138

Chapter 8 - IntraGuard Firewall Configuration

 

 

Security Policies at a Glance:

The following chart shows how each of the 31 protocols is treated by each of the five sets of security policies. The protocol BGPUse, for example, is assigned the security policy None by the Blocked policy set, but it is assigned the security policy Both by the Open policy set.

 

 

 

 

 

 

 

 

 

 

 

 

SECURITY POLICY

 

 

 

PROTOCOL

Blocked

Strict

Standard

Lenient

Open

 

 

 

 

 

 

 

 

 

 

BGPUse

None

None

None

Both

Both

 

 

BSDUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

CompatiViewUse

None

Out

Out

Both

Both

 

 

 

 

 

 

 

 

 

 

DNSUse

None

Out

Out

Both

Both

 

 

 

 

 

 

 

 

 

 

FTPUse

None

Out

Out

Both

Both

 

 

 

 

 

 

 

 

 

 

H323Use

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

ICMPUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

IPSecUse

None

Out

Out

Both

Both

 

 

 

 

 

 

 

 

 

 

IRCUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

LPRUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

MailUse

None

Out

Out

Both

Both

 

 

 

 

 

 

 

 

 

 

NFSUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

NetBIOSUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

NewsUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

NonIPUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

OSPFUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

POPUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

RIPUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

RealAudioUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

SunRPCUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

TelnetUse

None

Out

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

TFTPUse

None

Out

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

TunnelUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

WebUse

None

Out

Out

Both

Both

 

 

 

 

 

 

 

 

 

 

XWinUse

None

None

None

In

Both

 

 

 

 

 

 

 

 

 

 

ISAKMPUse

None

Out

Out

Both

Both

 

 

 

 

 

 

 

 

 

 

GopherUse

None

Out

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

NTPUse

None

None

Out

Both

Both

 

 

 

 

 

 

 

 

 

 

OtherTCPUse

None

None

Out

Out

Both

 

 

 

 

 

 

 

 

 

 

OtherUDPUse

None

None

Out

Both

Both

 

 

 

 

 

 

 

 

 

 

OtherUse

None

None

Out

Both

Both

 

 

 

 

 

 

 

 

Page 144
Image 144
Compatible Systems 5.4 manual Security Policies at a Glance