Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 4: Understanding Policy Configuration
Proxy rule basics
120
Default rules
As mentioned earlier in this chapter, when you configure Sidewinder G2 you
can select from one of two sets of default services that will be automatically
placed in the active proxy rule group during initial configuration. The following
options are available and described in Table 18 on page 120:
• Allow administrative services only: If you select this option, Sidewinder
G2’s active rule group will contain only rules necessary for administration.
Other pre-configured rules appear on the Rules screen by default, but are
not in the active proxy rule group and therefore do not pass traffic.
• Allow administrative and basic outbound Internet services: If you select
this option, Sidewinder G2’s active rule group will include rules for
administration and a rule providing users access to the most commonly
used Internet services.
Table 18: Initial active policy
Proxy rule
name
dnsp (names
vary)
Admin
Console
Login
Console
Internet
Services
Summary
Allow DNS traffic to proxy between indicated burbs. Which
rules are created depends on the location of the DNS resolver
IP addresses (internal burb, external burb, assumed to be
reach-by-default route) provided in the Network Information
window.
Allows administrators to connect to the Sidewinder G2 using
the Admin Console.
Allows administrators to log in directly at the Sidewinder G2,
using an attached keyboard and monitor.
This rule is added if you select “Allow administrative services
and basic outbound Internet services” on the policy window.
The rule provides users access to the most commonly used
Internet services using a pre-configured “Internet Services”
service group. The Internet Services rule regulates access to
the following proxies and servers:
• FTP
• HTTP
• HTTPS
• Ping
• Real Media
• RTSP
• Telnet
Deny All Denies all connections from any source burb to any destination
burb.