McAfee SG310, Руководство администратора

Страница: 192 / 412

192 McAfee UTM Firewall 4.0.4 Administration Guide
Firewall menu options
Connection tracking
You can view connection tracking details in the connection tracking report. For more information, see About
the Connection Tracking Report .
1
From the Firewall menu, click Connection Tracking. The Connection Tracking page appears with the
Configuration tab displayed (
Figure 198 ).
Figure 198 Connection Tracking page
2
Select the Enabled checkbox for the Modules you need to track. Clear the Enabled checkbox for the
modules you do not need to track. Disabling a module disallows any additional connections through the
firewall as a result of connection tracking. Available modules are:
• FTP
• H.323
• IRC
• PPTP
• TFTP
3
[Optional] Select the Enable Connection Logging checkbox to log connections to the system log as
they are established and expire; however, this can result in excessive log messages if you have a large
or busy network. Make sure you have enabled remote system logging if you enable connection logging.
See
Enabling remote system logging .
4
[Optional] By default, the a connection event is logged every time a connection starts. Uncheck the Log
Connection Start checkbox to disable this option.
5
[Optional] By default, the a connection event is logged every time a connection ends. Uncheck the Log
Connection End checkbox to disable this option.
6
[Optional] To enable flood rate limiting for new connections on Internet interfaces, select the Enable
Flood Rate Limiting checkbox. Attempts to initiate new connections that exceed the defined rate limit
are logged and dropped.
Note: Global flood rate limiting is disabled by default so that it doesn’t interfere with certain legitimate
high-load situations. It is recommended that flood rate limiting be handled on a rule-by-rule basis. See Rate
limiting a packet filter rule for more details.