3Com 3C16111 - SuperStack 3 Firewall Web Site Filter, Руководство пользователя

Страница: 114 / 214

114 C
HAPTER
8: A
DVANCED
S
ETTINGS
c In the Proxy Web Server Port field enter the number
8080
d Click Update to save your changes.
3 No configuration is necessary on the client machines. The Firewall will
intercept any HTTP requests for external URLs and will forward the traffic
to the Webcache.
Specifying Intranet
Settings
In some cases, it is desirable to prevent access to certain resources by
unauthorized users on the LAN. For example, a school’s administration
office may be placed behind the Firewall to restrict access to its
computers by users in the Student Computer Lab. Similarly, an
organization’s accounting, research, or other sensitive resources may be
protected against unauthorized access by other users on the same
network. By default, protected LAN users can only access the Internet and
no other devices between the WAN port and the Internet. To enable
access to the area between the Firewall’s WAN port and the Internet
(referred to as the intranet), you must specify intranet settings for the
Firewall.
To achieve internal firewalling, connect a second Firewall between the
unrestricted and the restricted segments on the LAN, as shown in
Figure 51. In this diagram the Firewall labelled F2 is protecting an internal
network.
DUA1611-0AAA02.book Page 114 Thursday, August 2, 2001 4:01 PM