About Policy Views

Fireware Web UI Policies Page

The policies included in your current Firebox configuration appear on the Firewall Policies and Mobile VPN IPSec Policies pages.

Screenshot of the Fireware Web UI Policies page

By default, Fireware Web UI sorts policies from the most specific to the most general. The order the policies appear in the list determines how traffic flows through the policies.

For more information about how to add policies, go to Add Policies to Your Configuration.

Policy Manager Policy Views

Policy Manager has two views: Large Icons and Details.In the default Details view, each policy is a row of information divided among several columns. You can see configuration information, such as source and destination addresses, assigned ports, policy-based routing, and application control settings, as well as whether notification, scheduling, and QoS/Traffic Management are configured. The Large Icons view shows each policy as an icon.

Screenshot of the Fireware Policy Manager Details View
Details View

Screen shot of the Fireware Policy Manager Large Icons View
Large Icons View

To change to the Large Icons view:

Select View > Large Icons.

This information appears for each policy:

Order

The order in which the policies are sorted, and how traffic flows through the policies. Policies are automatically sorted from the most specific to the most general. To manually select the order in which the policies are applied, you can switch to Manual-Order Mode.

To switch to Manual-Order Mode and change the policy order, from Fireware Web UI:

  1. Click Disable policy Auto-Order mode.
    A confirmation message appears.
  2. Click Yes to enable Manual-Order Mode.
  3. To change the order of policies:
  • Select one or more policies in the list and click Move Up or Move Down.
  • Select a policy and drag it to a new location in the Policy List.
  1. Click Save Policy Order.

To switch to Manual-Order Mode and change the policy order, from Policy Manager:

  1. Select View > Auto-order mode and remove the check mark from the Auto-order Mode option.
  2. Select a policy and drag it to a new location in the Policy List.

For more information on policy order, go to About Policy Precedence.

Action

The action taken by the policy for traffic that matches the policy definition. The symbols in this column also indicate whether the policy is a packet filter policy or a proxy policy, and the settings that are configured for the policy:

  • the Packet Filter Traffic Allowed icon — Packet filter policy; traffic is allowed
  • the Policy Denied icon — Packet filter policy; traffic is denied
  • the Packet Filter Disable icon — Disabled packet filter policy
  • the Proxy Traffic Allowed icon — Proxy policy; traffic is allowed
  • the Proxy Traffic Denied icon — Proxy policy; traffic is denied
  • the Proxy Disabled icon — Disabled proxy policy
  • the Application Control Enabled icon — Application Control is configured
  • Geolocation Enabled icon — Geolocation is configured
  • the QoS/Traffic Managment Enabled icon —Traffic Management/ QoS is configured
  • the Scheduling Enabled icon — Scheduling is configured
  • the Logging Enabled icon — Logging is enabled
  • the Notification Enabled icon — Notification is enabled

To see the details about the icons that appear in the Action column for a policy, you can hover over the icons and the list of enabled actions and definitions appears.

Screen shot of the icons definitions

Policy Name

The name of the policy.

For more information, go to Add Policies to Your Configuration.

Type

The protocol that the policy manages. Packet filters include the protocol name only. Proxies include the protocol name and -proxy. ALGs include the protocol name and -ALG.

From

The source addresses for this policy.

Src Port

The source port of the connection enabled for this policy.

To

The destination addresses for this policy.

Dst Port

Protocols and ports used by the policy.

PBR

The interface numbers that are used in the policy-based routing settings for the policy.

SD-WAN

The SD-WAN action that is used in the SD-WAN routing settings for the policy.

App Control

The Application Control action enabled for the policy.

For more information, go to Enable Application Control in a Policy.

Geolocation

The Geolocation action enabled for the policy.

For more information, go to Enable Geolocation in a Policy.

Tags

The policy tag that is applied to the policy. To filter the policies in the policy list by the applied policy tags, click the Policy Filter icon and apply a policy filter.

For more information, go to About Policy Tags and Filters.

Related Topics

About Policy Manager

Change Colors Used for Policy Manager Text

Add Policies to Your Configuration

About Policy Properties

Configure Source Port