For the Exinda appliance to determine traffic direction, all internal subnets should to be defined as internal Network Objects. After identifying the subnets as internal network objects, as traffic passes through the appliance the Exinda appliance determines packet direction based on the following rules:
Rule | Result |
---|---|
Packet's source IP matches an Internal Network Object AND Packet's destination IP DOES NOT match an Internal Network Object |
Packet is classified as outbound traffic. |
Packet's source IP DOES NOT match an Internal Network Object AND Packet's destination IP matches an Internal Network Object |
Packet is classified as inbound traffic. |
Packet's source IP matches an Internal Network Object AND Packet's destination IP matches an Internal Network Object |
Traffic flowing from the lower IP to the higher IP is classified as outbound traffic. Traffic flowing from the higher IP to the lower IP is classified as inbound traffic. |
Packet's source IP DOES NOT match an Internal Network Object AND Packet's destination IP DOES NOT match an Internal Network Object |
Traffic flowing from the lower IP to the higher IP is classified as outbound traffic. Traffic flowing from the higher IP to the lower IP is classified as inbound traffic. |
|
|