Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 320 / 861

Chapter
9
Preventing attacks
This chapter includes the following topics:
■
About preventing attacks
■
Blocking suspicious or malicious traffic with IDS
■
Protecting your network resources from virus infections
■
Increasing productivity by identifying spam email
■
Making your network more secure by hiding addresses
■
Enabling protection for logical network interfaces
About preventing attacks
This chapter describes the controls that the security gateway provides to help you secure your
organization against unwanted intruders and virus attacks.
The security gateway offers a level of protection that includes defining filters, enabling protection for
logical network interfaces, configuring address transforms, an antivirus server, and intrusion
detection and prevention software.
You can configure these features in the Security Gateway Management Interface (SGMI).
Blocking suspicious or malicious traffic with IDS
The security gateway uses an intrusion detection and prevention component to identify intrusions and
respond to attacks. You can modify the IDS/IPS policies used to detect malicious traffic to suit your
environment, and apply the policies to the security gateway components.
This section covers the following topics:
■
About intrusion detection and prevention
■
About IDS/IPS policies
■
Creating IDS/IPS policies
■
Applying IDS/IPS policies
■
Managing intrusion events
■
Managing portmap settings