balancing.
• Configure Policy-based routing, if multi-WAN is enabled or if you have configured a virtual BOVPN interface.
  For more information, see Configure Policy-Based Routing.
• Select the Proxy action to use for this policy.
• Click to view and edit the proxy action. For more information, see Configure the IMAP Proxy Action.

The Properties tab shows the port and protocol the policy applies to. On the Properties tab, you can configure these options:

• To edit or add a comment to this policy configuration, type the comment in the Comment text box.
• To define the logging settings for the policy, click Logging.
  For more information, see Set Logging and Notification Preferences.
• If you selected Denied or Denied (send reset) in the IMAP-proxy connections are drop-down list on the Policy tab, you can select Auto-block sites that attempt to connect to automatically block sites that try to use IMAP.
  For more information, see Block Sites Temporarily with Policy Settings.
• You can specify a custom idle timeout, which is the maximum length of time that a connection stays active when no traffic is sent through the connection. For more information, see Set a Custom Idle Timeout.
• To enable content inspection, select an option from the TLS Support drop-down list.
  For more information, see IMAP-Proxy: TLS.

TLS Support for the IMAP-Proxy is available in Fireware OS v12.1 and higher.

 You can also configure these options in your proxy definition:

• Set an Operating Schedule
• Add Traffic Management Actions to a Policy
• Set ICMP Error Handling
• Apply NAT Rules (Both 1-to-1 NAT and dynamic NAT are enabled by default in all policies.)
• Set Connection Rate Limits
• Enable QoS Marking and Prioritization in a Policy
• Set the Sticky Connection Duration for a Policy, if Multi-WAN is enabled