Geo Policy - Exceptions
What can I do here?
Use this window to add exceptions to the Geo Policy. When traffic matches the conditions of the rule, the traffic bypasses inspection.
|
Getting Here - Security Policies > Shared Policies > Geo Policy > Exceptions
|
Rule Columns
- Profile - Name of the profile, or Any (indicating any profile that can match the rule conditions at a given time) to which the Exception will be applied.
- Source - Name or IP address of a gateway or other object which is the source of traffic, which should bypass inspection and be allowed; or Any, indicating that a specific source is not the basis of this rule.
- Destination - Name or IP address of a gateway or other object which is the destination of traffic, which should bypass inspection and be allowed; or Any, indicating that a specific destination is not the basis of this rule.
- Protection - Name of a specified protection to be excluded from inspection, or Any, indicating that specific protections are not the basis of this rule.
- Service/Port - Name of a service which should bypass inspection and be allowed; or Any, indicating that a specific service is not the basis of this rule.
- Install On - Name of a specific gateway to which this rule will be applied; or Any, indicating that the rule will be applied on all gateways that support Network Exception Rules (must be Check Point Security Gateway R70 or later).
- Comment - Free text about the exception.
Exception Rule Options
- Add a new Exception Rule to the profile: define network condition to bypass inspection. Opens the Add/Edit Exception Rule window.
- - Edit selected Exception Rule.
- Delete selected Exception Rule.