Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 372 / 861

371 Preventing attacks
Enabling protection for logical network interfaces
Configuring protection against IP address spoofing
Spoof protection is one of the many options that you can configure on network interfaces. To configure
spoof protection, you need to know what network ranges you want to allow. Consider your current
security gateway network and routing configurations to insure that you are not cutting off access for a
network that you should allow.
Prerequisites
None.
To configure protection against IP address spoofing
1
In the SGMI, in the left pane, under Assets, click Network .
2 In the right pane, on the Network Interfaces tab, select the network interface on which you want to
enable protection, and click
Properties .
3 In the Network Interface Properties dialog box, on the General tab, check Spoof protection .
4 Click OK .
5 Optionally, do one of the following:
■
To save your configuration now and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“Host Network Entity Properties—Spoof Protection tab” on page 656
■
“Subnet Network Entity Properties—Spoof Protection tab” on page 658
■
“Network Interface Properties—General tab” on page 664