So why does netscreen have both "approve" and "deny" policies? I mean isn't everything that isn't approved automatically (logically) denied?
Netscreen 5gt
Jan 24, 2010
4 Replies
Assume you want to allow an IP range, but want to exclude one or more subranges.
cu
59cobalt
I guess that makes sense. The thing that got me was that when I put the thing into "home-work" mode it had a default set of four policies;
untrust to work =3D deny untrust to home =3D deny home to work =3D permit work to home =3D deny
Since the default is "deny" it seems that three of the four policies accomplish nothing.
I'm not familiar with Netscreen, but don't these policies *define* the default behavior?
cu
59cobalt
I'm happy now. All I need is...
home to untrust =3D permit work to untrust =3D permit
Join the Discussion
Have something to add? Share your thoughts — no account required.
Didn't find your answer?
Ask the community — no account required