Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 287 / 861

286 Controlling traffic at the security gateway
Understanding and using rules
10
If you selected the FTP option in step 4, in the FTP Options panel, check one or more of the
following:
All of these options are enabled by default.
11 In the Confirmation panel, to validate the configuration of your email, HTTP, and FTP services,
click
Finish .
As the configuration is completed, the status of each of the tasks in the Task list appears in the
Status list.
12 If the configuration is successful, click Close .
If the configuration is unsuccessful, click Back to return to and correct the invalid part of the
configuration.
Related information
For further information related to this topic, see the following:
■
“Firewall Rule Wizard” on page 812
Using protocols and proxies for specific rules
The security gateway predefines the most commonly used protocols, including their ports and packet
types (TCP, UDP, IP, or ICMP). It also provides application-specific proxies for the protocols that are
most commonly used in IP networks.
You can configure the proxy for a particular kind of traffic, and then create a service group that
contains the protocols for that traffic. Within the service group, you can configure specific settings for
the protocols.
The following topics describe the configuration of proxies and service groups, and their use in rules
that pass specific kinds of traffic:
■
“Defining file control and access” on page 192
■
“Sending and receiving files” on page 198
■
“Sending and receiving files” on page 198
■
“Controlling Internet-based data communications” on page 203
■
“Controlling Web traffic” on page 208
■
“Controlling news feeds” on page 216
■
“Synchronizing security gateway time” on page 222
■
“Supporting UNIX services” on page 223
■
“Handling streaming audio and video” on page 225
■
“Managing electronic mail” on page 227
■
“Enabling remote logon” on page 236
■
“Allowing ICMP traffic” on page 238
Allow antivirus scanning To apply antivirus parameters to the FTP rules, check this option.
Allow puts To allow FTP put operations, check this option.
Allow gets To allow FTP get operations, check this option.
Inside interface If more than one inside interface is enabled on the security gateway, select the
interface to be used for FTP traffic.
When the security gateway is in a cluster, this list lets you select from inside
VIPs.