About Security PoliciesFirebox Vclass User Guide 161Policy actionsA policy action prompts the Firebox Vclass appliance toperform certain management tasks with data that matchesqualifying traffic specifications. Your appliance can takeone or more of the following actions:• Protect your private networks from unauthorizedintrusions, if the traffic is external.• Perform IP address swapping through dynamic andstatic Network Address Translation.• Encrypt and authenticate your data for securetransmission through insecure networks.• Enable various types of load balancing for designatedservers.• Provide various types of network address translationfor internal networks.• Apply Quality of Service (QoS) controls to qualifyingdata traffic.You can often combine several actions in the same policy,as described in “Policies with multiple actions” onpage 163.Types of policiesYou can use Vcontroller to create as few or as many policiesas are needed by your particular network, with each policyapplying one or more compatible actions to qualifying traf-fic. The range of policies includes the following:FirewallFirewall policies block unwanted traffic (includinghacker attacks) while permitting valid traffic toproceed to a destination inside your network. Youcan start with the default firewall policy that blocksevery type of traffic, and then insert other policiesthat permit access by certain types of traffic tospecific network destinations.
