What Is a Rule Group in NSM?

A rule group in NetScreen-Security Manager (NSM) is a user-defined grouping of rules within the Zone rule-base. Combining rules into a rule group can help better manage rules. The following are rule-base management features:

• Combining VPN rules in a single rule group, or combining all rules that manage traffic from a specific interface on the FW/VPN device
• Adding, editing, and deleting rule groups -- Deleting a rule group also deletes all rules within that group
• Creating multiple rule groups -- Each rule group can have a maximum of 40,000 rules

  NSM supports one level of rule groups. You cannot create a rule group within a rule group.

An example of a rule group may include the following rules:

• VPN rules or VPN links
• Traffic management from a specific zone or interface on the FW/VPN device
• Device or device group specification
• Attack or AV protection
• VoIP traffic management with GTP objects