Secure Computing SG550 Instrukcja Użytkownika Strona 286
- Strona / 297
- Spis treści
- ROZWIĄZYWANIE PROBLEMÓW
- BOOKMARKI
Oceniono. / 5. Na podstawie oceny klientów
Appendix B – System Log
282
Commonly used interfaces are:
eth0 the LAN port
eth1 the WAN/Internet port
pppX e.g. ppp0 or ppp1, a PPP session
ipsecX e.g. ipsec0, an IPSec interface
The firewall rules deny all packets arriving from the WAN port by default. There are a few
ports open to deal with traffic such as DHCP, VPN services and similar. Any traffic that
does not match the exceptions however is dropped.
There are also some specific rules to detect various attacks (smurf, teardrop, etc.).
When outbound traffic (from LAN to WAN) is blocked by custom rules configured in the
GUI, the resultant dropped packets are also logged.
The <prefix> for all these rules is varied according to their type.
Currently used prefixes for traffic arriving:
Default Deny Packet didn't match any rule, drop it
Invalid Invalid packet format detected
Smurf Smurf attack detected
Spoof Invalid IP address detected
SynFlood SynFlood attack detected
Custom Custom rule dropped outbound packet
- Secure Computing SG 1
- User Manual 1
- Contents 2
- 1. Introduction 5
- Front panel LEDs 6
- Rear panel 7
- Front panel 9
- Specifications 10
- Bridged mode 11
- Secure by default 12
- Document Conventions 14
- 2. Getting Started 15
- Unpack the SG unit 16
- Set up the SG unit’s switch 23
- Set up the PCs on your LAN 33
- SG PCI Appliance Quick Setup 37
- Automatic configuration 40
- Manual configuration 41
- The SG Management Console 44
- 3. Network Setup 45
- Direct Connection 48
- Firewall class 49
- Ethernet configuration 49
- Interface aliases 50
- Manually assign settings 54
- Connection (dial on demand) 55
- Cable Modem 56
- Dialout and ISDN 57
- Port settings 58
- Static addresses 58
- Aliases 58
- Dialin setup 58
- Connecting a dialin client 60
- Internet Failover 65
- Edit connection parameters 66
- Internet Load Balancing 69
- Enabling load balancing 70
- High Availability 72
- Enabling high availability 73
- Advanced configurations 74
- DMZ Network 75
- Guest Network 76
- Wireless 79
- Basic wireless settings 80
- Wireless security 81
- WEP security method 82
- ACL (Access Control List) 83
- Connecting wireless clients 87
- Bridging 90
- Adding a bridge interface 91
- Edit bridge configuration 92
- Adding VLANs 95
- Editing VLANs 95
- Port Based VLANs 96
- Adding port based VLANs 98
- GRE Tunnels 100
- GRE over IPSec 101
- GRE troubleshooting 104
- Static routes 104
- Route management 105
- Hostname 112
- Workgroup/domain 113
- Administrative contact 113
- Device location 113
- DNS proxy 113
- Dynamic DNS 114
- DHCP Server 115
- DHCP addresses 116
- Address list 116
- Reserving IP addresses 118
- DHCP status 118
- Web Cache 119
- Enabling the web cache 120
- Selecting a cache size 120
- Storage 120
- Local storage 121
- Network storage share 121
- ICAP client 124
- Advanced 125
- QoS Traffic Shaping 127
- ToS traffic shaping 128
- Configuring the SIP proxy 130
- 4. Firewall 131
- Administration services 132
- Web Server 133
- SSL/HTTPS (Secure HTTP) 134
- Customizing the Firewall 135
- Definitions 136
- Addresses 137
- Interfaces 138
- Packet Filtering 139
- Rate limiting 142
- Custom firewall rules 143
- Port forwarding 144
- Source NAT 149
- 1-to-1 NAT 151
- Masquerading 152
- Configuring the UPnP gateway 153
- Connection Tracking 155
- Intrusion Detection 156
- The benefits of using an IDS 157
- IDB Configuration 158
- Dummy services 159
- Snort and IPS configuration 160
- Enabling access control 164
- User authentication 165
- Browser setup 167
- Web lists 169
- Content filtering 170
- Content or Webwasher? 171
- Content 172
- Webwasher 173
- ZoneAlarm 174
- Antivirus 175
- Enable antivirus 176
- Network storage 177
- POP email 180
- Scan all POP email 180
- SMTP email 182
- PPTP and L2TP 187
- PPTP VPN Server 187
- Add a PPTP user account 189
- Setup the remote PPTP client 189
- Windows XP PPTP client setup 192
- L2TP VPN Server 195
- Add an IPSec tunnel 197
- Add an L2TP user account 199
- PPTP and L2TP VPN Client 202
- SG unit to SG unit 204
- Set Up the Branch Office 205
- Tunnel settings page 206
- Local endpoint settings 209
- Other options 210
- Phase 1 settings 214
- Phase 2 settings page 216
- Enable IPSec 217
- Local endpoint settings page 218
- Phase 1 settings page 219
- Tunnel List 220
- NAT Traversal Support 223
- Dynamic DNS Support 223
- Certificate Management 223
- The OpenSSL application 224
- Extracting certificates 224
- Create a CA certificate 225
- Creating certificates 225
- Add certificates 227
- IPSec Failover 228
- IPSec Troubleshooting 238
- Port Tunnels 241
- Tunnel client 242
- 6. USB 244
- Share the storage device 245
- Set access permissions 245
- Join a Windows workgroup 247
- USB Printers 251
- Set up the print spool 252
- Printer Troubleshooting 257
- 7. System 259
- Backup/Restore Configuration 260
- Local backup/restore 261
- Text save/restore 262
- Administrative users 263
- Local Users 265
- TACACS+ 266
- Management 267
- Diagnostics 270
- System log 271
- Local syslog 271
- Remote syslog 271
- Email delivery 272
- Reboot and Reset 273
- Reboot device 274
- Erase configuration 274
- Reset button 274
- Flash upgrade 275
- Netflash 276
- Flash upgrade via HTTP 276
- Flash upgrade via TFTP 276
- Configuration Files 277
- Support 278
- Appendix A – Terminology 279
- Appendix B – System Log 285
- Creating Custom Log Rules 287
- Rate Limiting 290
- Boot Log Messages 291
- Practices and Precautions 292
- Failed Upgrade 294
© 2020, manymanuals.pl. Wszelkie prawa zastrzeżone. | 0.037 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Komentarze do niniejszej Instrukcji