Stonesoft stonegate 5.2, Руководство по установке

Страница: 52 / 109

52
Chapter 7 Configuring Routing and Installing Policies
Configuring Routing
In StoneGate, routing is done entirely through the Management Client. The routing information
of sensors and analyzers is only used for system communications. The inspected traffic is not
routed. The sensor’s Inline interfaces are always fixed as port pairs; traffic that enters through
one port is automatically forwarded to the other port.
Most often only one or two simple tasks are needed to define routing information for Sensor and
Analyzer elements:
• Define the default route. This is the route packets to any IP addresses not specifically
included in the routing configuration should take.
• Add routes to your internal networks that are not directly connected to the Sensor or Analyzer
if the networks cannot be reached through the default gateway.
Routing is most often done using the following elements:
• Network elements: represent a group of IP addresses.
• Router elements: represent the gateway devices that will forward packets to the networks
you add in the routing configuration.
When you modify interfaces and then close the Analyzer or Sensor properties, you always
receive a notification that allows you to open the Routing view directly. You can view the Routing
view at any other time by selecting
Configuration

Routing from the menu.

To view routing information
1. Right-click the IPS element whose routing you want to configure.
2. Select Routing . The Routing view for the selected element opens.
All the Sensor or Analyzer element’s physical interfaces and their network definitions have been
automatically added to the Routing view. You can select another element to view its routing
information.
2