Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 220 / 861

220 Defining your security environment
Controlling full application inspection of traffic
Logging warnings for NNTP connections that terminate without sending a QUIT message
NNTP connections normally issue a QUIT message when terminating the session. However, some
NNTP clients are designed to behave differently and just terminate the connection without issuing a
QUIT. Using the procedure in this section, you can configure the security gateway to log each instance
of a terminated NNTP session where the security gateway did not receive a corresponding QUIT.
Changes you make take affect immediately after saving and activating the configuration.
Prerequisites
Complete the following task before beginning this procedure:
■
“Configuring access for news feeds” on page 216
To log warnings for connections that use illegal commands
1 In the SGMI, in the left pane, under Assets, click Proxies .
2 In the right pane, on the Proxies tab, click the NNTP proxy, and then click Properties .
3
In the Proxy Properties dialog box, on the Policy tab, check Log NNTP connections that terminate
without sending a QUIT message .
4 Click OK .
5 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
None.
Defining additional ports on which the NNTP proxy listens
You can use the procedure in this section to define additional ports on which the security gateway
listens for NNTP connections. You may want to use this feature if you have multiple news servers and
what to segregate the connections to each. For example, you may have both a public and private news
server. You can let the general public make use of the public server, while assigning a different port for
the private server. You would then hand out the private server port only to individuals to which you
wanted to grant access.
Changes you make take effect immediately after saving and activating the configuration.
Prerequisites
Complete the following task before beginning this procedure:
■
“Configuring access for news feeds” on page 216
To define additional ports on which the NNTP proxy listens
1 In the SGMI, in the left pane, under Assets, click Proxies .
2 In the right pane, on the Proxies tab, click the NNTP proxy, and then click Properties .
3 In the Proxy Properties dialog box, on the Additional Ports tab, type a new port and then click Add .
4
Click OK .
5 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .