Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 240 / 861

240 Defining your security environment
Controlling full application inspection of traffic
9
Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
To create an allow rule for ICMP traffic
1 In the SGMI, in the left pane, under Policy, click Firewall .
2 In the right pane, on the Rules tab, click New .
3 In the Rule Properties dialog box, on the General tab, do the following:
4 Optionally, on the Description tab, type a more detailed description than you typed in the Caption
text box.
5
Click OK .
6 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“Proxy Properties: PINGD—General tab” on page 715
■
“Rule Properties—General tab” on page 589
Modifying access for ICMP traffic
The ping proxy is normally enabled when access for the ping command is needed. However, you can
modify the security gateway’s behavior with regards to ICMP traffic, or configure support for
additional ICMP features. This section discusses an additional ICMP-related task you can perform, and
the specific steps needed to complete this task.
The additional security gateway ICMP-related task you can configure is:
■
“Enabling support for traceroute” on page 241
Rule name Type a name for this rule.
Caption Type a brief description of the rule.
Action Click Allow .
Arriving through Select the connection point through which traffic enters the security gateway.
Source Select the defined network entity from which ICMP traffic originates.
This can be a host network entity representing a specific machine from which the packets
originate, or subnet network entity representing your internal network.
Destination Select the defined network entity to which ICMP traffic is destined.
This can be a host network entity representing a specific machine or a subnet network
entity representing your internal network.
Leaving through Select the connection point through which traffic leaves the security gateway.
Service group Select the appropriate service group for your rule.