Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 686 / 861

685 Field descriptions
Assets field descriptions
Routes
A company’s internal network may consist of many smaller, private networks that connect to a larger
core network. When the security gateway is introduced into the corporate environment, it is normally
connected directly to the larger core network, which lets the security gateway easily route packets to
any directly connected destination. However, for packets that are destined to hosts on the smaller,
private networks, the security gateway must be told where to send those packets. This is accomplished
by adding entries, either manually (static) or dynamically, to the security gateway’s routing table.
IP Route Properties—General tab
You use the Route Properties dialog box to configure static routes for the security gateway.
Associated tasks
The task that you can perform with this tab is:
■
“Configuring static routes” on page 128
IP Route Properties—Description tab
Optionally, provides an extended description. This information is useful to help track changes or it can
be used as criteria for searches.
The maximum length is 20,000 alphanumeric characters.
Authentication Servers
To protect your corporate network, you must control who is granted access and how the security
gateway determines and verifies the identity of users requesting that access. This is most commonly
done through a security mechanism called authentication. The authentication process verifies the
identity of a user requesting access by contacting an authentication server, looking for a record that
matches the user’s credentials, and then challenging the user to enter the appropriate key phrase or
response.
The security gateway provides its own internal authentication server as well as the ability to leverage
your corporation’s existing Microsoft Active Directory, LDAP, RADIUS, RSA SecurID, or PassGo
Defender authentication systems.
Table D-138 IP Route Properties—General tab
Field Description
Enable Indicates whether this option is enabled.
This option is checked by default.
Destination Destination IP address of the route that you are defining. Use this field along with the netmask to
define whether this is a route to a single IP address (host) or a grouping of hosts (subnet).
Netmask Defines the scope of the IP address entered in the Destination field. Acceptable values for this
field include any integer value from 0 to 255 for each quad. The default value is 255.255.255.0.
Next hop IP address of the next-hop router. The next-hop router is where packets are directed by the
security gateway if it cannot determine how to route packets to the IP address entered in the
Destination field.
Caption An optional, brief description of the route.
The maximum length is 128 characters.
For longer descriptions, use the Description tab.