analysis live filter dest-addr

Configure packet filtering options based on the destination address.

Syntax

[no] analysis live filter dest-addr dns {accept} external-ip {drop} private {drop} proxy {accept}

Parameters

no

Use the no form to disable the packet filtering options.

dns accept

Accept packets going out from the live interface, destined for the live mode DNS server.

external-ip drop

Drop packets going out from the live interface, destined for the network of the live external IP address.

private drop

Drop packets going out on live interface, destined for private addresses.

proxy accept

Accept packets going out the live interface, destined for the live mode proxy.

Example

The following example accepts packets going out from the live interface that are destined for the live mode DNS server:

hostname (config) # analysis live filter dest-add proxy accept

User role

Admin

Command mode

Config

Supported appliances

This command is supported on the following appliances running the specified releases or later: