16.10 - Gateway Processing of Permissive Filters - Teradata Database

Teradata Database Security Administration

Product
Teradata Database
Release Number
16.10
Release Date
June 2017
Content Type
Administration
Security
Publication ID
B035-1100-161K
Language
English (United States)
  1. The Gateway processes each incoming IP address against the permissive filter deny element.
    1. The filter masks the incoming IP address under test with the mask from the deny element.
    2. The filter masks the IP address in the deny element with the same mask.
    3. If the two masked IP addresses match, the filter identifies the IP address under test as a candidate for denial. The filter then ends the deny phase of testing.
  2. The Gateway does allow-testing only if deny-testing identifies an IP address as a candidate for denial. If allow-testing does not override the denial, the Gateway rejects the IP.
    1. The filter masks the incoming IP address under test with the mask from the allow element.
    2. The filter masks the IP address in the deny element with the same mask.
    3. If the two masked IP addresses match, the filter allows the IP address under test to access the database and then ends the allow phase of testing.