Device Level WAN Stateful Firewall

About this task

WAN stateful firewall is a common feature used in branch networks to provide network level defense, typically by blocking unsolicited traffic from outside of the branch. It can also be used to control of branch traffic into and out of a router, such as allowing or denying traffic between local subnetworks, allowing or denying branch clients from going to a specific IP or range of IPs, or allowing or denying specific network protocols. To enable network policy firewall overrides and make adjustments to the firewall filtering rules for this device, perform the following steps:

Procedure

Select On to enable overrides to the network policy firewall settings for a router.
Use the up and down arrows to change the order of the existing filtering rules in the table.
Rules are processed in order from top to bottom.
Select Add to add a new filtering rule.
Select a source address from the available options.
Select On (the default) to support auditing, accounting, and monitoring.
Repeat these steps to add additional filtering rules.
Use the up and down arrows to arrange your new rules in the table according to how you want to to be processed.
Select Save.
To delete firewall rules, select the check box next to the rule.
Select the delete icon.