Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 655 / 861

654 Field descriptions
Policy field descriptions
Policy Parameters
The Policy Parameters window lets you enable features like password publishing, assign IDS/IPS
policies to packet filters and connections made using Web VPN and port forwarder, and configure SSL
cipher suites.
Associated tasks
The tasks that you can perform with this window include:
■
“Including host names in log entries” on page 495
■
“Using packet filters as forwarding filters” on page 294
■
“Applying IDS/IPS policies to forward filters” on page 323
Require Symantec
Client Firewall Requires that clients have Symantec Client Firewall installed and enabled.
This option is checked by default.
Require auto-protect Requires that the antivirus auto-protect feature is enabled.
This option is checked by default.
Require recent
system scan Requires that a client system antivirus scan is performed periodically.
This option is checked by default.
Last scan within
(days) If Require recent system scan is checked, type the number of days between automatic
system scans.
The default is 7 days. The maximum allowable value is 99 days.
Require latest
version of scanning
engine Requires that the client has the latest version of the antivirus scanning engine.
This option is unchecked by default.
Require latest virus
definitions Requires that the client has the latest virus definitions.
This option is checked by default.
Query servers every
... minutes Number of minutes between antivirus server queries.
The default is 10 minutes. The maximum allowable value is 9999 minutes.
Primary antivirus
server Specifies the primary antivirus server.
The maximum length is 50 characters.
User name User name for primary antivirus server access, if required.
Password Password for primary antivirus server access, if required.
Secondary antivirus
server Specifies the secondary antivirus server.
The maximum length is 50 characters.
User name User name for secondary antivirus server access, if required.
Password Password for secondary antivirus server access, if required.
Allow access to
antivirus and/or
LiveUpdate servers
when non-compliant Allows antivirus server and LiveUpdate server access to non-compliant clients.
This option is checked by default.
LiveUpdate server Specifies the LiveUpdate server to connect to for system updates.
Make sure that the LiveUpdate server is accessible through the security gateway.
Table D-100
Client Compliance window (Continued)
Field Description