Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 280 / 861

279 Controlling traffic at the security gateway
Understanding and using rules
12
Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For information, see the following:
■
“Rule Properties—Antivirus tab” on page 595
■
“Rule Properties—Antispam tab” on page 597
■
“Rule Properties—Content Filtering tab” on page 599
■
“Rule Properties—Miscellaneous tab” on page 593
■
“Adding antivirus protection to a rule” on page 347
■
“Adding antispam protection to a rule” on page 358
■
“Adding content filtering protection to a rule” on page 316
Using advanced service parameters for nonstandard services
The Advanced Services tab lets you enter special parameters for services that are not included as part
of the standard services.
For example, most configuration options for the HTTP protocol and proxy are made available through
the SGMI. You can use the HTTP Proxy Properties dialog box to configure options such as HTTP
timeout parameters and additional HTTP connection ports. When HTTP is included in a service group,
you can use the HTTP Parameters dialog box to specify ports for HTTP over SSL and an external Web
proxy. However, there are additional HTTP configurations, such as preventing the security gateway
from being used as a proxy, that you perform by entering a command on the Advanced Service tab.
The syntax must be correct: contact Symantec Technical Support for the exact syntax required for the
special rule service you are creating. Some examples are shown in the following procedure.
To add an advanced service parameter to a rule, you must first create a service group for the protocol
to which the parameter applies, and select it as the service group for the rule.
Prerequisites
Complete the following tasks before beginning this procedure:
■
“Creating basic rules” on page 273
■
“Creating service groups” on page 183
To use advanced service parameters for nonstandard services
1 In the SGMI, in the left pane, under Policy, click Firewall .
2
In the right pane, on the Rules tab, highlight the rule to which you want to add an advanced service
parameter, and then click
Properties .
3 On the Advanced Services tab, in the Parameter text box, type the syntax that enables the
advanced service, and then click
Add .