Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 9: Configuring Proxies
Notes on selected proxy configurations
256
Important: Using the Admin Console, you can also set up a Telnet proxy from the
external burb to an internal burb on your Sidewinder G2. This is only required in
specialized cases. For example, if you are using a strong authentication method to
authenticate Telnet sessions, you may want to allow administrators to remotely
access a server inside your network. Before setting up this type of proxy, you may
want to contact Secure Computing to get assistance addressing any security issues
this presents.
Note: If an Internet Telnet server is not available when a trusted user tries to
connect, the user will NOT receive a message stating that the connection was
unsuccessful.
The following steps summarize the tasks you need to perform to set up Telnet
access for internal users.
1 Enable the Telnet proxy for the appropriate burb(s). (See “Configuring
proxies” on page 266.) The Telnet proxy runs in its own domain on the
Sidewinder G2.
2 Ensure that the Internet Services proxy rule is enabled and is contained in
the active rule group. The Internet Services proxy rule consists of a service
group that contains Telnet as well as other Internet services. (You can also
create an individual telnet_out rule if you want to configure authentication
specifically for Telnet.) See “Creating proxy rules” on page 222.
This rule allows users from one of your trusted burbs to Telnet to the Internet.
You can use the Admin Console to disable this proxy rule or change its
settings to control which internal users are allowed Telnet access and to
which external systems they can connect. See “Users and user groups” on
page 104 for detailed information.
3 [Optional] Configure the Sidewinder G2 to authenticate all users requesting
Telnet service before the Sidewinder G2 makes the network connection.
Refer to Chapter 10 for details on the authentication methods supported by
the Sidewinder G2.