18.07.2013 Views

Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Rule elements<br />

4-10 Understanding Policy Configuration<br />

Domain network objects<br />

A domain network object is registered by the Internet community.<br />

Registered domain names typically end with a three letter suffix such<br />

as .edu (for education sites) or .com (for commercial sites). For<br />

example, a domain name could be specified as bizco.net. See<br />

“Configuring domain objects” on page 5-12 for more information.<br />

Host network objects<br />

A host network object is an individual machine connected to the<br />

network. When specifying a host object, you must use a host name<br />

that is resolvable by DNS, or provide at least one IP address that is<br />

resolvable by DNS. See “Configuring host objects” on page 5-13 for<br />

more information.<br />

IP address network objects<br />

A network object can be an IP address <strong>of</strong> an individual machine<br />

connected to the network. A machine can have more than one IP<br />

address. See “Configuring IP address objects” on page 5-15 for more<br />

information.<br />

Netmap network objects<br />

Many organizations use network address translation (NAT) and/or<br />

redirection to prevent internal addresses from being visible to external<br />

users. On the <strong>Sidewinder</strong> <strong>G2</strong>, NAT refers to rewriting the source<br />

address <strong>of</strong> the packet, while redirection refers to rewriting the<br />

destination address <strong>of</strong> the packet.<br />

For example, when a user sends a packet from an internal IP address<br />

on the <strong>Sidewinder</strong> <strong>G2</strong> to an external IP address, the <strong>Sidewinder</strong> <strong>G2</strong><br />

intercepts the packet. If NAT is enabled for the matching rule, the<br />

<strong>Sidewinder</strong> <strong>G2</strong> re-assigns (or translates) the source address to its<br />

external address (or an address you specify). Therefore, all traffic<br />

leaving your system appears to come from a single external IP<br />

address.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!