About the Outgoing Policy

The Outgoing policy is a packet filter policy that is automatically added to your Firebox configuration when you run the Quick Setup Wizard to set up your device and create a basic device configuration file. The Outgoing policy allows all TCP and UDP connections from any trusted or optional source on your network to any external network. Because it is a packet filter policy, not a proxy policy, the Outgoing policy does not filter content when it examines the traffic through your Firebox.

If you remove the Outgoing policy from your device configuration file, you must add policies to your configuration that allow outbound traffic. You can either add a separate policy for each type of outbound traffic you want to allow, or you can create a custom packet filter for the specific ports necessary for outbound connections you want to allow from your network.

For more information about the TCP-UDP proxy, go to About the TCP-UDP-Proxy.

The Outgoing policy does not allow connections that use protocols other than TCP or UDP. This includes protocols such as ICMP, ESP, GRE, and RSVP. To allow or deny connections that use non-TCP-UDP protocols, you must add a separate policy that applies to that traffic.

Related Topics

About Policies

About the TCP-UDP-Proxy

About the Firewall Policies page

About Policy Precedence

Add Policies to Your Configuration

About Policy Manager

About Proxy Policies and ALGs