Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 191 / 861

191 Defining your security environment
Understanding proxies
For example, if the firewall interface is 192.168.1.1, you would enter:
cman=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=tcp)(HOST=192.168.1.1)(PORT=1630)
(QUEUESIZE=3)))
2 Optionally, for enhanced security, add a rule to the cman_rules list.
This is especially important if the Oracle Net9 Connection Manager Proxy is asked to listen on the
outside IP address.
Read Appendix B in the Net9proxy.doc file before attempting to modify the rule list, for example:
cman_rules=(rule_list=
(rule=(src=firewall_interface_IP)(dst=Oracle_Database_IP)(srv=ORCL)(act=accept))
(rule=(src=Oracle_Client_IP)(dst=Oracle_Database_IP)(srv=ORCL)(act=accept))
To configure the security gateway to allow communication to Oracle Net9 Connection Manager
Proxy on port 1630
1 In the SGMI, in the left pane, under System, click Administration .
2
In the right pane, on the Advanced Options tab, do the following:
■
Select portcontrol.enable_tcp_ports , and then click Properties.
■
In the Advanced Option Properties dialog box, on the Value tab, in the Value text box, type
1630.
3 Click Add .
4 Click OK .
5 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“Advanced Options Properties—General tab” on page 765
■
“Advanced Options Properties—Value tab” on page 766
■
“Configuring the remote Oracle SQL *Plus client” on page 191
Configuring the remote Oracle SQL *Plus client
When you set up the security gateway to work with Oracle Net9 Connection Manager Proxy, you also
have to set up a remote Oracle SQL *Plus client.
Note:
The Oracle SQL *Plus client must be installed on a remote client prior to doing this procedure.
Prerequisites
Complete the following tasks before beginning this procedure:
■
“Opening the Oracle Net9 Connection Manager proxy port” on page 190
To configure the remote Oracle SQL *Plus client
1 On your remote Oracle SQL *Plus client, open the tnsnames.ora file, and edit it to specify the
network host address and database information as shown below.
ORCL.world =
DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = firewall_interface_IP)(PORT = 1630))
(ADDRESS = (PROTOCOL = TCP)(HOST = Oracle_Database_IP)(PORT = 1521))