Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 125 / 861

125 Establishing your network
Defining security gateway routing
4
Optionally, on the Description tab, type a more detailed description than you typed in the Caption
text box.
5 Click OK .
6 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
To create a service redirect for SGMI management
1 In the SGMI, in the left pane, under Assets, click Network .
2 In the right pane, on the Redirected Services tab, click New .
3
In the Redirected Service Properties dialog box, on the General tab, check Enable .
4 In the Protocol name drop-down list, select the protocol that you created for SGMI management.
5 In the Address text box, type the IP address to which management requests are directed from the
management host.
6 In the Netmask text box, type the netmask.
7 In the Redirected address text box, type the enclave security gateway’s IP address.
8 In the Redirected port text box, type 2456 .
9
In the Caption text box, type a brief description of the service redirect.
10 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
None.
Defining security gateway routing
A company’s internal network may consist of many smaller, private networks that connect to a larger
core network. When the security gateway is introduced into the corporate environment, it is normally
connected directly to the larger network. This lets the security gateway easily route packets to any
directly connected destination. However, for packets that are destined to hosts on smaller, private
networks, you must configure the security gateway so it knows where to send those packets. This is
accomplished by adding entries, either manually (static) or dynamically, to the security gateway’s
routing table.
Understanding static routing
The security gateway follows a process for routing TCP/IP packets that includes checking only directly
connected networks. If one of your smaller subnets is not directly connected to the same network as
the security gateway, and packets arrive destined for the smaller subnet, the security gateway sends
those packets to the default gateway unless it has the proper routing information. In most cases, the
security gateway’s default gateway is your ISP’s router or modem that supplies your Internet
connection, and this is clearly not where the packet was meant to go.
Service group Select the service group containing the SGMI protocol.