Waters Network Systems ProSwitch-Quad Series Especificações Página 292
- Página / 469
- Índice
- RESOLUÇÃO DE PROBLEMAS
- MARCADORES
Avaliado. / 5. Com base em avaliações de clientes
Virtual Private Networking Using SSL Connections
292
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
includes the following addresses: 10.0.0.5–10.0.0.20 and the FQDN ftp.company.com,
which resolves to 10.0.1.3.
Assuming that no conflicting user or group policies have been configured, if a user attempted
to access FTP servers at the following addresses, the actions listed would occur:
• 10.0.0.1. The user would be blocked by Policy 1.
• 10.0.1.5. The user would be blocked by Policy 2.
• 10.0.0.10. The user would be granted access by Policy 3.
The IP address range
10.0.0.5–10.0.0.20 is more specific than the IP address range that is defined in Policy 1.
• ftp.company.com. The user would be granted access by Policy 3.
A single host name is
more specific than the IP address range that is configured in Policy 2.
Note: The user would not be able to access ftp.company.com using its IP
address 10.0.1.3. The VPN firewall’s policy engine does not perform
reverse DNS lookups.
View Policies
To view the existing SSL VPN policies:
1. Select VPN > SSL VPN. The SSL VPN submenu tabs display
, with the Policies screen
in view. (The following figure shows some examples.)
Figure 191.
- ProSAFE Gigabit Quad WAN SSL 1
- VPN Firewall SRX5308 1
- Trademarks 2
- Revision History 2
- Contents 4
- Chapter 3 LAN Configuration 5
- Chapter 10 Troubleshooting 8
- Introduction 11
- Firewall SRX5308? 12
- Key Features and Capabilities 12
- Balancing 13
- Security Features 15
- Extensive Protocol Support 15
- Maintenance and Support 17
- Package Contents 17
- Hardware Features 17
- Figure 1 18
- Table 1. LED descriptions 18
- Rear Panel 19
- Figure 3 20
- Log In to the VPN Firewall 21
- Figure 5 22
- Figure 8 24
- Figure 9 25
- Settings 26
- Complete these tasks: 27
- Classical Routing 30
- Figure 11 31
- Figure 12 32
- Figure 13 34
- Figure 14 34
- Figure 15 35
- Figure 16 36
- Figure 17 37
- Figure 18 38
- Figure 19 39
- Interfaces 40
- IPv4 Interfaces 41
- Figure 21 42
- Figure 22 43
- To edit a protocol binding: 44
- Figure 24 46
- Configure Dynamic DNS 49
- To configure DDNS: 50
- Figure 26 51
- Figure 27 51
- Figure 28 54
- Connection 55
- Figure 30 56
- Figure 31 57
- Figure 32 58
- Figure 33 59
- Figure 34 60
- Figure 35 61
- Figure 36 62
- Figure 37 65
- Figure 38 66
- Figure 39 66
- To edit an ISATAP tunnel: 67
- Figure 40 67
- To configure SIIT: 68
- Figure 41 68
- Figure 42 69
- Figure 43 70
- Figure 44 71
- Figure 45 72
- Figure 46 73
- Configure WAN QoS Profiles 76
- Figure 47 77
- Figure 48 78
- Figure 49 80
- What to Do Next 82
- Port-Based VLANs 85
- Figure 50 86
- VLAN DHCP Options 87
- Configure a VLAN Profile 88
- Figure 52 89
- Figure 54 95
- Manage the Network Database 97
- Figure 56 100
- Figure 57 101
- Manage the IPv6 LAN 102
- DHCPv6 Server Options 103
- Configure the IPv6 LAN 104
- LAN Configuration 105
- IPv6 LAN Address Pools 106
- Figure 59 107
- To add an IPv6 prefix: 108
- Figure 60 108
- To edit a prefix: 108
- Figure 61 110
- Figure 62 112
- Default VLAN 113
- DMZ Port for IPv4 Traffic 115
- Figure 64 116
- DMZ Port for IPv6 Traffic 118
- Figure 65 119
- IPv6 DMZ Address Pools 121
- Figure 67 124
- Figure 68 126
- Manage Static IPv4 Routing 127
- Figure 70 128
- Figure 71 129
- IPv4 Static Route Example 131
- Manage Static IPv6 Routing 132
- Firewall Protection 134
- About Firewall Protection 135
- Order of Precedence for Rules 144
- Configure LAN WAN Rules 145
- Figure 76 146
- IPv4 LAN WAN Outbound Rules 147
- IPv6 LAN WAN Outbound Rules 148
- Figure 78 149
- Figure 79 150
- IPv6 LAN WAN Inbound Rules 151
- Configure DMZ WAN Rules 152
- Figure 82 153
- Figure 83 154
- Figure 84 155
- Figure 85 156
- Figure 86 157
- Configure LAN DMZ Rules 158
- Figure 88 159
- Figure 89 160
- Figure 90 161
- Figure 91 162
- Figure 92 163
- Examples of Firewall Rules 164
- Figure 94 165
- Figure 95 166
- Figure 96 167
- Figure 97 168
- FTP Site on the Internet 169
- Attack Checks 170
- IPv6 Attack Checks 172
- Set Limits for IPv4 Sessions 173
- Figure 103 175
- To enable ALG for SIP: 176
- Figure 104 176
- Add Customized Services 177
- Figure 105 178
- To edit a service: 178
- Create IP Groups 179
- Figure 108 180
- To edit an IP group: 180
- Create Bandwidth Profiles 181
- Profile screen displays: 182
- To create a QoS profile: 184
- Figure 111 184
- Figure 112 185
- Configure Content Filtering 186
- Figure 113 188
- Enable Source MAC Filtering 190
- Figure 115 191
- Set Up IP/MAC Bindings 192
- IPv4/MAC Bindings 193
- To edit an IP/MAC binding: 194
- Figure 117 194
- IPv6/MAC Bindings 195
- Figure 119 196
- Configure Port Triggering 197
- Figure 120 198
- Figure 122 199
- Figure 121 199
- To configure UPnP: 199
- IPSec and L2TP Connections 201
- Configurations 203
- Figure 125 204
- Figure 126 204
- Figure 127 205
- Figure 128 207
- Figure 129 207
- Figure 130 208
- Figure 131 208
- Figure 132 209
- Figure 133 211
- Figure 134 211
- Figure 135 212
- Figure 136 213
- Figure 137 215
- Figure 138 216
- Figure 139 217
- Figure 140 217
- Figure 141 218
- Figure 142 218
- Figure 143 220
- Figure 144 221
- Figure 145 221
- Figure 146 222
- The Advanced pane displays: 223
- Figure 148 225
- Figure 149 226
- Information 227
- Figure 151 228
- Figure 152 228
- Figure 153 228
- Figure 154 228
- Figure 155 229
- Figure 156 229
- Figure 157 230
- Manage IPSec VPN Policies 231
- Figure 158 232
- Figure 159 233
- To edit an IKE policy: 237
- Manage VPN Policies 238
- Figure 160 239
- Setting Description 241
- To edit a VPN policy: 245
- User Database Configuration 247
- Figure 163 248
- Mode Config Operation 250
- Figure 164 251
- Figure 165 251
- Figure 166 254
- Operation 257
- Figure 167 258
- Figure 168 258
- Figure 169 259
- Figure 171 262
- Figure 172 263
- Figure 173 264
- Figure 174 264
- Figure 175 265
- Configure Keep-Alives 266
- Configure Dead Peer Detection 267
- Figure 177 268
- Configure the PPTP Server 269
- Figure 179 270
- View the Active PPTP Users 271
- Configure the L2TP Server 272
- View the Active L2TP Users 273
- Item Description 274
- SSL Connections 275
- SSL VPN Portal Options 276
- Create the Portal Layout 277
- Figure 185 279
- To edit a portal layout: 281
- Add Servers and Port Numbers 282
- Add a New Host Name 283
- Configure the SSL VPN Client 284
- Add New Network Resources 288
- Figure 189 289
- To edit network resources: 289
- Figure 190 290
- View Policies 292
- To add an SSL VPN policy: 293
- To edit an SSL VPN policy: 296
- Figure 196 298
- Figure 197 298
- Figure 198 299
- Figure 199 300
- To display the SSL VPN log: 300
- Figure 200 300
- VPN Certificates 301
- Configure Domains 303
- Create Domains 304
- Figure 202 305
- Configure Groups 307
- Create Groups 308
- Figure 204 309
- Configure User Accounts 310
- To create a user account: 311
- Figure 205 311
- Figure 206 312
- Set User Login Policies 313
- Figure 208 314
- Figure 209 316
- Figure 210 317
- Figure 211 319
- VPN Certificates Screen 321
- Manage VPN CA Certificates 322
- Figure 213 323
- Figure 215 325
- To delete one or more SCRs: 326
- To delete one or more CRLs: 327
- Network and System Management 328
- Performance Management 329
- Features That Reduce Traffic 330
- Content Filtering 331
- Source MAC Filtering 332
- Port Triggering 334
- DMZ Port 334
- Exposed Hosts 334
- VPN, L2TP, and PPTP Tunnels 335
- Set QoS Priorities 335
- Assign Bandwidth Profiles 335
- System Management 336
- Figure 217 337
- Figure 218 337
- About Remote Access 341
- To access the CLI: 342
- Figure 221 343
- Figure 222 345
- Figure 223 345
- Figure 224 346
- Manage the Configuration File 347
- Back Up Settings 348
- Restore Settings 349
- Upgrade the Firmware 350
- Figure 226 352
- Monitor System Access and 355
- Performance 355
- Figure 227 356
- Figure 228 358
- Figure 229 359
- Figure 230 359
- Figure 231 360
- Figure 232 361
- Figure 233 362
- Figure 234 366
- Figure 235 366
- Configure Gateway 1 at Site 1 367
- Configure Gateway 2 at Site 2 368
- View Status Screens 369
- Figure 236 370
- Router Statistics Screen 371
- Detailed Status Screen 372
- Figure 238 373
- VLAN Status Screen 376
- Tunnel Status Screen 377
- Figure 241 378
- Figure 242 378
- Figure 243 379
- Figure 244 379
- View the VPN Logs 380
- Figure 246 381
- Figure 247 381
- View the WAN Port Status 382
- Figure 249 383
- Figure 250 383
- IPv6 WAN Port Status 384
- Figure 252 385
- View the Attached Devices 386
- View the DHCP Log 387
- Diagnostics Utilities 388
- Send a Ping Packet 389
- Trace a Route 390
- Look Up a DNS Address 390
- Display the Routing Tables 390
- Capture Packets in Real Time 391
- Troubleshooting 392
- Basic Functioning 393
- LAN or WAN Port LEDs Not On 394
- Figure 258 398
- Figure 259 399
- Figure 260 399
- Figure 261 402
- Specifications 404
- Factory Default Settings 405
- Figure 263 418
- Inbound Traffic 419
- Figure 265 420
- Figure 266 420
- Virtual Private Networks 421
- Figure 268 422
- Figure 269 422
- Figure 270 423
- Figure 271 423
- Figure 272 424
- Figure 273 424
- VPN Gateway-to-Gateway 425
- Figure 275 426
- Figure 276 426
- Figure 277 427
- Figure 278 427
- Figure 279 428
- Figure 280 428
- Figure 281 429
- Log Message Terms 431
- System Log Messages 431
- Login/Logout 432
- System Startup 433
- Firewall Restart 433
- IPSec Restart 434
- WAN Status 435
- PPP Logs 436
- • PPPoE Idle Timeout Logs 437
- • PPTP Idle T 437
- Resolved DNS Names 438
- VPN Log Messages 439
- SSL VPN Logs 443
- Routing Logs 444
- LAN to WAN Logs 445
- LAN to DMZ Logs 445
- DMZ to WAN Logs 445
- WAN to LAN Logs 445
- Other Event Logs 446
- DHCP Logs 447
- Table 143. DHCP logs 448
- Two-Factor Authentication 449
- Figure 282 451
- Figure 283 452
- Figure 284 452
- Notification of Compliance 453
- Numerics 455
Manuais e produtos relacionados com Comutadores de rede Waters Network Systems ProSwitch-Quad Series
(92 páginas)
(21 páginas)© 2020, manymanuals-pt.com. Todos os direitos reservados. | 0.084 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentários a estes Manuais