Symantec ALTIRIS OUT OF BAND MANAGEMENT COMPONENT 7.0 SP3 - V1.0, Руководство по внедрению

Страница: 129 / 192

through a Management Presence Server (MPS) that is located in the DMZ of the
enterprise. The MPS appears as a proxy server to management console
applications. The Intel AMT device establishes a Mutual Authentication TLS
tunnel with the MPS. Multiple consoles can interact with the Intel AMT device
through this tunnel.
A remote access policy contains the parameters that determine the conditions
for establishing an MPS connection. It also contains the connection parameters
to either one or two MPSs.
Remote Access Policies: Create Remote Policy dialog box
This dialog box lets you create a remote access policy to use with the CIRA
(client-initiated remote access) functionality of Intel AMT.
See “Auxiliary profiles: Remote Access Policies page” on page 128.
Table 10-4
Options on the Remote Access Policies : Create Remote Policy
dialog box
Description Option
Type a descriptive name for the policy Name
Type an interval in seconds. When there is
no activity in an established tunnel for this
period of time, the Intel AMT device closes
the tunnel. Entering zero (0) means that the
tunnel does not time out. The tunnel stays
open until the user closes it or when a
different policy with higher priority needs
to be processed. Tunnel life time
Select the trigger or triggers associated with
this policy. A particular trigger type can be
selected in only one policy. Trigger
The Intel AMT device establishes a tunnel
with the MPS when the user initiates a
connection request. User initiate connection
The device establishes a connection when
an event occurs that generates an alert that
is addressed to the network interface. Alert occurred
The device connects to the MPS based on the
Seconds Between Connections interval. Connect periodically
129 About Out of Band Management Component pages
Auxiliary profiles: Remote Access Policies page