Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 183 / 861

183 Defining your security environment
About service groups
4
Click OK .
5 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“IDS Portmap Configuration Properties dialog box—Protocols tab” on page 645
■
“Managing portmap settings” on page 331
About service groups
To use a protocol in a rule, you must associate it with a service group and then use that service group in
the rule. The protocols in the service group indicate the kinds of traffic the rule controls.
Service groups serve several functions:
■
Service groups let you organize access rights. For example, you can create one service group with
only FTP enabled, another with FTP, Telnet, and HTTP access, and a third with full access. You can
then create rules that allow varying degrees of access as appropriate.
■
You can configure settings for the protocols and apply them to the service group. These settings are
specific to the service group, letting you set different properties for the same protocol as it is used
in different service groups.
You can create a service group before creating the rule, or create the service group as you create the
rule.
Creating service groups
You can use a predefined service group or you can create your own.
Prerequisites
None.
Table 6-4 Pre-defined service groups
Service group Protocols
All <all>
You can edit the All service group but you cannot remove the <all>
protocol, which provides access to all services.
FTP ftp
IPsec_Pass_Through ESP, isakmp, udp_encap
News nntp
POP3 pop-3
SMTP smtp
Telnet telnet
Web http