Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 185 / 861

185 Defining your security environment
About service groups
10
Click OK .
11 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
12 After creating the service group, you can do the following:
■
To configure proxy settings for a protocol in the service group, on the Protocols tab, select the
protocol and click
Add .
■
To control traffic using the protocols in the service group, add the service group to a rule.
Related information
For further information related to this topic, see the following:
■
“Service Group Properties—General tab” on page 726
■
“Service Group Properties—Protocols tab” on page 727
■
“Service Group Properties—Additional Parameters tab” on page 727
■
“Controlling full application inspection of traffic” on page 192
■
“Using service groups to customize protocols for rules” on page 185
■
“Creating basic rules” on page 273
Using service groups to customize protocols for rules
Service groups let you customize protocols for certain rules without changing protocol behavior for
other rules.
To do this, you create a service group specifically for a rule or set of rules. After you add protocols to
the service group, you can configure parameters of the protocols specifically for their use in that
service group.
Table 6-5 lists protocols can be customized in a service group:
Table 6-5
Customizable protocols
Protocol Configurable parameters
CIFS File handling permissions such as read, write, and print.
See “Parameters for cifs—General tab” on page 728.
FTP Enabling of FTP puts and gets, and the ability to include additional commands.
See “Parameters for ftp—General tab” on page 729.
HTTP Enabling of uploads, HTTPS, DCOM over HTTP, FTP protocol conversion, and an external
Web proxy.
See “Parameters for http—Options tab” on page 730.
See “Parameters for http—Web Proxy tab” on page 731.
NNTP News permissions such as newsreader, posting, filter policy and cancel messages.
See “Parameters for nntp—General tab” on page 732.
POP3 Enabling of POP3 extensions such as the CAPA command and AUTH commands.
See “Parameters for pop-3—Advanced tab” on page 733.
realaudio and
realaudio_proxy Setting bandwidth limit.
See “Parameters for realaudio-proxy—General tab” on page 734.