Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 192 / 861

192 Defining your security environment
Controlling full application inspection of traffic
)
CONNECT_DATA = (SID = ORCL))
(SOURCE_ROUTE = YES)
)
In this example:
■
ORCL is the DB ID.
■
firewall_interface_IP is the security gateway’s closest interface to the client.
■
Oracle_Database_IP is the IP address of the Oracle database server on the outside network.
Related information
None.
Controlling full application inspection of traffic
To configure the security gateway to pass specific kinds of traffic, you configure global settings for the
proxies associated with the protocols that pass the traffic. To use the protocols in rules, you add them
to service groups. This lets you configure protocol settings that are specific to each service group.
This section covers the following methods for controlling traffic:
■
Defining file control and access
■
Sending and receiving files
■
Controlling Internet-based data communications
■
Controlling Web traffic
■
Controlling news feeds
■
Synchronizing security gateway time
■
Supporting UNIX services
■
Handling streaming audio and video
■
Managing electronic mail
■
Enabling remote logon
■
Allowing ICMP traffic
Defining file control and access
You can configure the security gateway to control authorized users’s access to files and shares on the
protected network by using two of the security gateway’s proxies: the CIFS proxy and the NBDGRAM
proxy. Each of these proxies is configurable and can limit the extent to which users can add, open,
modify, and delete files and folders.
This section covers the CIFS and NBDGRAM proxies in greater detail, and provides the steps necessary
to configure the security gateway appropriately.
Understanding file control and access
The Common Internet File System (CIFS) protocol and its predecessor, System Message Block (SMB)
protocol, are the network foundation for many Microsoft applications. These applications include file
and print sharing, named pipes, network browsing, remote management, NT Domain, DCE RPC, and
DCOM. The CIFS/SMB proxy integrates Microsoft networking support into the security gateway
environment in a way that makes setup as easy and flexible as possible.