Symantec 4400 Series Installation Manual Download

Page: 69 / 100

Developing a pre-installation security plan

Filling out worksheets

Note:

Over time, you will likely refine these permissions. You should make

periodic updates to this list.

Web service information

Use the following section to define information about your Web services.

To define your Web services

Will you be using a Web server?

Telnet

HTTP

Other

Table A-3

TCP/IP services (Continued)

Group

Authentication

Access times

_____ Yes

_____ No

Summary of Contents for 4400 Series

Page 1: ...Symantec Clientless VPN Gateway 4400 Series Installation Guide Supported Platforms Models 4420 and 4460 ...

Page 2: ...ission of Symantec Corporation 20330 Stevens Creek Blvd Cupertino CA 95014 Trademarks Symantec the Symantec logo and Norton AntiVirus are U S registered trademarks of Symantec Corporation LiveUpdate LiveUpdate Administration Utility Symantec AntiVirus and Symantec Security Response are trademarks of Symantec Corporation Other brands and product names mentioned in this manual may be trademarks or r...

Page 3: ... for current information on Support Programs The specific features available may vary based on the level of support purchased and the specific product that you are using Licensing and registration If the product that you are implementing requires registration and or a license key the fastest and easiest way to register your service is to access the Symantec licensing and registration site at www s...

Page 4: ...e link Customer Service is available to assist with the following types of issues Questions regarding product licensing or serialization Product registration updates such as address or name changes General product information features language availability local dealers Latest information on product updates and upgrades Information on upgrade insurance and maintenance contracts Information on Syma...

Page 5: ... Turning on the power for model 4420 13 About model 4460 13 Connecting model 4460 to the network 14 Connecting the power cord to models 4460 14 Turning on the power for the model 4460 15 Chapter 3 Appliance setup and initial system configuration Before you begin initial setup 17 Front panel layout 19 Front panel controls 20 Example network diagram 22 Using the network setup worksheet 23 Network se...

Page 6: ...ect product and contact information 40 Plan for your license file 41 Obtaining your license file 42 Organizing your license files 42 Using the Symantec License Request Maintenance Web site 44 Activating your license files 44 Uploading your license files 50 Removing license files 51 Explanation of the appliance licensing and maintenance 51 Obtaining a license file 51 Basic license types 51 Maintena...

Page 7: ...Package License 77 C OpenSSL Library License 77 D SSLeay License 77 E The PHP license version 3 0 77 F Q Public License Version 1 0 78 G Berkeley DB Software Copyrights Conditions and Disclaimers 78 H Libpng Library Requirements Copyright and Disclaimer 78 I Linux Loader Requirements Copyright and Disclaimer 78 J OpenLDAP Public License Version 2 7 78 K SSH Implementation Requirements Copyrights a...

Page 8: ...C Troubleshooting About troubleshooting 86 Accessing troubleshooting information 86 Appendix D Specifications and safety About this appendix 88 Product specifications 88 Safeguard instructions 89 Product certifications 91 ...

Page 9: ...nts list About the Symantec Clientless VPN Gateway 4400 Series The Symantec Clientless VPN Gateway is a Secure Sockets Layer SSL based dedicated appliance that provides the complete security essential for enabling universal enterprise remote access The Symantec Clientless VPN Gateway 4400 Series supports the following end user clients Internet browsers Table 1 1 User access browser support Platfor...

Page 10: ...la 1 5 and Netscape v4 5 or later Mac Internet Explorer v5 5 or later Windows Mobile 2003 Internet Explorer Palm v5 x Web Pro v3 0 Unix Netscape v7 x Table 1 1 User access browser support Continued Platform Browser Table 1 2 Document structure Chapter Title Content Chapter 2 Installing the appliance Tells you how to do a stand alone or rack mount install of the Symantec Clientless VPN Gateway 4400...

Page 11: ...nfiguring end point clients maintaining the server and the user interface It is provided in PDF format Checking the components list After carefully unpacking the Symantec Clientless VPN Gateway 4400 Series appliance compare the kit contents with Table 1 3 to ensure that you have received all ordered components Appendix B Legal agreements Lists all Symantec product legal agreements Appendix C Troub...

Page 12: ...OM Contains the following items Appliance restore partition Adobe Acrobat Reader All documentation for this product is provided in PDF format Printed documents are noted Symantec Clientless VPN Gateway 4400 Series Installation Guide also printed Symantec Clientless VPN Gateway 4400 Series Administrator s Guide Symantec Clientless VPN Gateway 4400 Series Quick Start Cards for the 4420 and 4460 also...

Page 13: ... information about installing the appliance connecting it to the network and turning on the power Before you start you should have a pre installation security plan See Developing a pre installation security plan on page 55 Note Read the installation instructions before connecting the system to its power source You can install the Symantec Clientless VPN Gateway 4400 Series either free standing or ...

Page 14: ...ris to provide sufficient air flow 2 Ensure that the power source is adequate and that the outlet is located within reach of the supplied power cord without stretching or putting strain on the cord Warning Do not use an extension cord to supply power to this unit 3 After cabling the unit into the network position the cables away from foot traffic Mounting in a rack The following rack mounting inst...

Page 15: ... the appliance towards the front or the rear of the case 3 Secure the mounting brackets to the equipment rack About model 4420 This section describes the back panel of the Symantec Clientless VPN Gateway model 4420 Model 4420 offers two active 10 100 Fast Ethernet ports There are four inactive ports for future expansion Figure 2 1 shows the location back panel features for model 4420 Figure 2 1 Mo...

Page 16: ...ernet into int1the outside network connection 7 Table 2 1 Model 4 420 back panel feature Location Feature Description 1 Cooling fans Maintains proper operating temperature Ensure that the ventilation holes in the front and back are not blocked 2 Power socket Connection for AC power cord 3 top Power indicator Shows if unit is turned on 3 bottom Master power switch Turns the appliance on or off 4 Se...

Page 17: ...the Symantec Clientless VPN Gateway 4400 Series See Connecting model 4420 to the network on page 12 The appliance has powered up properly when the following things happen The hard disk spins the fans turn on and the LEDs and LCD screen on the appliance light up A number of status messages and Symantec CVG 5 0 display on the LCD screen when the appliance completes its start process About model 4460...

Page 18: ...r cord Use the location numbers from Figure 2 2 to refer to the back panel mentioned in each step Table 2 2 Model 4460 back panel Location Feature Description 1 top Master power switch Turns the appliance on or off 1 bottom Power socket Connection for AC power cord 2 Cooling fan Maintains proper operating temperature Ensure that the ventilation holes in the front and back are not blocked 3 Power r...

Page 19: ... unit Turning on the power for the model 4460 Turn on the power by pressing the master power switch 1 top on the back of the Clientless VPN Gateway appliance model 4460 The appliance has powered up properly when the following things happen The hard disk spins up the fans turn on and the LEDs and LCD screen on the appliance light up A number of status messages and Symantec CVG 5 0 display on the LC...

Page 20: ...16 Installing the appliance About model 4460 ...

Page 21: ...nagement Interface Connecting to the appliance Configuring your Clientless VPN Gateway appliance Restoring the software Before you begin initial setup This chapter describes the initial set up and LCD configuration of the Clientless VPN Gateway appliance which includes getting the appliance set up and running For information on configuring the appliance through the GUI see the Symantec Clientless ...

Page 22: ...llation process a success Initially you need the IP address and netmask of the Clientless VPN Gateway network interface through which the appliance will be managed You can use the Clientless VPN Gateway appliance without a license file for a 30 day evaluation period At any point during those 30 days use the online license file generator from the Symantec licensing and registration Web site at http...

Page 23: ...eters such as system and network IP addresses Figure 3 1 Symantec Clientless VPN Gateway 4400 Series front panel Table 3 1 describes the elements of the front panel and how they work Table 3 1 Front panel descriptions Location Feature Description 1 LCD Displays the Clientless VPN Gateway software version number and system monitoring information You can monitor appliance status modify configuration...

Page 24: ... shows the front panel controls 3 Status indicators The outside network activity indicator blinks when there is traffic on the outside network interface int1 of the model 4420 This feature is disabled on the model 4460 The inside network activity indicator blinks when there is traffic on the inside network interface int1 of the model 4420 This feature is disabled on the model 4460 The power indica...

Page 25: ...3 2 Front panel controls and how they function Buttons Function Up and down v buttons Increment and decrement the current number displayed on the LCD or to move to the previous menu item up button or to the next down button menu item Left and right buttons Move across the LCD panel or to move to the previous menu item left button or to the next right button menu item e Enter Launches the System Me...

Page 26: ...N Gateway is managed by a client computer with a browser Supported browsers include Microsoft Internet Explorer version 6 or later or Netscape version 7 or later You browse to the specific appliance interface and then type a user name and password to log onto the Security Gateway Management Interface Figure 3 3 Example Clientless VPN Gateway appliance typical network ...

Page 27: ...ateway appliance installed at your site Network setup worksheet User input during initial setup To configure an interface for appliance management you need the following Interface IP address_____________________________________ Netmask________________________________________________ Default Gateway_________________________________________ Symantec Clientless VPN Gateway appliance output during ini...

Page 28: ...tor s Guide for more information You must configure the second interface using the SGMI or CLI See the Symantec Clientless VPN Gateway 4400 Series Administrator s Guide Configuring the management interface The following procedure let you configure the management interface of the appliance from the LCD panel on the front of the appliance After you finish this procedure you can connect to the SGMI o...

Page 29: ...he display Use the left and right buttons to move between the fields of the IP address The selected field is surrounded by brackets Use the up and down buttons to change the number in the field that is selected 9 Press e 10 Under Default Gateway enter the default gateway IP address Each octet of the netmask address is a separate field in the display Use the left and right buttons to move between t...

Page 30: ...nformation Displaying system information Once you complete the initial network appliance setup the LCD screen enters a monitoring mode that it remains in during normal system operations When in monitoring mode the appliance LCD displays system information related to the health and status of the appliance This system updates approximately every second You can determine the status of your system wit...

Page 31: ...on 1 Network The system prompts you to enter or change network settings To continue to the next system menu entry press either the down button or the right button 2 Reboot The system prompts you to select Yes or No No is selected by default To reboot use a button to move the cursor to Yes and press e 3 Shutdown The system prompts you to confirm system shutdown Select Yes or No Press e again to ent...

Page 32: ... following information User name admin and password you received when you set up the appliance List of all the required IP addresses Fill out the worksheets in Appendix A to gather your information If you have your license files you can upload them on SGMI Server tab License option or you can use the 30 day evaluation optional See Using the Symantec License Request Maintenance Web site on page 74 ...

Page 33: ...front LCD panel controls Unlocking the front LCD panel controls You can unlock the LCD panel and associated navigation buttons with your admin password but it locks again after 60 seconds of inactivity To unlock the front LCD panel controls for a longer period of time you must use the SGMI To unlock the front LCD panel controls 1 On the SGMI on the Server tab in the left pane select Network Access...

Page 34: ...way displays the CLI prompt See Command Line Interface CLI features on page 32 Running the Quickstart Wizard Optional The Clientless VPN Gateway appliance has a Quickstart Wizard that runs from the CLI It displays a sequence of questions to help you set up the basic network parameters of the appliance The Quickstart Wizard allows you to configure the hostname DNS information and a quick demonstrat...

Page 35: ...ion password from the LCD setup Clientless VPN Gateway Fully Qualified Domain Name Determine if you are using DHCP To run the quickstart wizard 1 Power on the Clientless VPN Gateway 2 Open a command line session to the Clientless VPN Gateway appliance 3 Log on using the default administrator account at the setup login prompt type admin 4 At the password prompt type your admin password The default ...

Page 36: ...l hosts The Clientless VPN Gateway creates a simple rule and assigns the rule to officeRole this rule allows the demo user and other members of the officeRole to access the host through the user interface 11 When the Quickstart Wizard is complete it displays Quickstart has finished 12 Use the PING command to PING another computer on the LAN from the Clientless VPN Gateway to verify the connection ...

Page 37: ...ossible completions press tab again to see a list Example To display a list of all objects press tab twice without entering data Configuring the Ethernet port You can reconfigure the Clientless VPN Gateway internal Ethernet port int0 from the command line interface The the Clientless VPN Gateway internal Ethernet port int0 is first configured during the LCD setup See Performing the initial applian...

Page 38: ...command remove any pre defined information type the following command ip delete ip 172 16 0 1 Command completed successfully ip delete ip 192 168 0 24 Command completed successfully The IP delete command will disable any remote SSH administration sessions 6 To verify that the interface information was deleted type the following command ip show Command completed successfully 7 To create a new IP de...

Page 39: ...rity Gateway Management Interface instead of using the command line interface as shown here See the Symantec Clientless VPN Gateway Administrator s Guide for more information Adding the default gateway 1 On your console computer to display the routing rules type the following command route show Command completed successfully The InterfaceID number is the Ethernet port number as labelled on the Cli...

Page 40: ...ppliance is required you can boot this CD ROM in a computer connected to the appliance Note Before you use this procedure contact Symantec Technical Support as this operation results in the complete overwriting of your existing appliance configuration All configuration data is lost For information on preserving your configuration settings see the Symantec Clientless VPN Gateway Administrator s Gui...

Page 41: ...he power using the power switch 5 Ensure that the PC that you use to restore the system is set to boot from the CD ROM drive 6 Insert the appliance IDE CD ROM into the CD ROM drive 7 When the program runs you are prompted to accept the Symantec Software License Agreement and directions for the procedure also displays 8 While pressing and holding down the s button on the front panel controls turn o...

Page 42: ...figuration Restoring the software 12 Remove the CD ROM and restart your computer to return it to normal service 13 Turn on the appliance and perform the initial setup process again See Performing the initial appliance network setup on page 24 ...

Page 43: ... addition it covers a general explanation of licensing and maintenance and how it applies to your product Getting started with your 30 day grace period Each appliance requires a license to operate As a minimum you must purchase a base license with each appliance you purchase Once you received the license certificate you must activate the license and receive a license file The license file is loade...

Page 44: ...rticular appliance If you have placed orders for other Symantec products you may find that the license serial numbers appear intermingled on the same Serial Number Certificate For example if you ordered one appliance you won t have to worry about separating out numbers If you ordered more than one appliance your serial numbers will be combined in the Serial Number Certificates and must be separate...

Page 45: ...n for your license file When your license file is emailed to you the only identifying information you receive is in the subject line of the email The subject line contains one of the serial numbers included inside the license file You must check your records and verify to which appliance the license email applies and rename the file accordingly You should create a distinguishable naming convention...

Page 46: ...ail and associated attachment that you receive from Symantec with a specific appliance You should create a folder structure to collect and sort the license files you receive with a naming convention that helps you identify which file goes with which appliance Your license file email includes a feature serial number in the subject line You should rename your license file attachment to associate it ...

Page 47: ...e file Table 4 1 License File Organization Worksheet I Certificate number II Appliance serial number III Symantec System ID number IV Base Symantec Clientless VPN Gateway license Part codes Description License sessions Serial number Base license 50 Base maintenance V VPN sessions Additive Part codes Description License sessions Serial number ...

Page 48: ...o continue using the product Activating your license files To activate your license you must have the base Software Serial Number Certificate This is the first level of information you are prompted for from the licensing Web site Note The license file you generate applies to one appliance only If you are increasing the number of sessions for this appliance have those serial numbers ready as well W...

Page 49: ...to https licensing symantec com 2 Under Supported Languages select your language 3 In the Licensing and Registration page under Enter Serial Number in the Serial Number text box type your base software serial number This is the serial number found on the base Software Serial Number Certificate for the base license ...

Page 50: ...tem ID is required to activate the product on a specific machine You can find the Symantec System ID using the Symantec Gateway Management Interface on the Server tab on the left pane License menu option under Obtain New Licenses For The Symantec Clientless VPN Gateway Warning The Symantec System ID requires the parenthesis and must look like 4 E978A321 Do not omit the parenthesis In the Serial Nu...

Page 51: ...inserts new fields above the ones you have already filled in You can now input any additional serial numbers you may have You can click add as many times as you need to add all of your serial numbers 7 When you are finished click submit 8 Under Please enter your Appliance Serial Number in the Appliance Serial Number text box type the appliance serial number You can find the appliance serial number...

Page 52: ...n the First Name text box type the first name of your technical contact In the Last Name text box type the last name of your technical contact In the Work Phone text box type the phone number of your technical contact In the Email Address text box type the email address of the technical contact If you have an additional contact fill in the information under Contact 2 ...

Page 53: ...nd products you have registered Under License Registration confirm your email address and Symantec System ID Under Support Registration confirm your maintenance serial number and the two support contacts for your product Under Appliance Registration confirm your hardware serial number name company name company address work phone and email address for a company contact responsible for this product ...

Page 54: ...ce Note Once you receive rename and store your license files keep a back up of these files in a safe place If you purchase additional licenses for this appliance in the future you should follow these same steps for the new licenses and associated serial numbers Note that old serial numbers are not reentered Multiple license files are applied to a single appliance and licenses are additive Uploadin...

Page 55: ...rt Explanation of the appliance licensing and maintenance Symantec Clientless VPN Gateway 4400 Series usage is controlled by a licensing scheme Obtaining a license file When you purchase a license Symantec provides you with a software Serial Number Certificate See Obtaining and organizing license serial numbers on page 40 Basic license types Each appliance needs a base license which includes 50 co...

Page 56: ...clude Business hour telephone support Upgrade insurance which includes an entitlement to any new versions of the appliance software released by Symantec during the term of the contract Advanced replacement of failed hardware If the appliance hardware fails during the term of the contract and this failure is confirmed by Symantec Symantec ships during normal business hours a replacement unit within...

Page 57: ...te these two licenses you are in violation of your license Load balancing license bundles Load balancing bundles are available to build a cluster of machines which can support more concurrent sessions than a single machine The licenses for each machine have been significantly discounted under the condition that the licenses may not be separated and run on machines which are not connected to the sa...

Page 58: ...54 License setup About Symantec Clientless VPN Gateway 4400 Series licenses ...

Page 59: ...Appendix A Developing a pre installation security plan This chapter includes the following topics About developing a security plan Defining your security policy Educating users Filling out worksheets ...

Page 60: ...olicy to guard the valuable resources and information of your organization Ideally your security policy should be captured in a document that describes your organization s VPN needs and concerns Creating this document is the first step in building an effective overall system and should be done prior to installation Your security plan details the implementation of your security policy Based on the ...

Page 61: ...for the security gateway you are installing should be only one part of your overall security policy The security gateway offers the best protection against uninvited entry into your network However the Symantec Clientless VPN Gateway 4400 Series cannot guard against entry by people who obtain valid authentication credentials any more than a sophisticated lock can stop a thief in possession of the ...

Page 62: ...rk security to protect private information intellectual property and your business plans Notifying affected users Before implementing policies notify the user community of your proposed policies Doing so in advance can prevent unnecessary frustration on the part of your users For instance if you plan to limit Web services to a single server during specific hours let this be known to the affected g...

Page 63: ...s will be contacted To define your existing organization 1 Does your organization have a security policy If you checked No refer to the first part of this chapter for information relating to the development of a security policy 2 Do you plan to establish special groups or users with different levels of access or control that other groups and users will not have 3 Do you plan to establish subnets u...

Page 64: ...hat form of authentication will be used for remote access to company resources 11 Do you have other security gateways on your network now Table A 1 Administrator names Name Email Phone Pager _____ Yes _____ No _____ Yes _____ No ______________________________________________________________________ ______________________________________________________________________ _____ User name password ____...

Page 65: ...0 Series 2 Record the Symantec System ID for the appliance This is used for licensing See Using the Symantec License Request Maintenance Web site on page 74 The System ID is a decorated Host ID Before installation ensure the host network connections are configured and tested properly Verify that you can ping the network interfaces of the server from clients on the same network 3 Record the number ...

Page 66: ...n Name Services DNS types and names of domains on your network and making a list of protocols used that need to pass through your security gateway To collect TCP IP address information 1 Do you currently run Domain Name Services DNS on your network 2 What type of domain structure is in use at your site 3 What type of name service do you provide _____ Yes _____ No _____ Yes _____ No _______________...

Page 67: ...blicly registered IP addresses 8 List the address ranges you currently use in your network ____________________________________________________________ ____________________________________________________________ 9 List the protocols you use in your network ____________________________________________________________ ____________________________________________________________ 10 Will you be using...

Page 68: ...IP services Use the following tables to define all the allowed TCP IP services in your network To define allowed TCP IP services 1 Use Table A 2 and check the access type if any you will allow for the following services 2 Use Table A 3 to list your TCP IP services _____ Internal server _____________________ _____ External news server ________________ Table A 2 Allowed TCP IP access type Access gro...

Page 69: ...missions You should make periodic updates to this list Web service information Use the following section to define information about your Web services To define your Web services 1 Will you be using a Web server Telnet HTTP Other Table A 3 TCP IP services Continued Group Authentication Access times _____ Yes _____ No ...

Page 70: ...Use Table A 4 to list the names of any special services you wish to pass through the security gateway _____ Internal to the security gateway _____ External to the security gateway Name _________________ Address ____________________ _____ Yes _____ No Proxy server name _____________ Address ______________ _____ Yes _____ No ____________________________________________________________________ ______...

Page 71: ...d groups to which you plan to write rules to allow access Use Table A 5 to list all entity identifications allowed Use Table A 6 to list all user identities allowed Table A 5 Entity identification IP address DNS name Type Internal external Table A 6 User identification User name Account name Group name ...

Page 72: ...IP address and network mask Use Table A 7 to create a list of all internal servers Your internal network consists of at least the security gateway host and a router Use Table A 8 to list your security gateway host system addresses Use Table A 9 to list your router IP addresses Table A 7 Internal network servers DNS name services Mail server Web server Other server Service Host name IP address Subn...

Page 73: ...n also include external servers such as an external Web server Use Table A 10 to list all external network servers Table A 9 Router IP addresses Router IP addresses Table A 10 External network servers DNS name services Mail server Web server Other server Service Host name IP address Subnet mask ...

Page 74: ...70 Developing a pre installation security plan Filling out worksheets ...

Page 75: ...ants the licensee the right to use the software on the associated appliance The LINUX operating system used in Symantec Clientless VPN Gateway 4400 Series is covered by the GNU General Public License GPL and the Library General Public License LGPL SYMANTEC CLIENTLESS VPN GATEWAY APPLIANCE LICENSE AND WARRANTY AGREEMENT SYMANTEC CORPORATION AND OR ITS SUBSIDIARIES SYMANTEC IS WILLING TO LICENSE THE...

Page 76: ...ntend to use in connection with the Appliance and activate such Software functionalities as designated by Symantec prior to using the Appliance While Symantec continues to own the Software You will have certain rights to use the Software after Your acceptance of this license This license governs any releases revisions or enhancements to the Software that the Licensor may furnish to You as well as ...

Page 77: ...tilize updated virus definitions content filtering products utilize updated URL lists some firewall products utilize updated firewall rules vulnerability assessment products utilize updated vulnerability data etc collectively these are referred to as Content Updates You may obtain Content Updates for each Software functionality which You have purchased and activated for use with the Appliance for ...

Page 78: ...k of loss passes to You such as loss or damage during shipment ii acts of God including without limitation natural acts such as fire flood wind earthquake lightning or similar disaster iii improper use environment installation or electrical supply improper maintenance or any other misuse abuse or mishandling iv governmental actions or inactions v strikes or work stoppages vi Your failure to follow...

Page 79: ...WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS YOU MAY HAVE OTHER RIGHTS WHICH VARY FROM STATE TO STATE 4 Disclaimer of Damages SOME STATES AND COUNTRIES INCLUDING MEMBER COUNTRIES OF THE EUROPEAN ECONOMIC AREA DO NOT ALLOW THE LIMITATION OR EXCLUSION OF LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES SO THE BELOW LIMITATION OR EXCLUSION MAY NOT APPLY TO YOU TO THE MAXIMUM EXTENT PERMITTED BY APPLICAB...

Page 80: ...export of the Appliance to Cuba North Korea Iran Iraq Libya Syria or Sudan is prohibited 7 General If You are located in North America or Latin America this Agreement will be governed by the laws of the State of California United States of America Otherwise this Agreement will be governed by the laws of England This Agreement and any related License Module is the entire agreement between You and S...

Page 81: ...cluded Software including any modifications thereto only upon request at a nominal charge If You are interested in obtaining a copy of such source code please contact Symantec Customer Service at one of the above addresses for further information Third party attributions A Apache Software License v 1 1 This product includes software developed by the Apache Software Foundation http www apache org B...

Page 82: ...ght 1992 1998 Werner Almesberger Copyright 1999 2001 John Coffman All rights reserved I Linux Loader Requirements Copyright and Disclaimer LInux LOader LILO program code documentation and auxiliary programs are Copyright 1992 1998 Werner Almesberger Copyright 1999 2001 John Coffman All rights reserved J OpenLDAP Public License Version 2 7 Copyright c 1995 Tatu Ylonen ylo cs hut fi Espoo Finland Co...

Page 83: ... IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE O Inetd Requirements Copyright and Disclaimer Copyright c 1990 1993 The Regents of the University of California All rights reserved P Ncurses Requirements Copyright and Disclaimer Copyright c 1998 1999 2000 Free Software Foundation Inc Q Graphviz License Agreement Version 1 2D This product contains certain software code or other information AT T Softwa...

Page 84: ... rights we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights These restrictions translate to certain responsibilities for you if you distribute copies of the library or if you modify it For example if you distribute copies of the library whether gratis or for a fee you must give the recipients all the rights that we gave you You must make s...

Page 85: ...he term modification Source code for a work means the preferred form of the work for making modifications to it For a library complete source code means all the source code for all modules it contains plus any associated interface definition files plus the scripts used to control compilation and installation of the library Activities other than copying distribution and modification are not covered...

Page 86: ...true is especially significant if the work can be linked without the Library or if the work is itself a library The threshold for this to be true is not precisely defined by law If such an object file uses only numerical parameters data structure layouts and accessors and small macros and small inline functions ten lines or less in length then the use of the object file is unrestricted regardless ...

Page 87: ...tribution of the Library by all those who receive copies directly or indirectly through you then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Library If any portion of this section is held invalid or unenforceable under any particular circumstance the balance of the section is intended to apply and the section as a whole is intended ...

Page 88: ...OR ANY OTHER PARTY WHO MAY MODIFY AND OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE BE LIABLE TO YOU FOR DAMAGES INCLUDING ANY GENERAL SPECIAL INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE LIBRARY INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE LIBRARY TO OPERATE WITH A...

Page 89: ...Appendix C Troubleshooting This chapter includes the following topics About troubleshooting Accessing troubleshooting information ...

Page 90: ...oduct Support enterprise click Continue 4 On the Support enterprise page under Technical Support click knowledge base 5 Under select a knowledge base scroll down and click Symantec Clientless VPN Gateway 4400 Series 6 Click on your specific product name and version 7 On the knowledge base page for Symantec Clientless VPN Gateway 4400 Series do any of the following On the Hot Topics tab click any o...

Page 91: ...Appendix D Specifications and safety This chapter includes the following topics About this appendix Product specifications Safeguard instructions Product certifications ...

Page 92: ...3 2 cm 17 in Height 4 45 cm 1 75 in 8 9 cm 3 50 in Weight 6 17 kg 13 6 lb 10 3 kg 22 7 lb Network interfaces 6 10 100 8 10 100 1000 User interface 2 line x 16 character LCD 2 line x 16 character LCD Operating temperature range 41 to 91 F 5 to 35 C 32 to 104 F 0 to 40 C Storage temperature range 32 to 104 F 0 to 40 C 32 to 104 F 0 to 40 C Operating humidity 10 80 non condensing 10 80 non condensing...

Page 93: ...tion The power supply cord is used as the main disconnect device Ensure that the socket outlet is located or installed near the equipment and is easily accessible Caution Français Le cordon d alimentation sert d interrupteur général La prise de courant doit être située or installée à proximité du matérial et offrir un accès facile Caution Deutsch Zur sicheren Trennung des Gerätes vom Netz ist der ...

Page 94: ...ard the power cord must be connected to a properly wired and earthed receptacle Warning To avoid a shock hazard any equipment to which this product will be attached must also be connected to properly wired receptacles Warning Electrical current from power telephone and network cables is hazardous Operating the unit in an equipment rack If you plan to install the Symantec Gateway Security 4400 Seri...

Page 95: ...u Canada VCCI CE FCC part 15B Class A EMC EN55022 1998 Class A Emissions Radiated Conducted EN61000 3 2 2000 Harmonics EN61000 3 3 1995 Flicker EN61000 4 2 1995 ESD 8 kV AD 4 kV CD EN61000 4 3 2002 RF Immunity 10 V m 80 MHz 1 GHz EN61000 4 4 1995 EFT Burst 1 kV Power 5 kV Signal Cables EN61000 4 5 1995 Surge 1 kV L L 2 kV L G EN61000 4 6 1996 Conducted RF Immunity 3V 150 kHz 80 MHz EN61000 4 11 19...

Page 96: ...92 Specifications and safety Product certifications ...

Page 97: ...ed 7 E electric shock 89 F factory reset 27 front panel controls description 19 locking 29 front panel layout 19 G GNU library general public license 80 H high availability license bundles 53 I inside interface configuring 24 installing model 4420 power cord 13 model 4460 power cord 14 rack mount 10 stand alone 9 IP addresses checklist 63 L LCD display 19 LEDs See status indicators license certifi...

Page 98: ...et switch 14 power socket 12 14 power switch 12 14 product component list 7 product specifications 88 proxies checklist 64 R regulatory requirements 91 removing license file 50 51 replacing CD ROMs 8 reset 27 restoring operating system 36 root password 23 S safety electric shock 89 equipment rack 90 Security Gateway Management Interface See SGMI security plan checklist 56 worksheets 59 serial cons...

Page 99: ...oting 86 Turn 13 turning on model 4420 13 model 4460 15 U unlocking front panel controls 29 USB port modem connection 12 14 user documentation 7 using locked front panel controls 29 using system menu 27 W WEB service checklist 65 WinRAR 41 WinZip 41 worksheets network setup 23 security planning 59 ...

Page 100: ...4 Index ...

Search results

Summary of Contents for 4400 Series

Reviews:

Related manuals for 4400 Series

Brands by name

Popular brands

Symantec 4400 Series, Installation Manual

Search results

Summary of Contents for 4400 Series

Reviews:

Related manuals for 4400 Series

Brands by name

Popular brands