Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 398 / 861

397 Providing remote access using VPN tunnels
Ensuring compliance of remote Client VPN computers
■
“Using the Remote Access Tunnel Wizard to set up clientless VPN connections” on page 442
■
“Creating basic rules” on page 273
■
“Controlling IP addresses with address transforms” on page 359
Ensuring compliance of remote Client VPN computers
The client compliance feature in the security gateway lets you restrict computers that connect through
a tunneled VPN connection to your internal network. By requiring computers that connect to be
secured or else be denied access, you can minimize the risk of opening up your network to many
remote, and possibly unsecured computers.
A client-compliance profile comprises both the various security criteria that a user’s client computer
must satisfy and also any security actions that either the client or appliance should perform at logon
and afterward.
Prerequisites
None.
To ensure compliance of remote client VPN computers
1 In the SGMI, in the left pane, under Policy, click Client Compliance .
2 In the right pane, in the Client Compliance window, do the following:
Periodically check
compliance Check this option to enable a compliance check interval.
Check interval
(minutes) If Periodically check compliance is checked, type the number of minutes between
automatic client compliance checks.
Require Symantec
Client Firewall Check this option to require client computers to have Symantec Client Firewall installed
and enabled.
If the Symantec Client Firewall has just been turned on, the security gateway may not
recognize it immediately.
Require auto-protect Check this option to require that clients have the antivirus auto-protect feature
enabled.
Require recent
system scan Check this option to require that a system antivirus scan is performed periodically.
Last scan within
(days) If Require recent system scan is checked, type the number of days between automatic
system scans.
Require latest version
of scanning engine Check this option to require the latest version of the antivirus scanning engine.
Require latest virus
definitions Check this option to require that the latest virus definitions be available.
Query servers every
... minutes Type the number of minutes between antivirus server queries.
Primary antivirus
server Select the primary antivirus server.
User name Type the user name for antivirus server access, if required.
Password Type the password for antivirus server access, if required.
Secondary antivirus
server Select the secondary antivirus server.