Symantec™ Security Gateways Reference Guide - Sawmill

510 IndexIP address spoofing 21Man-in-the-Middle 21port scanning 21SMTP 21TCP session hijacking 21authentication 77header 93methodsBellcore S/Key 79Entrust 80gateway password 80LDAP 81Microsoft Windows NT domain 82out of band authentication (OOBA) 83PassGo Defender 83RADIUS 85TACACS+ 86rule 64, 78weak and strong methods 79authentication method report 105authoritative node 130authority record 39authorization rules 89custom protocols 47BBellcore S/Key authentication 79Bloodhound heuristic technology 114bullfrog daemon 129Ccaching only name server 40caption 64cascaded tunnels 91CIFS proxy 49non-transparent connections 51restrictions 51transparent connections 51clientcomforting 116notifications 108transparency 122clusteradding nodes 131creating 131multiple machine concerns 128removing nodes 132single machine drawbacks 127cluster componentsauthoritative node 130bullfrog daemon 129heartbeat network 130incident node 129synchawk daemon 128virtual IP addresses 129collecting statistics 102configurationhelp 11reportsaddress transform 105advanced option 105antivirus 105authentication method 105content filtering 105DNS record 105filter 105H.323 alias 105IDS/IPS 105IP route 105license features 105LiveUpdate 105Local Administrators 105logical network interfaces 106machine account 106master configuration 107NAT pool 106network endpoint 106network entity 106network protocol 106notification 106proxy service parameters 106redirected service 106rule 106service group 106services 106system parameters for location 106system parameters for policy 106system state 106time period 106user account 106user group 106virtual private network 107VPN tunnel 106VPN tunnel policy 106connection timeout 99container policy 116content filtering 12categories 71file extensions 74MIME types 74newsgroup profiles 75newsgroups 75rating modifications 72rating profiles 71report 105URL list 72URL pattern matching 72custom protocols 47Ddata compression preference 97data integrity 93authentication header 93encapsulating security payload 94preference 97, 99MD5 97SHA1 97protocol 93authentication header 93encapsulating security protocol 94data link layer 32data privacy preference 96, 99AES 96