WSM User Guide - WatchGuard Technologies

Configuring Policy PropertiesSetting advanced propertiesYou use the Advanced tab of the Edit Policy Properties dialog box to set a policy schedule, implementQuality of Service (QoS) settings, apply NAT rules, configure ICMP error handling for this policy, and set acustom idle time-out.Setting a scheduleYou can set an operating schedule for the policy. You can use the schedule templates in the Scheduledrop-down list or create a custom schedule. For information, see the “Basic Configuration Setup” chapterin this guide.Note that schedules can be shared by more than one policy.Applying a Quality of Service (QoS) actionIf you have Fireware® Pro on your Firebox, you can assign a Quality of Service action to the policy. Usethe button on the far right to create a new QoS action. After you create a new QoS action, it appears inthe QoS drop-down list. For more information, see “Creating QoS Actions” on page 323.Note that these actions can be shared by more than one policy.Applying NAT rulesYou can apply Network Address Translation (NAT) rules to a policy:1-to-1 NATWith this type of NAT, the Firebox uses private and public IP ranges that you set, as described in“Using 1-to-1 NAT” on page 116.Dynamic NATWith this type of NAT, the Firebox maps private IP addresses to public IP addresses. Select UseNetwork NAT Settings if you want to use the dynamic NAT rules set for the Firebox. Select Alltraffic in this policy if you want to apply NAT to all traffic in this policy.You also have the option to set a dynamic NAT source IP address for any policy that uses156 WatchGuard System Manager