Administrator's Guide - Kerio Software Archive

Chapter 7
Traffic Policy
Traffic Rules belongs to of the basic Kerio Control configuration. All the following settings are
displayed and can be edited within the table:
• security (protection of the local network including the Kerio Control host from Internet
intrusions
• IP address translation (or NAT, Network Address Translation — technology which
enables transparent access of the entire local network to the Internet with one public
IP address only)
• access to the servers (services) running within the local network from the Internet
(port mapping)
• controlled access to the Internet for local users
Traffic policy rules can be defined in Configurations → Traffic Policy → Traffic Rules. The rules
can be defined either manually (advanced administrators) or using the wizard (recommended).
It is recommended to create basic traffic rules and later customize them as desired. Advanced
administrators can create all the rules according to their specific needs without using the
wizard.
7.1 Network Rules Wizard
In current version of Kerio Control, the traffic rules wizard is available only in Administration
Console. To run the wizard, click on the Wizard button under Configuration → Traffic Policy
→ Traffic Rules.
The network rules wizard demands only the data that is essential for creating a basic set of
traffic rules. The rules defined in this wizard will enable access to selected services to the
Internet from the local network, and ensure full protection of the local network (including the
Kerio Control host) from intrusion attempts from the Internet. To guarantee reliable Kerio
Control functionality after the wizard is used, all existing rules are removed and substituted
by rules created automatically upon the new data.
Note: The existing traffic policy is substituted by new rules after completing the entire process
after confirmation of the last step. This means that during the process the wizard can be
stopped and canceled without losing existing rules.
77