Nokia IP40 Security Platform User’s Guide v1.1 957 Setting Up the Nokia IP40 SecurityPlatform Security PolicyThis chapter describes how to set up the Nokia IP40 security policy. It includes the followingtopics: Setting the Firewall Security Level Configuring Virtual Servers Creating Firewall Rules Allow and Block Rules Deleting Rules Defining an Exposed HostSetting the Firewall Security LevelYou can define the firewall security level on the Firewall page. This level can be adjusted tothree states: Low-level security—enforces basic control on incoming connections, while permitting alloutgoing connections.At this level, all inbound traffic is blocked to the external IP address except for ICMPechoes. All outbound connections are allowed. Medium -level security—enforces strict control on all incoming connections, whilepermitting safe outgoing connections.When this level is selected, all inbound traffic is blocked. All outbound traffic is allowed tothe Internet except for windows file sharing. High level- security—enforces strict control on all incoming and outgoing connections.All inbound traffic is blocked. Restricts all outbound traffic except for the following:Web traffic (HTTP, HTTPS), email (IMAP, POP3, SMTP), FTP, news groups, Telnet, DNS,IPSEC IKE, and VPN traffic.The default security level is medium. For information on customizing your security policy, see“Customizing Nokia IP40 Security Platform Security Policy” on page 98.
