So what is a security policy and what is the role of the security policy?
So what we are going to discuss here?
If you look at this diagram, so any time you want to.
Security policy, security policy, initially package comes in, if you check for this source and source
and destination zone.
OK, and then apply the security policy comes in the next one.
Both are allowed, specially created.
A separate session is created to check security policy.
So basically what these security policies are, I just need to explain it to you in a way.
But when when the traffic is if the traffic right now is going through from our our devices, if you
can see.
Right now, the traffic is going through.
So if you look at diagonal right now, the traffic is switching over, our traffic is switching over
from this interface to this interface.
There is no security policy has applied on these firewalls because this is we know Interzone.
But if anything, interesting policy, because these two are the same zun, actually.
Yes.
This is the version of my father.
This has no relevance in the military or just monitoring the traffic.
But what it is going through, this one, as you can see, because they are in the same zone, there
is no security policies applied.
And that is why you can see this traffic is still annoying.
And as you can see this, I can think this is just if I go to my monitor, I can see the traffic as
well.
OK, so interesting, because if you look at the policy on the firewall, the firewall policy, by default,
it has two policies.
One, if you look at this one, reform internal controls and default internal.
So if you look at this deep interest policy between.
It is actually allowed.
OK, but in terms of policy, when it's come from one interface to another interface, it is not allowed.
So, for example, right now, if we can go to.
I'm spending addresses to our DMV, so, my dear little thing, we already know that you can always
be a floater, only learned from you.
And if I want to because.
Because if I want to have you with your vote already know this 20, 20, 20.
So the traffic is coming through the firewall faster into this.
And this is a backup.
But the problem is because there is no Interzone policy available from the DMV.
That is why the traffic is denied and why you can't even as of now.
I will show you if.
Right, no, because there's really no one benefit from this.
Actually, what do we do not have any policy that actually I create a default policy and I say benign.
Lot.
So from anything to anything.
For any application.
Announcing the know.
And I'm reading this rule here, deny and long.
OK, so deny any laws which mean any policy, if the final does not have any rule, it should be denied
the traffic.
But that is what we are creating right now.
So any traffic to traffic, if there is no room, it should be denied.
I do see any logs nor in pushing through the device groups as well.
Because you pursue that device, he's going to be putting more emphasis on.
So let's see what happens in 2011 when.
The distrust should go to the firewall and firewall is dropping because I would have just wrote.
But because there is no rule existing anything you want to go to one to another room, you must need
to have a policy configure.
So this while this device is sending to 14.
OK, let's look at what happened.
Even my Interzone policy is also denied, right?
Because I have a room configured right now, I am saying if the room is not that, it should be denied.
Look.
I can think of a roots from Paloma.
And I said this rule.
Basically, this is on the top of the list because they deny Hallock.
And you can see she's denied any application today by of.
And you can see even now, I mean, our Internet interview in 2001 is also allowed.
Not only does that mean you see
this one, but also you see the other one is, well, 20/20 as well.
So you can see the standard to.
You see, because we do not have any who can forget it is dropping the traffic signal.
And because of this rule, we have convicted.
This will at I along.
OK, so this showing that he is not there, previously denied and now we have seen the logs as well,
it previously was silently dropping, but now we have a rules.
So you can see now then the government is going to 2020, 2014.
It is not allowed.
You see, this is not allowed if you try to go to.
You will see that that will be also denied HTP as well.
It's been 53.
It is totally denied, no.
That is dropped totally to open air traffic.
OK, this.
I think it's coming from 2003 to the military, and you can see through this definition, it is it is
denied because the is not existing.
So that is the concept of how the policy works.
OK, so you must have the conclusion you must need to have a rule from one to.