Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 673 / 861

672 Field descriptions
Assets field descriptions
Associated tasks
The task that you can perform with this tab is:
■
“Configuring NAT pools” on page 362
S
Static NAT Pool Properties—Description tab
Optionally, provides an extended description. This information is useful to help track changes or it can
be used as criteria for searches.
The maximum length is 20,000 alphanumeric characters.
Redirected Services
Use service redirection to let outside users access information on servers behind the security gateway
without disclosing the security gateway’s addresses. If the virtual address is on the same subnet as the
security gateway’s real address, it automatically routes the packets using the address resolution
protocol (ARP). If the virtual address is not on the same subnet, add a static route on your Internet
router.
You can use service redirects as a way to do manual load balancing. For example, you could have two
RealAudio servers, and for subnet 1 redirect all the RealAudio traffic to that first server, and for subnet
2, redirect all that RealAudio traffic to the second server.
Note: If you want to use redirected services with clientless VPN for internal mail and Web servers,
there has to be two published IP addresses or the validation errors will occur. If clientless VPN is
enabled with the same external IP address, the security gateway does not know where to direct the
traffic: the clientless VPN Web server or mail server, or to the internal servers to which the service
redirect points.
Table D-120
Static NAT Pool Properties—General tab
Field Description
NAT Pool Name The maximum length is 256 characters.
Allowed characters are a-z, A-Z, numerals, periods (.), dashes (-), and underscores (_).
Do not include spaces in the name. The characters @,!,#,$,%,^,&,*,<,> and other reserved
characters are also invalid.
Use a name format such as symantecs.org.
Real Subnet Displays the subnet entity from which to choose as the real subnet source or destination of
the connection.
For use in a virtual client, select the real address of the host initiating the connection. If you
have not configured the host connection, you can configure one now.
NAT Subnet Displays the subnet entity from which to choose as the source or destination of the
connection.
If necessary, create a new subnet entity to serve this purpose.
For use in a virtual client, select the address of the virtual host. If you have not configured
the host connection, you can configure one now.
Caption An optional, brief description of the static NAT pool.
The maximum length is 128 characters.
For longer descriptions, use the Description tab.