McAfee FIREWALL 2.1-GETTING STARTED Installation Guide Page 39
- Page / 166
- Table of contents
- BOOKMARKS
Rated. / 5. Based on customer reviews
39
Defining Traffic Inspection Interfaces for IPS Engines
Defining Logical Interfaces
A Logical Interface is used in the IPS policies and the traffic inspection process to represent a
network segment. The SMC contains one default Logical Interface. A Logical Interface can
represent any number or combination of interfaces and VLAN Interfaces, except that the same
Logical Interface cannot be used to represent both Capture Interfaces and Inline Interfaces on
the same IPS engine. The rules in the ready-made IPS Template match all Logical Interfaces.
To define a Logical Interface
1. Select Configuration→Configuration→Security Engine. The Security Engine Configuration
view opens.
2. Expand the Other Elements branch.
3. Right-click Logical Interfaces and select New Logical Interface. The Logical Interface
Properties dialog opens.
4. Enter a unique Name.
5. (Optional) If you use VLAN tagging on Capture or Inline Interfaces, select View interface as
one LAN if you do not want the IPS engine to see a single connection as multiple
connections when a switch passes traffic between different VLANs and all traffic is mirrored
to the IPS engine through a SPAN port.
6. Click OK.
Repeat these steps to define any additional Logical Interfaces.
What’s Next?
If you want to use Reset Interfaces together with Capture Interfaces, define the Reset
Interfaces first. Proceed to Defining Reset Interfaces (page 40).
To define Capture Interfaces, proceed to Defining Capture Interfaces (page 40).
To define Inline Interfaces, proceed to Defining Inline Interfaces (page 41).
- McAfee NGFW 1
- Installation Guide 1
- Firewall Roles 5.7 1
- Legal Information 2
- TABLE OF CONTENTS 3
- INSTALLING ENGINES 4
- Table of Contents 6
- INTRODUCTION 7
- USING SMC DOCUMENTATION 9
- Documentation Available 11
- PREPARING FOR 13
- INSTALLATION 13
- PLANNING THE INSTALLATION 15
- Example Network Scenario 17
- Switch SPAN Ports 20
- Network TAPs 20
- INSTALLING LICENSES 23
- Generating New Licenses 25
- CONFIGURING NAT ADDRESSES 27
- Defining Locations 29
- CONFIGURING ENGINES 31
- DEFINING IPS ENGINES 33
- DEFINING LAYER 2 FIREWALLS 43
- CONFIGURING MASTER ENGINES 53
- VIRTUAL IPS ENGINES 53
- Options Explanation 58
- Option Explanation 61
- VIRTUAL LAYER 2 FIREWALLS 67
- CHAPTER 9 83
- POLICIES 89
- Configuring Routing 91
- Installing the Initial Policy 93
- PLATFORMS 97
- .iso image files 98
- 1 and press Enter 100
- 2 and press Enter 100
- UPGRADING 111
- Chapter 12 Upgrading 114
- Upgrading Engines Remotely 119
- YES to confirm 121
- Upgrading Engines Locally 123
- APPENDICES 125
- COMMAND LINE TOOLS 127
- →Save for Command Line 129
- Command Description 129
- NGFW Engine Commands 139
- Description 140
- DEFAULT COMMUNICATION PORTS 149
- Security Engine Ports 153
- EXAMPLE NETWORK SCENARIO 157
- Network 159
- Interface 159
- • Internal: 192.168.10.1 160
- • External: 212.20.1.254 160
- SMC Server Description 160
Related products and manuals for Hardware firewalls McAfee FIREWALL 2.1-GETTING STARTED
(41 pages)Sony VPL-DX126.A manuali
Manuali dei proprietari e guide per l'utente per Proiettori dati Sony VPL-DX126.A.
We fornisce 1 manuali pdf Sony VPL-DX126.A per scaricare gratuitamente in base al tipo di documento: Scheda Tecnica
Comments to this Manuals