Chapter 19 Virtual Domains : Virtual Domains in NAT/Route mode : Example NAT/Route VDOM configuration : Configuring the vdomA VDOM : Adding the vdomA security policy
  
Adding the vdomA security policy
You need to add the vdomA security policy to allow traffic from the internal network to reach the external network, and from the external network to internal as well. You need two policies for this domain.
To add the vdomA security policy - web-based manager
1. In Virtual Domains, select vdomA.
2. Go to Policy > Policy.
3. Select Create New.
4. Enter the following information and select OK:
Source Interface/Zone
port4
Source Address
Ainternal
Destination Interface/Zone
port1
Destination Address
all
Schedule
Always
Service
ANY
Action
ACCEPT
5. Select Create New.
6. Enter the following information and select OK:
Source Interface/Zone
port1
Source Address
all
Destination Interface/Zone
port4
Destination Address
Ainternal
Schedule
Always
Service
ANY
Action
ACCEPT
To add the vdomA security policy - CLI
config vdom
edit vdomA
config firewall policy
edit 1
set srcintf port4
set srcaddr Ainternal
set dstintf port1
set dstaddr all
set schedule always
set service ANY
set action accept
set status enable
next
edit 2
set srcintf port1
set srcaddr all
set dstintf port4
set dstaddr Ainternal
set schedule always
set service ANY
set action accept
set status enable
end