The main objective of security policies is to reduce the intrusion success rate and detect...

If possible, do not reference the content security profile in all security policy rules whose action is permit, so as to facilitate quick check.

Files with unknown threats can be sent to the sandbox for inspection. The firewall periodically reads the inspection result from the sandbox and blocks subsequent traffic based on the inspection result.

To further reduce the attack surface, enable URL filtering and file blocking on the basis of the security policy that permits an application, so as to prevent users from accessing high-risk websites and downloading high-risk files.

Before setting security policies, the administrator must fully understand the applications, users, and contents on the network. This is necessary for properly setting security policies so that the firewall can check the corresponding user traffic.