Secure Computing sidewinder, Startup Manual

Page: 43 / 68

Chapter 5: Managing your Sidewinder Appliance
Performing other post-startup tasks
31
Performing other
post-startup
tasks
Use the Sidewinder Administration Guide for instructions on how to create
access control rules and accomplish other tasks defined by your security
policy. The table below suggests a list of tasks that, depending on your site’s
configuration, may be beneficial starting points for implementing your policy.
Table 4: Suggested post-startup tasks
Task Notes Refer to...
Check for updates
and patches
If you have a support contract, you can
automatically set your Sidewinder to load
and install available patches. You can also
check for patches manually, or you can
periodically check the Secure Computing
web site for available patches and other
Technical Support information.
See the “General Maintenance
Tasks” chapter of the Sidewinder
Administration Guide .
Also check
www.securecomputing.com/goto/
updates
Configure the rule
elements, rules, and
rule groups
The
appliance
uses a set of rules to
determine the proxies and servers that
internal and external users will be allowed
to use.
See the following chapters of the
Sidewinder Administration
Guide
:
• “General Policy
Configuration”
• “Services”
• “Application Defenses”
• “Content Inspection”
• “Network Objects and Time
Periods”
• “Authentication”
Set up accounts for
other administrators
You may need more than one
administration user account on the system
if your site divides administrative tasks
among several administrators.
See the “Administrator Basics”
chapter of the
Sidewinder
Administration Guide
.
Reconfigure DNS to
Sidewinder Hosted
Using hosted DNS places the DNS
server(s) on appliance’s hardened
operating system and helps prevent
attacks against these servers from
penetrating your network.
See the “DNS (Domain Name
System)” chapter of the
Sidewinder Administration
Guide.
Configure your
internal mail server
to route
e-mail through the
appliance
How you do this depends on the e-mail
software you use internally. If your routing
directs outbound mail to the appliance, no
further configuration of your internal mail
server is required.
See your mail server’s
documentation for help.
More...