Stonesoft stonegate 5.2, Руководство по установке

Страница: 40 / 109

40
Chapter 5 Defining Sensors and Analyzers
5. ( Optional ) If you use VLAN tagging on capture or inline interfaces, select View interface as
one LAN if you do not want the sensor to see a single connection as multiple connections
when a switch passes traffic between different VLANs and all traffic is mirrored to the
sensor through a SPAN port.
6. Click OK .
Repeat these steps to define any additional Logical Interfaces.
Defining Reset Interfaces
Reset interfaces can deliver TCP resets and ICMP “destination unreachable” messages to
interrupt communications picked up from capture interfaces when the communications trigger a
response.
VLANs are supported for sending resets, but the correct VLAN is selected automatically. An
interface you want to use as the reset interface must not have any manually added VLAN
configuration.
The reset interface must be in the same broadcast domain as the capture interface that uses
the reset interface. The resets are sent using the IP addresses and MAC addresses of the
communicating hosts.
 To define a reset interface
1. Right-click and select New Physical Interface . The Physical Interface Properties dialog
opens.
2. Select the Interface ID .
What’s Next?
 If you want to use reset interfaces together with capture interfaces, define the reset
interfaces first. Proceed to
Defining Reset Interfaces (page 40).
 To define capture interfaces, proceed to Defining Capture Interfaces (page 41).
 To define inline interfaces, proceed to Defining Inline Interfaces (page 42).
Note – An interface that is used only as a reset interface must not have an IP address.