Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Viewing all articles
Browse latest Browse all 2577

Re: Unexpected traffic getting through SSG-350M to DMZ

$
0
0

The difference between VIP and MIP:

 

VIP is flexible port forwarding only sending the specified ports in the configuration and only in the direction configured.

 

MIP is for Mapped IP meaning a one-to-one bidirectional mapping of the outside ip address.   These simplify configurations because you don't need to create both an inbound policy plus and outbound source nat policy.

 

What traffic is permitted is further controlled by the security policy on top of these nat objects.

 


Viewing all articles
Browse latest Browse all 2577

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>