Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 701 / 861

700 Field descriptions
Assets field descriptions
Associated tasks
The task that you can perform with this tab is:
■
“Optimizing the DNS proxy” on page 155
Proxy Properties: DNS—Start of Authority tab
The DNS proxy provides name resolution for computers both inside and outside your network without
compromising the privacy of your internal network topology.
The Proxy Properties: DNS dialog box lets you change DNS proxy settings; however, you should not
change default settings unless you completely understand the ramifications or have been instructed to
change these settings by Symantec Technical Support.
Associated tasks
The task that you can perform with this tab is:
■
“Optimizing the DNS proxy” on page 155
Table D-157
Proxy Properties: DNS—General tab
Field Description
Enable Indicates whether this option is enabled.
This option is checked by default.
Caption An optional, brief description of the DNS proxy.
The maximum length is 128 characters.
For longer descriptions, use the Description tab
Table D-158
Proxy Properties: DNS—Start of Authority tab
Field Description
Refresh interval Indicates a value to tell configured secondary name servers how often to check
with the system on the accuracy of the secondary name server’s DNS database.
If there is a discrepancy, a DNS zone transfer of information occurs between the
secondary/primary databases when this interval expires.
The default is 43200 seconds (12 hours).
Retry interval Indicates a retry interval (in seconds).
If the secondary server fails to reach the secondary/primary name server after the
refresh interval expires, then the secondary server tries to reconnect to the
secondary/primary again after the amount of time specified here. This value is
usually shorter than the refresh interval.
The default is 3600 seconds (one hour).
Expiration interval Indicates an expiration interval (in seconds).
If the secondary server fails to reach the secondary/primary name server in the
amount of time specified here, the secondary name server’s database expires. This
means it is assumed that the secondary database information is outdated and it
therefore stops giving out answers based on this database.
The default is 2678400 seconds (31 days).
Default time-to-live Indicates a value to represent how long lookup answers are cached by the name
servers and name clients that query the system for DNS lookups.
The configurable range is between 600 (10 minutes) and 86400 (24 hours).
The default is 3600 seconds (one hour).