Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Руководство администратора

Страница: 179 / 861

179 Defining your security environment
Understanding how protocols affect traffic
This section describes the following tasks associated with custom protocols to handle data from special
applications:
■
Configuring IP-based protocols
■
Configuring TCP/UDP-based protocols
■
Configuring ICMP-based protocols
■
Enabling a new protocol to trigger IDS/IPS events
Configuring IP-based protocols
You can configure custom protocols using IP as your protocol base.
For example, you must configure an IP-based protocol if you have clients outside the security gateway
that want to connect to a server behind the security gateway that accepts Point-to-Point Tunneling
Protocol (PPTP) connections. Since the security gateway does not include a PPTP proxy (which
involves both GRE and TCP protocols) the custom protocol must use the GSP proxy to pass traffic to
the server.
When creating an IP-based protocol, for more detailed field descriptions, click Help in the IP-based
protocol properties dialog box.
Prerequisites
None.
To configure IP-based protocols
1 In the SGMI, in the left pane, under Assets, click Protocols .
2 In the right pane, on the Protocols tab, click New > IP Based Protocol .
3 In the IP Based Protocol Properties dialog box, on the General tab, do the following:
Protocol name Type a unique name for the protocol.
Protocol number Type the protocol number.
Use GSP To enable the custom protocol to use the GSP proxy, check this option.