Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 654 / 861

653 Field descriptions
Policy field descriptions
Newsgroup Profile Properties—Profile tab
Use the Profile tab to create list of allowed newsgroups and denied newsgroups, using the newsgroups
in the available newsgroups list.
Associated tasks
The task that you can perform with this tab is:
■
“Creating newsgroup profiles” on page 315
Newsgroup Profile Properties—Description tab
Optionally, provides an extended description. This information is useful to help track changes or it can
be used as criteria for searches.
The maximum length is 20,000 alphanumeric characters.
Client Compliance
The client compliance feature lets you put restrictions on machines that connect through the VPN
features to the internal network. By requiring machines that connect to the VPN to be secured, or else
be denied access, you can mitigate the risk of opening up your network to remote machines.
A client-compliance profile comprises both the various security criteria that a user’s client computer
must satisfy and also any security actions that either the client or security gateway should perform at
logon and afterward.
Associated tasks
The tasks that you can perform with this tab include:
■
“Ensuring compliance of remote Client VPN computers” on page 397
■
“Ensuring client compliance for clientless VPN users” on page 449
Table D-99
Newsgroup Profile Properties—Profile tab
Field Description
Available newsgroups The newsgroups that are available to be included in the newsgroup profile. These
include the predefined newsgroups and any that you created on the Newsgroups tab.
To allow all newsgroups, you can create a wildcard profile by moving the asterisk (*)
into the Allowed newsgroups list. This acts as a wildcard character, representing every
newsgroup. Then, you can disallow specific newsgroups in the same profile.
Allowed newsgroups Newsgroups that are allowed when the newsgroup profile is used in a rule.
To move newsgroups to and from the Allowed Newsgroups list, click > or <.
Denied newsgroups Newsgroups that are denied when the newsgroup profile is used in a rule.
To move newsgroups to and from the Denied Newsgroups list, click > or <.
Table D-100 Client Compliance window
Field Description
Periodically check
compliance Enables a compliance check interval.
This option is checked by default.
Check interval
(minutes) If Periodically check compliance is checked, type the number of minutes between automatic
client compliance checks.
The default is 10 minutes. The maximum allowable value is 999 minutes.