Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 116 / 861

116 Establishing your network
Deployment scenarios
Basic deployment
Figure 5-1 shows that the simplest deployment scenario requires the security gateway to have two
interfaces, each on a different LAN segment. The Security Gateway Management Interface (SGMI), that
manages the security gateway, is normally connected to the public Internet through a router. A
security gateway in this configuration is typically reserved for one-way traffic, especially if one of the
interfaces has direct access to a public network. Connection requests are usually initiated from the
protected network and destined for external services. If inbound access is enabled, it is not possible to
completely secure the protected network. You should not place mail or Web servers on the protected
network.
Figure 5-1 Basic deployment network scenario
Router
Security gateway
SGMI
192.168.0.5 192.168.0.6 192.168.0.7 192.168.0.8 192.168.0.9
192.168.0.1
172.16.0.2
172.16.0.1
10.1.1.1