Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 205 / 861

205 Defining your security environment
Controlling full application inspection of traffic
8
In the Service Group Properties dialog box, click OK .
To create an allow rule for H.323
1 In the SGMI, in the left pane, under Policy, click Firewall .
2 In the right pane, on the Rules tab, click New .
3 In the Rule Properties dialog box, on the General tab, do the following:
4 Optionally, on the Description tab, type a more detailed description than you typed in the Caption
text box.
5 Click OK .
6 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
To create an alias file
1
In the SGMI, in the left pane, under Assets, click Proxies .
2 In the right pane, on the H.323 Aliases tab, click New .
3
In the H323 Alias Properties dialog box, in the Alias Name text box, type a name for this alias.
4 In the Alias Replacement text box, type the alias to be used to replace the name.
5 In the Destination Host text box, type the IP address or fully-qualified domain name of the
destination host.
6 Click OK .
7
In the H323 Alias Properties dialog box, click Apply .
8 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“Proxy Properties: H.323—General tab” on page 705
Rule name Type a name for this rule.
Caption Type a brief description of the rule.
Action Click allow .
Arriving through Select the connection point through which traffic enters the security gateway.
Source Select the defined network entity from which H.323 traffic originates. This can be a
host network entity representing a specific machine from which the packets originate,
or subnet network entity representing your internal network.
Destination Select the defined network entity to which H.323 traffic is destined. This can be a host
network entity representing a specific machine or a subnet network entity
representing your internal network.
Leaving through Select the connection point through which traffic leaves the security gateway.
Service group Select the service group containing the h323 protocol.