Create Interception Rule
================================================================================

.. image:: ./images/l3outbound-7-intercept-0.png
   :align: center

|

The **Interception Rule** determines which traffic to process. For an L3 Outbound topology, you will accept traffic on the client-facing interface that is destined for any IP address and any L4 port.


#. Leave the default **Destination Address/mask** value as ``0.0.0.0%0/0``.

#. Leave the default **Port** as ``0``.

#. In the **Ingress Network** section, select the client-side VLAN by either double-clicking on  **/Common/client-vlan** or selecting it and then clicking on the right-facing arrow button.

   .. image:: ./images/l3outbound-7-intercept-1.png
      :align: center


#. Leave the default values for the remaining sections:

   - **Protocol Settings**
   - **Security Policy Settings**
   - **Authentication**
   - **L7 Interception Rules**

   |

   .. image:: ./images/l3outbound-7-intercept-2.png
      :align: center


#. Click on the **Save & Next** button to continue.