Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Proxy rule basics
4-24 Understanding Policy Configuration
Advanced proxy rule example using service groups
Now assume you want to specify all the various privileges afforded
each of the three netgroups in Figure 4-7. You could do this by
defining many different allow and deny proxy rules. However,
because the source and destination criteria for each of the network
objects within a group are identical, a more elegant option is to use
service groups. Service groups enable you to use a single proxy rule to
define all the privileges assigned to a particular group.
Note: For more information on service groups, see “Service groups” on page 4-12.
For example, assume you want to assign the following privileges to
each of the netgroups in Figure 4-7:
Engineering group—Access to all Sidewinder G2 proxies and servers
Marketing group—Access to the Web, FTP, and e-mail via the http,
ftp, and smtp proxies
Accounting group—Access to FTP and e-mail via the ftp and smtp
proxies
You first define three different service groups. This is illustrated in
Table 4-8.
Table 4-8. Sample service groups
Service group
Criteria
Selected
Proxies
Selected
Servers
EngServiceGrp MktServiceGrp AcctServiceGrp
All proxies HTTP, FTP, SMTP FTP, SMTP
All servers None None
You then use the service groups when defining your proxy rules.
Table 4-9 shows the sample proxy rules.