background image

Quick Start Guide

6

3

Remove and label the diskette, and store it in a secure location for as long 
as any EFW NIC remains in the domain for this Policy Server.

Importing the “No sniffing, no spoofing” Pre-defined 
Policy and Assigning it to the Default Device Set

After you have added the appropriate license-activation keys, you can import 
or create policies to assign to your EFW NICs. In this section you will import a 
single pre-defined policy (the “No sniffing, no spoofing” policy) and assign it 
to the existing default device set. After this policy is assigned to the default 
device set, any NICs that automatically register with the Policy Server receive 
the “No sniffing, no spoofing” policy because these NICs are automatically 
placed in the default device set upon registration. 

To import the “No sniffing, no spoofing” pre-defined policy, follow the 
steps below.

1

From the 

Main

 menu, select 

Import Policy/Rule set

. The Import Policy/Rule 

Set window appears.

2

Select 

Policy

 and click 

Next

.

3

Click 

Browse

 

and navigate to 

Program Files 

-> 

3Com Corporation

 -> 

3Com 

EFW

 -> 

predefined-policies-rulesets.xml

. Click 

Next

. A list of the policies 

contained in the file appears.

4

Select the 

No sniffing, no spoofing

 pre-defined policy and click 

Next

A summary window appears, showing the policy you selected.

5

Click 

Import

. A message appears indicating whether the import was 

successful. 

6

Click 

Finish

.

After you have imported the “No sniffing, no spoofing” policy, you can assign 
it to the default device set by following the steps below. 

1

In the Management Console, click the 

Device Sets 

tab in the bottom left 

portion of the window.

2

Click 

Default Device Set

 in the tree-view frame. An information window 

for the default device set appears in the working frame.

3

Click the Policy drop-down list, and select 

No sniffing, no spoofing policy

.

4

Click 

Save

.

Summary of Contents for 3CR990

Page 1: ...3Com Embedded Firewall Software for the 3CR990 Network Interface Card NIC Family Quick Start Guide http www 3com com http www 3com com registration frontpg pl 09 2110 000 Published December 2001...

Page 2: ...ges in the product s and or the program s described in this documentation at any time If there is any software on removable media described in this documentation it is furnished under a license agreem...

Page 3: ...ecovery diskette 5 Importing the No sniffing no spoofing pre defined Policy and Assigning it to the Default Device Set 6 Installing and Registering an EFW NIC 7 Verifying NIC Registration 8 Changing t...

Page 4: ......

Page 5: ...information for expanding your EFW system to best suit your security needs What You Will Need Before you install the EFW software you will need A computer to host the Policy Server and Management Cons...

Page 6: ...w provide instructions for installing a Policy Server and Management Console on a single system using the Typical installation method 1 Insert the 3Com product CD in the appropriate drive the Installa...

Page 7: ...s offered on this screen 2 Select Confirm Create New Domain 3 Enter a domain name in the Domain Name field The domain name is used only as a reference to assist you in identifying a particular domain...

Page 8: ...w system are as follows Login admin Password admin 3 Select the Policy Server that you just created from the Policy Server list 4 Click Connect The Embedded Firewall Management Console window appears...

Page 9: ...upon creation of a new EFW domain After installing your first policy server in an EFW domain it is critical to make a copy of the files named public key and server keystore from your installation Sav...

Page 10: ...fing pre defined policy follow the steps below 1 From the Main menu select Import Policy Rule set The Import Policy Rule Set window appears 2 Select Policy and click Next 3 Click Browse and navigate t...

Page 11: ...ry on the computer that will receive the EFW NIC installation on a computer on which a 3Com 3CR990 NIC is installed NOTE You may assign any policy to the default device set The No sniffing no spoofing...

Page 12: ...w frame The NIC should be listed in the default device set 4 If desired remove the temporary directory created for the NIC installation package For information on other installation methods refer to t...

Page 13: ...indows 2000 Standard rule set you can create a sample policy by following the steps in the section below Creating a Policy In this section you will create a sample policy called the No IP Initiation p...

Page 14: ...include information about what the policy does or when to use it for example the bulleted information provided at the beginning of this section 6 The access control list ACL initially contains only t...

Page 15: ...evious section A device set is a collection of EFW devices that are associated with a specific policy You can define any number of device sets and assign EFW devices to any one of those device sets To...

Page 16: ...ion policy To ensure that the policy is functioning as expected the following steps attempt to connect to the Internet by initiating the TCP protocol HTTP which should be denied by the policy being en...

Page 17: ...de Expanding Your EFW Configuration Now that you have a basic EFW system configured and running you can expand your configuration as needed to best suit your organization s security needs The followin...

Page 18: ......

Reviews: