Re: Firewall
From: J Jay (jayjay_at_nevertell.net)
Date: 11/28/03
- Next message: Armin Schwager: "Re: virtual sever with SMC Barricade 7004ABR"
- Previous message: /dev/null: "Re: World Wide VPN"
- In reply to: bobas007: "Re: Firewall"
- Next in thread: Juergen Nieveler: "Re: Firewall"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 28 Nov 2003 20:25:08 GMT
In article <bq77pe$ltk$2@news.onet.pl>,
falcon@mmstudio.spamajlert.zigzag.pl says...
> > 5) Sygate v5.5
> Nice pf but... After some trial wit it I have some questions. Maybe you
> can answer! How to make strict rules in Sygate for some apps using multi
> protocols and ports? Do it from scratch? Hard way...
> I am asking because I found that it is very easy with Outpost or Kerio
> (because they give prompt to allow exact action, e.g. protocol, address
> and port and build strict application rules that way) but ZA and Sygate
> just give full permission for applications and it is very hard to make
> strict rules for them from scratch.
> Well, maybe I am missing something (?).
>
>
Jarmo explained it quite well. You can create an advanced rule using
combinations of the following parameters: Name (you name the rule),
allow/block, address(es), protocols, ports (local/remote), in/out/both,
applications, and scheduling. As mentioned, advanced rules take
priority over application rules. Advanced rules execute from top to
bottom. Rule 1 (on top) has higher priority than rule 2, etc.
All rules are subordinated by the malware signatures in the Intruder
Detection System (IDS). An application rule can be setup for an
application, one protocol, multiple (remote) ports.
JJ
- Next message: Armin Schwager: "Re: virtual sever with SMC Barricade 7004ABR"
- Previous message: /dev/null: "Re: World Wide VPN"
- In reply to: bobas007: "Re: Firewall"
- Next in thread: Juergen Nieveler: "Re: Firewall"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]