What Configurations Convert From FireWall-1
The following limitations apply when converting FireWall-1 configurations to SunScreen. Some object-types and rules migrate with no difficulty, while others do not. FireWall-1 rules that do not migrate, contain an operation (on the Source, Destination, or Service) that SunScreen does not support. The following table lists what will and what will not migrate from FireWall-1 to SunScreen.
Table 8-1 What Converts From FireWall-1|
Does Convert |
Does Not Convert |
|---|---|
|
Host objects |
Resources |
|
Group objects |
NAT mappings |
|
Network objects |
Gateway objects |
|
Most rules |
Encryption and authentication information and rules |
|
|
Domain objects |
|
|
Router objects |
|
|
Switch objects |
|
|
Logical objects |
|
|
FW-1 services or user defined services |
|
|
Install objects |
|
|
Rules containing any object or service that will not migrate |
|
|
Using an object type as an object name |
- © 2010, Oracle Corporation and/or its affiliates