Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 285 / 861

284 Controlling traffic at the security gateway
Understanding and using rules
8
Under Select the protocols and settings to apply content filter scanning, do any of the following:
■
To enable HTTP, check HTTP, and then check the HTTP restrictions you want to enable.
■
To enable newsgroups, check NNTP, and then in the Newsgroup profile drop-down list, select
the newsgroup profile.
9 Click OK .
10 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“Rule Properties—General tab” on page 589
■
“Configuring a single computer with a host network entity” on page 160
■
“Redirecting connections to unpublished addresses with service redirections” on page 364
■
“Creating service groups” on page 183
Configuring HTTP, FTP, and mail (SMTP and POP3) rules with the Firewall Rule
Wizard
The Firewall Rule Wizard lets you configure HTTP, FTP, SMTP, and POP3 rules for your security
gateway.
These are among the most commonly needed rules and the wizard simplifies configuration so that you
can begin passing traffic immediately.
Prerequisites
None.
To configure HTTP, FTP, and mail services with the Firewall Rule Wizard
1
In the SGMI, on the Tools menu, click Firewall Rule Wizard .
2 When warned that the wizard might modify current rules, click Yes to confirm that you want to run
it.
3
In the Firewall Rule Wizard panel, click Next .
4 In the Optional Security Gateway Configuration panel, do one or more of the following:
■
To configure mail services for your security gateway, check SMTP mail services and/or POP3
mail services .
■
To configure HTTP services for your security gateway, check HTTP services .
■
To configure FTP services for your security gateway, check FTP services .
5 Click Next .
6
If you checked SMTP mail services in step 4, in the SMTP Options panel, do one or more of the
following:
Mail server IP address or
domain name Type the IP address or fully-qualified domain name of your mail server.
This is usually an internal mail server that receives and sends mail for your
company domain.