Secure Computing sidewinder, Startup Manual

Page: 21 / 68

Chapter 2: Planning Considerations
Preparing your Quick Start Wizard responses
9
Which services do you want the appliance to allow?
Select the set of services to allow. The following options are available and
described in Table 1 on page 9:
•
Allow administrative services only
— If you select this option, the
appliance’s active rule group will contain only rules necessary for
administration. Other pre-configured rules appear on the Rules screen by
default, but are not enabled and therefore do not pass traffic.
•
Allow administrative and basic outbound Internet services — If you select
this option, the appliance’s active policy will include rules for administration
and a rule providing users access to the most commonly used Internet
services.
Table 1:
Initial active policy
Rule name Summary
Internet Services This rule is enabled if you select “Allow administrative and
basic outbound Internet services” during initial
configuration. The rule provides users access to the most
commonly used Internet services using a pre-configured
“Internet Services” service group. The Internet Services
rule regulates access to the following services:
• FTP
• HTTP
• HTTPS
• Ping
• Real Media
• RTSP
• Telnet
dnsp (names vary) Allows DNS clients in all burbs through to the external
burb resolvers.
Mail Mail processing
Login Console Allows administrators to log in directly at the appliance ,
using an attached keyboard and monitor.
Admin Console Allows administrators to connect to the
appliance
using
the Admin Console.
Passport Allows authentication to the Passport server and
facilitates the use of single sign-on authentication.
Deny All Denies all connections from any source burb to any
destination burb.