Index

SHTTP and SSL Services
When to Add New Service Groups
Permit Rules
Managing Gauntlet Firewall Options
Calling the Appropriate Program

A files
Info Server Data Files

absorb rules
Absorb Rules

access control
Understanding User Restrictions

access control (LDAP)
Understanding the LDAP Proxy

Access Key II
Access Key II Authentication
Access Key II Authentication

access See Also destination access
Understanding Destination Access

access to destinations
Understanding Destination Access

accessing circuit proxy configuration
Accessing Circuit Proxy Configuration

accessing content scanning configuration
Accessing Content Scanning Configuration

accessing destination access configuration
Accessing Destination Access Configuration

accessing encryption configuration
Accessing Encryption Key Configuration

accessing FTP proxy configuration
Accessing FTP Proxy Configuration

accessing Gauntlet Firewall Manager
Accessing the Gauntlet Firewall Manager

accessing Gopher proxy configuration
Accessing HTTP, SSL, and Gopher Proxy Configuration

accessing HTTP proxy configuration
Accessing HTTP, SSL, and Gopher Proxy Configuration

accessing Info Server configuration
Accessing Info Server Configuration

accessing lp proxy configuration
Accessing lp Proxy Configuration

accessing Microsoft SQL Server proxy
Accessing SQL Server Proxy Configuration

accessing multimedia configuration
Accessing Multimedia Proxy Configuration

accessing network configuration
Accessing Network Configuration

accessing network groups configuration
Accessing Network Group Configuration

accessing packet screening configuration
Accessing Packet Screening Configuration

accessing plug proxy configuration
Accessing Plug Proxy Service Configuration

accessing POP3 proxy configuration
Accessing POP3 Proxy Configuration

accessing report configuration
Accessing Report Configuration

accessing rsh proxy configuration
Accessing rsh Proxy Configuration

accessing service group configuration
Accessing Service Group Configuration

accessing service group rules
Accessing Service Group Rules Configuration

accessing SMTP proxy configuration
Accessing SMTP Proxy Configuration

accessing SNMP agent configuration
Accessing SNMP Agent Configuration

accessing SNMP proxy configuration
Accessing SNMP Proxy Configuration

accessing SSL proxy configuration
Accessing HTTP, SSL, and Gopher Proxy Configuration

accessing Sybase configuration
Accessing Sybase Proxy Configuration

accessing user configuration
Accessing User Configuration

accessing web services
non-proxy-aware browsers
Accessing Web Services

accessing X11 proxy configuration
Accessing X11 Proxy Configuration

accounts
creating user accounts
Creating User Accounts

accounts
on the firewall
Creating User Accounts

ACE/Serve
SecurID Authentication

activating license
Activating Your Gauntlet License

activities
specifying allowed activities
Service Groups

addfile program
Adding Binary Files to the Info Server Database

adding files to Info Server
Adding Files to the Info Server Database

adding network groups
When to Add New Network Groups

adding new service groups
When to Add New Service Groups

adding packet screening rules
Adding Packet Screening Rules

adding service group rules
Adding Service Group Rules

addtext program
Adding Text Files to the Info Server Database

addUserAccount command
Creating User Accounts

Administrator's Guide
audience
Audience for This Guide
conventions
Conventions Used in This Guide

Alcohol, Beer, Wine & Tobacco category
Understanding Cyber Patrol

alerts
Security Alerts

Allow Password Change option
Creating Service Groups

allowed activities
Service Groups

America Online See AOL
How the Plug Proxy Works

anonymous FTP server
Running an Anonymous FTP Server

AOL
Application Level Security Services (Proxies)
How the Plug Proxy Works
Understanding the Plug Proxy
Managing Custom Services

APOP
password
Creating User Authentication Entries

APOP
APOP
Understanding the POP3 Proxy
authentication
Mail Services

application-level proxies
Understanding Proxy Services

Assign Access option (security rules)
Adding Service Group Rules

audience
Audience for This Guide

authenticated HTTP
configuring
Configuring Authenticated HTTP Proxy Settings

authenticated HTTP
Authenticated HTTP
creating authentication entries
Creating User Authentication Entries

authentication
and GUI FTP tools
Using Authentication With Some GUI FTP Tools
APOP
Mail Services
authmgr program
How Other Services Use Authentication Information
changing methods
Changing Authentication Method
custom services
Managing Custom Services With Authentication
entries
Creating User Authentication Entries
overview
Understanding the User Authentication Management System
See Also strong authentication
Digipass Authentication
weak authentication
Accessing Web Services with Authentication

authentication
token
Understanding the User Authentication Management System

authentication information
login-sh program
How Other Services Use Authentication Information
non-firewall services
How Other Services Use Authentication Information
used by firewall
How the Firewall Uses Authentication Information

authentication management system
rlogin
Creating Authentication User Entries

authentication management system
and FTP proxy
Creating Authentication User Entries
groups
Groups in the Authentication Management System
HTTP
Authenticated HTTP
logs
Creating Logs
TELNET
Creating Authentication User Entries
users
Users in the Authentication Management System

authmgr program
authentication information
How Other Services Use Authentication Information

AVI movie header
Adding Binary Files to the Info Server Database

backdoors
Gauntlet Firewall Design Philosophy

backing up the firewall
Backing Up and Restoring

Bellcore
S/Key Authentication

Cancel menu command
Cancel
Saving Your Changes

certificate management
Application Level Security Services (Proxies)

changing authentication methods
Changing Authentication Method

changing group membership
Changing Group Membership

changing passwords
Changing Passwords

changing user IDs
Changing User IDs

changing user names
Changing User Names

checking source and destination
Checking Source and Destination

checksums
Understanding System Integrity

choosing host
Planning the Firewall

circuit proxy
Application Level Security Services (Proxies)
database applications
Understanding the Circuit Proxy
financial applications
Understanding the Circuit Proxy
groupware
Understanding the Circuit Proxy
planning
Planning
strong authentication
Understanding the Circuit Proxy
vs. plug proxy
Managing Custom Services With Authentication

circuit proxy
Managing Custom Services With Authentication
accessing configuration
Accessing Circuit Proxy Configuration
configuring firewall
Configuring the Firewall for Circuit Proxy Services
configuring settings
Configuring Circuit Proxy Settings
enabling
Enabling Circuit Proxy Services
how it works
How the Circuit Proxy Works
understanding
Understanding the Circuit Proxy
using
Using the Circuit Proxy
verifying setup
Verifying Your Setup

ck-gw daemon
How the Circuit Proxy Works

clients
configuring for Sybase proxy
Configuring Sybase Clients
X client
How the X11 Proxy Works

clients
SMTP proxy client (smap)
Understanding the SMTP Proxy
starting TN3270 client
TN3270 With Authentication

color setting requirement
Configuring Your System

CompuServe
Managing Custom Services
Understanding the Plug Proxy

CompuServe
Application Level Security Services (Proxies)

configurable access control (LDAP)
Understanding the LDAP Proxy

configurable logging (LDAP)
Understanding the LDAP Proxy

configurations
circuit proxy
Accessing Circuit Proxy Configuration
content scanning
Accessing Content Scanning Configuration
Cyber Patrol
Configuring Cyber Patrol
destination access
Accessing Destination Access Configuration
Encryption Key
Accessing Encryption Key Configuration
ftp proxy
Accessing FTP Proxy Configuration
Gopher proxy
Accessing HTTP, SSL, and Gopher Proxy Configuration
HTTP proxy
Accessing HTTP, SSL, and Gopher Proxy Configuration
Info Server
Accessing Info Server Configuration
LDAP proxy settings
Configuring LDAP Proxy Settings
lp proxy
Accessing lp Proxy Configuration
Microsoft SQL Server
Accessing SQL Server Proxy Configuration
multimedia proxy
Accessing Multimedia Proxy Configuration
network
Accessing Network Configuration
network groups
Accessing Network Group Configuration
plug proxy
Accessing Plug Proxy Service Configuration
POP3 proxy
Accessing POP3 Proxy Configuration
rlogin
Accessing TELNET and rlogin Proxy Configuration
rsh proxy
Accessing rsh Proxy Configuration
service group
Accessing Service Group Configuration
service group rules
Accessing Service Group Rules Configuration
SMTP proxy
Accessing SMTP Proxy Configuration
SNMP agent
Accessing SNMP Agent Configuration
SNMP proxy
Accessing SNMP Proxy Configuration
SSL proxy
Accessing HTTP, SSL, and Gopher Proxy Configuration
Sybase proxy
Accessing Sybase Proxy Configuration
TELNET
Accessing TELNET and rlogin Proxy Configuration
URL filtering
Configuring URL Filtering
user restrictions
Accessing User Restriction Configuration
users
Accessing User Configuration
VNP
Accessing the VPN Configuration
X11
Accessing X11 Proxy Configuration

configuration information
upgrading
Upgrading to Gauntlet 4.1

configuration sets
creating
Creating Configuration Sets
deleting
Deleting Configuration Sets
modifying
Modifying Configuration Sets
name change procedure
Modifying Configuration Sets
planning
Planning Configuration Sets

configurations files
editing with text-based interface
Managing Gauntlet Firewall Options

configuring additional logging
Configuring Proxy Logging

configuring circuit proxy settings
Configuring Circuit Proxy Settings

configuring content scanning
Configuring and Enabling Content Scanning

configuring Cyber Patrol
Configuring Cyber Patrol

configuring firewall for plug proxy
Configuring the Firewall for Plug Proxy Services

configuring firewall for rsh proxy
Configuring the Firewall for rsh Services

configuring FTP proxy
Configuring FTP Proxy Settings

configuring Gopher proxy
Configuring Gopher Proxy Settings

configuring HTTP proxy
Configuring HTTP Proxy Settings

configuring LDAP clients
Configuring LDAP Clients

configuring LDAP proxy settings
Configuring LDAP Proxy Settings

configuring log retention time
Configuring Log Retention Time

configuring lp proxy
Configuring lp Proxy Settings

configuring Microsoft SQL clients
Configuring Microsoft SQL Clients

configuring Microsoft SQL Server proxy
Configuring SQL Server Proxy Settings
Configuring the Firewall for Microsoft SQL Services

configuring multimedia proxy
Configuring Multimedia Proxy Services

configuring News Feed settings
Configuring News Settings

configuring News Reader settings
Configuring News Settings

configuring news server
Configuring Your News Server

configuring non-proxy-aware web browsers
Configuring Web Browsers

configuring plug proxy
Configuring Plug Proxy Settings

configuring print client
Configuring the Print Client

configuring print server
Configuring the Print Server

configuring proxies
Configuring Proxy Services

configuring remote system for rsh service
Configuring the Remote System

configuring report frequency
Configuring Report Frequency

configuring report recipients
Configuring Report Recipients

configuring rlogin proxy
Configuring TELNET and rlogin Proxy Settings

configuring rsh proxy
Configuring rsh Proxy Settings

configuring SMPT proxy
Configuring the Firewall for SMTP Services

configuring SMPT proxy settings
Configuring SMTP Proxy Services

configuring SNMP agent settings
Configuring SNMP Agent Settings

configuring SNMP proxy
Configuring SNMP Proxy Settings

configuring SSL proxy
Configuring SSL Proxy Settings

configuring Sybase proxy firewall
Configuring the Firewall for Sybase Services

configuring Sybase proxy settings
Configuring Sybase Proxy Settings

configuring TELNET proxy
Configuring TELNET and rlogin Proxy Settings

configuring the firewall
Configuring the Firewall

configuring URL filtering
Configuring URL Filtering

configuring VNPs
Accessing the VPN Configuration

configuring web browsers
Configuring Web Browsers
Configuring Your Web Browser

configuring X11 proxy
Configuring X11 Proxy Settings

configuring your system
Configuring Your System

connfiguring reports
Configuring Reports

content scanning
configuring
Configuring and Enabling Content Scanning
enabling
Configuring and Enabling Content Scanning
FTP
FTP
HTTP
HTTP
Infected File Handling
Configuring and Enabling Content Scanning
Java applets
Content Scanning Engine
planning
Planning the Firewall Configuration for Content Scanning
quarantine area
Configuring and Enabling Content Scanning
SMPT
SMTP Mail

content scanning
accessing configuration
Accessing Content Scanning Configuration
configuring firewall
Configuring the Firewall to Use Content Scanning
configuring scanning engines
Configuring the Content Scanner
how it works
How Content Scanning Works
understanding
Understanding Content Scanning

Content Vectoring Protocol
How Content Scanning Works
Configuring the Content Scanner

conventions
Conventions Used in This Guide

creating authentication entries
Creating User Authentication Entries

creating configuration sets
Creating Configuration Sets

creating destination access rules
Creating Destination Access Rules

creating encryption keys
Creating Encryption Keys

creating groups
Creating Groups

creating Info Server files
Creating Files for an Info Server

creating integrity database
Creating the Database

creating logs
Creating Logs

creating networks
Interface option
Creating Networks
Network IP Address option
Creating Networks

creating network groups
Network Group Name option
Creating Network Groups

creating network groups
Creating Network Groups

creating networks
Creating Networks

creating packet screening rules
Creating Packet Screening Rules

creating passthrough links
Creating a Passthrough Link

creating reports
Creating Reports

creating service groups
Creating Service Groups

creating trusted VNPs
Creating a Trusted or Private VPN

creating users
Creating Users

creating user accounts
Creating User Accounts

creating user restriction rules
Creating User Restriction Rules

CRYPTOCard RB-I
CRYPTOCard RB-1
CRYPTOCard RB-I

ctavi
Adding Binary Files to the Info Server Database

ctgif
Adding Binary Files to the Info Server Database

cthtml
Adding Binary Files to the Info Server Database

ctjpg
Adding Binary Files to the Info Server Database

ctps
Adding Binary Files to the Info Server Database

ctqt
Adding Binary Files to the Info Server Database

cttext
Adding Binary Files to the Info Server Database

ctzip
Adding Binary Files to the Info Server Database

custom services
Managing Custom Services
with authentication
Managing Custom Services With Authentication

CVP
How Content Scanning Works

CVP
Configuring the Content Scanner

Cyber Patrol
Alcohol, Beer, Wine & Tobacco
Understanding Cyber Patrol
Drugs & Drug Culture
Understanding Cyber Patrol
Full Nudity
Understanding Cyber Patrol
Gambling/Questionable/Illegal
Understanding Cyber Patrol
Gross Depictions/Text
Understanding Cyber Patrol
Intolerance
Understanding Cyber Patrol
Militant/Extremist
Understanding Cyber Patrol
Partial Nudity & Art
Understanding Cyber Patrol
Satanic or Cult
Understanding Cyber Patrol
Search Engines
Understanding Cyber Patrol
Sex Education
Understanding Cyber Patrol
Sexual Acts/Text
Understanding Cyber Patrol
Sports & Entertainment
Understanding Cyber Patrol
Violence/Profanity
Understanding Cyber Patrol
Work Time
Configuring Cyber Patrol Settings

Cyber Patrol
configuring
Configuring Cyber Patrol
enabling
Enabling Cyber Patrol Services
license
Configuring Cyber Patrol Settings
overview
Understanding Cyber Patrol

Cyber Patrol
Managing URL Filtering

CyberNOT
Planning

CyberNOT database
Understanding Cyber Patrol

Data Encryption Standard
Encrypting the Data

databases
Info Server
How the Database Works

database applications and circuit proxy
Understanding the Circuit Proxy

DES
Encrypting the Data

decrypting data
Decrypting the Data

default destination access rules
Default Destination Access Rules

default network groups
Default Network Groups

default service groups
Default Service Groups

Defender Security Server
Digipass Authentication

deleting configuration sets
Deleting Configuration Sets

deleting destination access rules
Deleting Destination Access Rules

deleting encryption keys
Deleting Encryption Keys

deleting groups
Deleting Groups

deleting networks
Deleting Networks

deleting network groups
Deleting Network Groups

deleting packet screening rules
Deleting Packet Screening Rules

deleting service groups
Deleting Service Groups

deleting service group rules
Deleting Service Group Rules

deleting user restriction rules
Deleting User Restriction Rules

deleting users
Deleting Users

deleting VNPs
Deleting VPNs

deny rules
Deny Rules

destinations
checking
Checking Source and Destination
See also destination access
Checking Source and Destination

destination access
unknown keyword
Unknown Keyword

destination access
accessing configuration
Accessing Destination Access Configuration
changing order
Changing Order of Precedence
creating rules
Creating Destination Access Rules
default rules
Default Destination Access Rules
deleting rules
Deleting Destination Access Rules
how it works
How Destination Access Works
modifying rules
Modifying Destination Access Rules
understanding
Understanding Destination Access

destination access rules
changing order of precedence
Changing Order of Precedence
planning
Planning Destination Access Rules

destination access rules
order of precedence
Order of Precedence

destination addresses
specifying
Considerations for Specifying Destination Addresses

destination IP address rules
Source IP Address and Destination IP Address Rules

destination port rules
Source Port and Destination Port Rules

destination restrictions for service groups
Creating Service Groups

Digipass
Digipass Authentication
Digipass Authentication

directories
Info Server
Info Server Directories

disabled services
Gauntlet Firewall Operating System

disabling groups
Disabling Groups

disabling users
Disabling Users

dot (.) character and Info Server
Info Server Data Files

Drugs & Drug Culture category
Understanding Cyber Patrol

dual-homed bastion host
Dual-Homed Bastion Host

editing configuration files
Managing Gauntlet Firewall Options

electronic mail
Mail Services
Application Level Security Services (Proxies)

email
Application Level Security Services (Proxies)
Mail Services

enabling circuit proxy
Enabling Circuit Proxy Services

enabling content scanning
Configuring and Enabling Content Scanning

enabling Cyber Patrol
Enabling Cyber Patrol Services

enabling FTP proxy services
Enabling FTP Proxy Services

enabling Gopher proxy
Enabling Proxy Services

enabling HTTP proxy
Enabling Proxy Services

enabling Info Server
Enabling the Info Server

enabling Java access
Configuring Your Web Browser

enabling LDAP proxy services
Enabling LDAP Services

enabling lp proxy
Enabling the lp Proxy

enabling Microsoft SQL Server proxy
Enabling SQL Server Proxy Services

enabling multimedia proxy
Enabling Multimedia Proxy Services

enabling News proxy
Enabling News Proxy Services

enabling plug proxy
Enabling Plug Proxy Services

enabling POP3 proxy services
Enabling POP3 Proxy Services

enabling rlogin proxy
Enabling TELNET and rlogin Proxy Services

enabling rsh proxy
Enabling rsh Proxy Services

enabling SMTP proxy
Enabling SMTP Proxy Services

enabling SNMP agent
Enabling the SNMP Agent

enabling SNMP proxy
Enabling SNMP Proxy Services

enabling SSL proxy
Enabling Proxy Services

enabling Sybase proxy
Enabling Sybase Proxy Services

enabling TELNET proxy
Enabling TELNET and rlogin Proxy Services

enabling users
Enabling Users

enabling X11 proxy
Enabling X11 Proxy Services

encrypted information
Dual-Homed Bastion Host

encrypting data
Encrypting the Data

encryption keys
Working With Encryption Keys
creating
Creating Encryption Keys
deleting
Deleting Encryption Keys
modifying
Modifying Encryption Keys
planning
Planning Encryption Keys

encryption policy configuration utility
Stopping Your VPN

encryption through multiple firewalls
Encryption Through Multiple Firewalls (Passthrough Link)

events to ignore in exception reports
Configuring Events to Ignore in Exception Reports

examining packets
Checking Source and Destination

exception reports
events to ignore
Configuring Events to Ignore in Exception Reports
possible items of interest section
Exception Reports: Possible Items of Interest Section
security alerts section
Exception Reports: The Security Alerts Section
system warnings section
Exception Reports: The System Warnings Section

exception reports
Creating Reports
Creating Exception Reports
example
Exception Reports: Example
reading
Reading Exception Reports

exchanging encrypted information
Dual-Homed Bastion Host

executable programs and Info Server
Info Server Queries and Executable Programs

exiting Gauntlet Firewall Manager
Exiting the Gauntlet Firewall Manager

field rules
Packet Screening Field Rules

files
infected
How Content Scanning Works
Info Server
Info Server Data Files

file transfer activity and FTP proxy
Understanding the FTP Proxy

file transfer services
Application Level Security Services (Proxies)

filterig URLs
Understanding URL Filtering

financial applications
circuit proxy
Understanding the Circuit Proxy

finger
Understanding the Plug Proxy

finger
Application Level Security Services (Proxies)

firewall
back up and restore
Backing Up and Restoring
circuit proxy
Planning
configuring as SNMP agent
Configuring the Firewall as an SNMP Agent
configuring for multimedia proxy
Configuring the Firewall for Multimedia Services
configuring for News proxy
Configuring the Firewall for News Services
configuring for plug proxy
Configuring the Firewall for Plug Proxy Services
configuring for SNMP service
Configuring the Firewall for SNMP Services
configuring for X11 proxy
Configuring the Firewall for X11 Services
configuring rlogin proxy
Configuring the Firewall for Terminal Services
configuring Sybase proxy
Configuring the Firewall for Sybase Services
configuring TELENT proxy
Configuring the Firewall for Terminal Services
Info Server
Configuring the Firewall to Run an Info Server
Info Server files
Placing Info Server Files on the Firewall
logging
Managing Logging and Reporting
lp proxy
Configuring the Firewall for lp Services
mail exchange host
Advertising the Firewall as a Mail Exchanger
planning
Planning the Firewall
planning for SNMP service
Planning the Firewall for SNMP Services
rsh proxy
Configuring the Firewall for rsh Services
text-based interface
Managing Gauntlet Firewall Options
transparency
Transparency
using authentication information
How the Firewall Uses Authentication Information

firewall
configuring
Configuring the Firewall
definition
Understanding Gauntlet Firewall Concepts
mail forwarder
Configuring Your Internal Mail Hub
standard configuration
How the Gauntlet Firewall Works
trusted networks
Trusted Networks
untrusted networks
Untrusted Networks
visibility
Transparency

firewall account
Creating User Accounts

firewall rules
Understanding Service Groups

FTP
services
Application Level Security Services (Proxies)

FTP
and content scanning
Understanding Content Scanning
FTP
services
Using FTP Services

FTP proxy
and authentication management system
Creating Authentication User Entries
configuring
Configuring FTP Proxy Settings

FTP proxy
accessing configuration
Accessing FTP Proxy Configuration
configuring
Configuring the Firewall for FTP Services
enabling
Enabling FTP Proxy Services
for Web services
Gopher and FTP Services
GUI tools and authentication
Using Authentication With Some GUI FTP Tools
how it works
How the FTP Proxy Works
planning settings
Planning FTP Proxy Settings
understanding
Understanding the FTP Proxy
using authentication
Using Authentication
verifying setup
Verifying Your Setup

FTP server
Running an Anonymous FTP Server

ftp-gw
How the FTP Proxy Works

ftpd
How the FTP Proxy Works

Full Nudity category
Understanding Cyber Patrol

fwadmin user ID
Configuring the Firewall

G files
Info Server Gopher Menu Files

Gambling/Questionable/Illegal category
Understanding Cyber Patrol

Gauntlet Firewall
maintenance
General Management and Maintenance
managing options
Managing Gauntlet Firewall Options
processing packets
Processing Packets and Requests
trap
Trap

Gauntlet Firewall
concepts
Understanding Gauntlet Firewall Concepts
described
Understanding the Gauntlet Firewall
design philosophy
Gauntlet Firewall Design Philosophy
dual-homed bastion host
Dual-Homed Bastion Host
hardware components
Gauntlet Firewall Hardware
how it works
How the Gauntlet Firewall Works
IP screening facility
IP Screening Utility
management utilities
Management Utilities
managing
General Management and Maintenance
operating system
Gauntlet Firewall Operating System
proxies
Application Level Security Services (Proxies)
security perimeter
Establishing a Security Perimeter
software components
Gauntlet Firewall Software
user accounts
Gauntlet Firewall Design Philosophy

Gauntlet Firewall Manager
Management Utilities
accessing
Accessing the Gauntlet Firewall Manager
configuring web browser
Configuring Your Web Browser
configuring your system
Configuring Your System
described
Understanding the Gauntlet Firewall Manager
exiting
Exiting the Gauntlet Firewall Manager
interface
Firewall Manager Graphical Interface
online help
Getting Help
saving your changes
Saving Your Changes
server
Firewall Server
using
Using the Gauntlet Firewall Manager
using remotely
Managing Gauntlet Firewall Options

gauntlet license
activating
Activating Your Gauntlet License

gauntlet-admin command
Configuring the Firewall

gauntlet-upgrade
Upgrade Considerations

GIF image header
Adding Binary Files to the Info Server Database

Gopher+
Application Level Security Services (Proxies)

Gopher menu files
Creating Info Server Gopher Menu Files

Gopher proxy
enabling
Enabling Proxy Services

Gopher proxy
accessing configuration
Accessing HTTP, SSL, and Gopher Proxy Configuration
configuring
Configuring Gopher Proxy Settings
how it works
How the HTTP, Gopher, and SSL Proxies Work
understanding
Understanding the HTTP and Gopher Proxies
using Gopher services
Using Gopher Services

Gopher services
Info Service
Info Server Gopher Menu Files

gopher service proxy
planning
Planning Web and Gopher Service Proxy Settings

Gopher services
Application Level Security Services (Proxies)
Using Gopher Services

graphical interface to Gauntlet. See Gauntlet Firewall Manager
Firewall Manager Graphical Interface

Gross Depictions/Text category
Understanding Cyber Patrol

groups
authentication management system
Groups in the Authentication Management System

groups
creating
Creating Groups
deleting
Deleting Groups
disabling
Disabling Groups
managing
Managing Groups
understanding
Understanding Users and Groups
z
Service Groups

groups of systems
Understanding Networks and Network Groups

groupware, circuit proxy
Understanding the Circuit Proxy

H files
Info Server Data Files

hardened operating system
Gauntlet Firewall Operating System

hardware components of Gauntlet Firewall
Gauntlet Firewall Hardware

Help button
Getting Help

host name
access
Understanding Destination Access
unknown
Unknown Keyword

hosts
choosing
Planning the Firewall

HTML text header
Adding Binary Files to the Info Server Database

HTTP
Application Level Security Services (Proxies)
and content scanning
Understanding Content Scanning

HTTP
content scanning
HTTP

HTTP access for untrusted service group
Untrusted Service Group

HTTP proxy
and NetShow player
Using the NetShow Proxy Without Transparency
authenticated HTTP
Authenticated HTTP
nontransparent access
Non-Transparent Access
persistent connections
Using Proxy-Aware Browsers
strong or weak authentication
Understanding the HTTP and Gopher Proxies
transparent access
Transparent Access

HTTP proxy
accessing configuration
Accessing HTTP, SSL, and Gopher Proxy Configuration
authenticated HTTP
Configuring Authenticated HTTP Proxy Settings
configuring
Configuring HTTP Proxy Settings
default setup
How the HTTP, Gopher, and SSL Proxies Work
enabling
Enabling Proxy Services
how it works
How the HTTP, Gopher, and SSL Proxies Work
planning
Planning Web and Gopher Service Proxy Settings
understanding
Understanding the HTTP and Gopher Proxies

http-gw daemon
Gopher and FTP Services
How the HTTP, Gopher, and SSL Proxies Work

ICMP and network monitoring
Managing Packet Screening

ICMP traffic
Configuring SNMP Proxy Settings

IETF authentication protocol (RADIUS)
RADIUS Authentication

Infected File Handling option
Configuring and Enabling Content Scanning

infected files
How Content Scanning Works

Info Server
A files
Info Server Data Files
addtext program
Adding Text Files to the Info Server Database
dot (.) character
Info Server Data Files
G files
Info Server Gopher Menu Files
Gopher menu files
Creating Info Server Gopher Menu Files
H files
Info Server Data Files
headers
Adding Binary Files to the Info Server Database
Q files
Info Server Queries and Executable Programs
query files
Adding Query Files to the Info Server Database
sample headers
Adding Binary Files to the Info Server Database

Info Server
accessing configuration
Accessing Info Server Configuration
adding files
Adding Files to the Info Server Database
configuring firewall
Configuring the Firewall to Run an Info Server
creating files
Creating Files for an Info Server
data files
Info Server Data Files
database
How the Database Works
directories
Info Server Directories
enabling
Enabling the Info Server
Gopher menu
Info Server Gopher Menu Files
how it works
How the Info Server Works
placing files on firewall
Placing Info Server Files on the Firewall
planning
Planning an Info Server
queries
Info Server Queries and Executable Programs
understanding
Understanding the Info Server
using
Using the Info Server

Info Server addfile program
Adding Binary Files to the Info Server Database

info-gw daemon
How the Info Server Works

integrity database
creating
Creating an Integrity Database
updating
Updating the Integrity Database

integrity database
Understanding System Integrity
creating
Creating the Database
disk space requirement
Planning an Integrity Database
planning
Planning an Integrity Database
protection
Protecting the Integrity Database

integrity See Also system integrity
Understanding System Integrity

Interface option (creating networks)
Creating Networks

interface rules
Interface Rules

interface to Gauntlet
Firewall Manager Graphical Interface

interfaces
using simultaneously
Managing Gauntlet Firewall Options

internal mail hub
Configuring Your Internal Mail Hub

internal mail server
Configuring Your Internal POP3 Mail Server

Intolerance category
Understanding Cyber Patrol

IP address
access
Understanding Destination Access
modifying (not permitted)
Modifying Networks

IP screening facility
IP Screening Utility

IP-spoofing checks
Understanding Packet Screening

ipfs utility
Verifying Your Configuration

IRIX for Gauntlet Firewall
Gauntlet Firewall Operating System

IRIX sendmail program
Mail Services

Java access
Configuring Your Web Browser

Java applets, content scanning
Content Scanning Engine

Java-based interface
Firewall Manager Graphical Interface

JPEG image header
Adding Binary Files to the Info Server Database

keys for encryption
Working With Encryption Keys

lp
Application Level Security Services (Proxies)

LDAP
Application Level Security Services (Proxies)

LDAP proxy
Application Level Security Services (Proxies)
configuring clients
Configuring LDAP Clients
Configuring LDAP Clients
configuring settings
Configuring LDAP Proxy Settings
enabling services
Enabling LDAP Services
how it works
How the LDAP Proxy Works
planning
Planning the LDAP Proxy
recommended configuration
How the LDAP Proxy Works
understanding
Understanding the LDAP Proxy

license
activating
Activating Your Gauntlet License

links,creating passthrough links
Creating a Passthrough Link

loading packet screening rules
Loading Packet Screening Rules

log file
Reading Logs

log retention time
Configuring Log Retention Time

logging
configuring log retention time
Configuring Log Retention Time
LDAP
Understanding the LDAP Proxy
log file
Reading Logs
security alerts
Security Alerts

logging
Managing Logging and Reporting
configuring additional logging
Configuring Proxy Logging
configuring logs
Configuring Logs
configuring reports
Configuring Reports
creating reports
Creating Reports
default
Configuring Logs
understanding
Understanding Logging and Reporting

logging and reporting
creating logs
Creating Logs

Login shell
configuring
Configuring the Firewall to Use the Login Shell Program
how it works
How the Login Shell Program Works
understanding
Understanding the Login Shell Program
using the program
Using the Login Shell Program

login-sh program and authentication information
How Other Services Use Authentication Information

logs
configuring
Configuring Logs
Configuring Logs
creating
Creating Logs
Creating Logs
reading
Reading Logs and Reports

Lotus Notes
Managing Custom Services
Understanding the Plug Proxy

Lotus Notes
Application Level Security Services (Proxies)

lp proxy
configuring
Configuring lp Proxy Settings
transparency
Configuring the Print Client

lp proxy
accessing configuration
Accessing lp Proxy Configuration
configuring firewall
Configuring the Firewall for lp Services
configuring print server
Configuring the Print Server
configuring the print client
Configuring the Print Client
default configuration
How the lp Proxy Works
enabling
Enabling the lp Proxy
how it works
How the lp Proxy Works
planning
Planning lp Proxy Settings
Print Manager
Configuring the Print Client
understanding
Understanding the lp Proxy
using
Using lp Services
using lp services
Using lp Services

mail exchange host
Advertising the Firewall as a Mail Exchanger

mail forwarding
Configuring Your Internal Mail Hub

mail setup,verifying
Verifying Your Setup

maintenance of Gauntlet Firewall
General Management and Maintenance

management
backing up and restoring
Backing Up and Restoring
creating user accounts
Creating User Accounts
tools
Managing Gauntlet Firewall Options

management information base (MIB)
SNMP Agent and Management Information Base

managing custom services
Managing Custom Services

managing custom services with authentication
Managing Custom Services With Authentication

managing Gauntlet Firewall
General Management and Maintenance

managment utilities
Management Utilities

manually adding packet screening rules
Creating Packet Screening Rules

MD5 secure hash algorithm
APOP

MediaBase proxy
Managing MediaBase Services

membership in service groups
Service Group Membership

MIB
SNMP Agent and Management Information Base

MIB-II
SNMP Agent and Management Information Base

Microsoft Internet Explorer
proxy awareness
Using Proxy-Aware Browsers

Microsoft Internet Explorer
Using News

Microsoft SQL
Application Level Security Services (Proxies)
configuring clients
Configuring Microsoft SQL Clients

Microsoft SQL
replication server
Understanding the SQL Server Proxy

Microsoft SQL Server proxy
accessing configuration
Accessing SQL Server Proxy Configuration
configuring
Configuring the Firewall for Microsoft SQL Services
Configuring SQL Server Proxy Settings
configuring Microsoft SQL clients
Configuring Microsoft SQL Clients
enabling services
Enabling SQL Server Proxy Services
how it works
How the SQL Server Proxy Works
recommented configuration
How the SQL Server Proxy Works
understanding
Understanding the SQL Server Proxy
verifying setup
Verifying Your Setup

Militant/Extremist category
Understanding Cyber Patrol

modifying configuration sets
Modifying Configuration Sets

modifying destination access rules
Modifying Destination Access Rules

modifying encryption keys
Modifying Encryption Keys

modifying networks
Modifying Networks

modifying network groups
Modifying Network Groups

modifying packet screening rules
Modifying Packet Screening Rules

modifying service groups
Modifying Service Groups

modifying service group rules
Modifying Service Group Rules

modifying users
Modifying Users

modifying user restriction rules
Modifying User Restriction Rules

modifying VNPs
Modifying VPNs

monitoring tools
Managing Packet Screening

mssql-gw
How the SQL Server Proxy Works

multimedia proxy
planning firewall
Planning the Firewall for Multimedia Services

multimedia proxy
accessing configuration
Accessing Multimedia Proxy Configuration
configuring
Configuring Multimedia Proxy Services
configuring firewall
Configuring the Firewall for Multimedia Services
enableing
Enabling Multimedia Proxy Services
how it works
How the Multimedia Proxy Works
understanding
Understanding the Multimedia Proxy
verifying setup
Verifying Your Setup

multimedia services
Application Level Security Services (Proxies)

multiple configurations for a proxy
Creating Multiple Configurations for a Proxy

multiple firewalls
Encryption Through Multiple Firewalls (Passthrough Link)

multiple POP3 servers
Using the POP3 Proxy with Multiple POP3 Servers

netacl daemon
How the TELNET and rlogin Proxies Work
How the FTP Proxy Works

Netscape Navigator
Using News
proxy awareness
Using Proxy-Aware Browsers

NetShow
Application Level Security Services (Proxies)

NetShow
TCP port 1755
How the Multimedia Proxy Works

NetShow player
and HTTP proxy
Using the NetShow Proxy Without Transparency
configuring
Using the NetShow Proxy Without Transparency

NetShow proxy
transparency
Using the NetShow Proxy

NetShow proxy
configuring
Accessing Multimedia Proxy Configuration
using
Using the NetShow Proxy

networks
creating
Creating Networks
planning
Planning Networks
wildcard character
Understanding Networks and Network Groups

network access control daemon
How the FTP Proxy Works
How the TELNET and rlogin Proxies Work

network groups
creating
Creating Network Groups
planning
Planning Network Groups

Network Group Name option
Creating Network Groups

network groups
accessing configuration
Accessing Network Group Configuration
default
Default Network Groups
definition
Understanding Networks and Network Groups
deleting
Deleting Network Groups
modifying
Modifying Network Groups
understanding
Understanding Networks and Network Groups
when to add new
When to Add New Network Groups

network interface cards
Gauntlet Firewall Hardware

Network IP Address option
Creating Networks

network management services (SNMP)
Application Level Security Services (Proxies)

network managers, SNMP
Configuring SNMP Network Managers

network managment services
Managing Network Management Services

network monitoring services
Managing Network Management Services

network monitoring tools
Managing Packet Screening

Network News Transfer Protocol
Managing News Services

Network Source option (security rules)
Adding Service Group Rules

networks
accessing configuration
Accessing Network Configuration
adding
Configuring Networks
definition
Understanding Networks and Network Groups
deleting
Deleting Networks
modifying
Modifying Networks
trusted
Trusted Networks
types
Trusted and Untrusted Networks
understanding
Understanding Networks and Network Groups
unknown
Unknown Networks
untrusted
Untrusted Networks

news (Usenet)
Managing News Services

news feed, informing
Informing Your News Feed

News proxy
configuring
Configuring News Settings
planning settings
Planning News Settings

News proxy
configuring firewall
Configuring the Firewall for News Services
configuring news server
Configuring Your News Server
enabling
Enabling News Proxy Services
how it works
How the News Proxy Works
informing news feed
Informing Your News Feed
understanding
Understanding the News Proxy
using news
Using News

news proxy, using
Using News

News Reader settings
Configuring News Settings

news server, configuring
Configuring Your News Server

NNTP
News Client
Understanding the Plug Proxy
News Server
Understanding the Plug Proxy

NNTP
port
How the News Proxy Works
protocol
Managing News Services

nontransparent access
Web services
Non-Transparent Access

Norton AntiVirus for Firewalls
Configuring and Enabling Content Scanning

one-time password
Understanding the User Authentication Management System
S/Key Authentication

One-Time Password in Everything (OPIE)
S/Key Authentication

online help
Getting Help

operating system for Gauntlet Firewall
Gauntlet Firewall Operating System

OPIE
S/Key Authentication

order of precedence
changing for service group rules
Changing Order of Precedence
changing for user restriction rules
Changing Order of Precedence
destination access rules
Order of Precedence
service group rules
Order of Precedence
user restriction rules
Order of Precedence

order of precedence
change for packet screening rules
Changing Order of Precedence
changing
Changing Order of Precedence
packet screening rules
Order of Precedence of Packet Screening Rules

packets
examined by Gauntlet Firewall
Checking Source and Destination
processing
Processing Packets and Requests
receiving
Receiving Packets
spoofed packets
IP Screening Utility

packet screening
Managing Packet Screening
absorb rules
Absorb Rules
changing rule order of precedence
Changing Order of Precedence
creating rules
Creating Packet Screening Rules
deny rules
Deny Rules
destination IP address rules
Source IP Address and Destination IP Address Rules
destination port rules
Source Port and Destination Port Rules
field rules
Packet Screening Field Rules
interface rules
Interface Rules
protocol rules
Protocol Rules
source IP address rules
Source IP Address and Destination IP Address Rules
source port rules
Source Port and Destination Port Rules
verifying configuration
Verifying Your Configuration

packet screening
accessing configuration
Accessing Packet Screening Configuration
adding rules
Adding Packet Screening Rules
adding rules manually
Creating Packet Screening Rules
changing order of precedence
Changing Order of Precedence
deleting rules
Deleting Packet Screening Rules
how it works
How Packet Screening Works
how rules work
How Packet Screening Rules Work
modifying rules
Modifying Packet Screening Rules
understanding
Understanding Packet Screening
verifying your configuration
Verifying Your Configuration

packet screening permit rules
Permit Rules

packet screening rules
How Packet Screening Rules Work
deleting
Deleting Packet Screening Rules
order of precedence
Order of Precedence of Packet Screening Rules
planning
Planning Packet Screening Rules

packet screening rules
loading
Loading Packet Screening Rules
modifying
Modifying Packet Screening Rules

Partial Nudity & Art category
Understanding Cyber Patrol

passthrough link,creating
Creating a Passthrough Link

passwords
changing
Changing Passwords
reusable
Reusable Passwords

passwords
and untrusted service groups
Untrusted Service Group

PC Extender for Windows 95
Planning the Firewall

permit rules
Permit Rules

persistent connections
Using Proxy-Aware Browsers

ping
Testing Your VPN
Permit Rules
and SNMP
Configuring SNMP Agent Settings

ping and SNMP proxy
Configuring SNMP Proxy Settings

planning circuit proxy firewall
Planning

planning configuration sets
Planning Configuration Sets

planning content scanning
Planning the Firewall Configuration for Content Scanning

planning destination access rules
Planning Destination Access Rules

planning encryption keys
Planning Encryption Keys

planning firewall for multimedia
Planning the Firewall for Multimedia Services

planning firewall for SNMP
Planning the Firewall for SNMP Services

planning FTP proxy settings
Planning FTP Proxy Settings

planning Info Server
Planning an Info Server

planning integrity database
Planning an Integrity Database

planning LDAP proxy
Planning the LDAP Proxy

planning lp proxy
Planning lp Proxy Settings

planning network groups
Planning Network Groups

planning networks
Planning Networks

planning News settings
Planning News Settings

planning packet screening rules
Planning Packet Screening Rules

planning plug proxy settings
Planning

planning POP3 proxy settings
Planning

planning rlogin proxy
Planning TELNET and rlogin Proxy Settings

planning rsh proxy settings
Planning rsh Proxy Settings

planning service groups
Planning Service Groups

planning SMTP proxy
Planning SMTP Proxy Services

planning SNMP agent settings
Planning SNMP Agent Settings

planning Sybase proxy settings
Planning Sybase Proxy Settings

planning TELENT proxy
Planning TELNET and rlogin Proxy Settings

planning the firewall
Planning the Firewall

planning user restriction rules
Planning User Restriction Rules

planning VPNs
Planning VPNs

planning X11 proxy settings
Planning X11 Proxy Settings

plug proxy
and TCP protocol
Understanding Proxy Services
planning settings
Planning
TCP-based protocols
Planning
UDP-based services
Managing Custom Services
vs. circuit proxy
Managing Custom Services With Authentication
wildcard characters
Configuring Plug Proxy Settings

plug proxy
accessing configuration
Accessing Plug Proxy Service Configuration
and NNTP traffic
Understanding the News Proxy
configuring
Configuring Plug Proxy Settings
configuring firewall
Configuring the Firewall for Plug Proxy Services
enabling
Enabling Plug Proxy Services
how it works
How the Plug Proxy Works
SSL plug proxy for SSL or SHTTP services
SHTTP and SSL Services
understanding
Understanding the Plug Proxy

plug proxy risk assessment
Managing Custom Services

plug proxy versions
CompuServe
Application Level Security Services (Proxies)
finger
Application Level Security Services (Proxies)
Usenet news
Application Level Security Services (Proxies)
Web services
Application Level Security Services (Proxies)
whois
Application Level Security Services (Proxies)

plug proxy versions
AOL
Application Level Security Services (Proxies)

plug-board proxy
Application Level Security Services (Proxies)

plug-gw daemon
How the Plug Proxy Works

POP3
Mail Services
Application Level Security Services (Proxies)
APOP authentication
Mail Services

POP3 proxy
internal mail server
Configuring Your Internal POP3 Mail Server
multiple servers
Using the POP3 Proxy with Multiple POP3 Servers
planning settings
Planning
user authentication entries
Creating User Authentication Entries

POP3 proxy
accessing configuration
Accessing POP3 Proxy Configuration
authentication
APOP
configuring
Configuring the Firewall for POP3 Services
configuring internal mail server
Configuring Your Internal POP3 Mail Server
configuring your internal POP3 mail server
Configuring Your Internal POP3 Mail Server
enabling services
Enabling POP3 Proxy Services
exchanging mail
Using POP3 to Exchange Mail
how it works
How the POP3 Proxy Works
understanding
Understanding the POP3 Proxy

pop3-gw daemon
How the POP3 Proxy Works

Port option for service groups
Creating Service Groups

possible items of interest section
Exception Reports: Possible Items of Interest Section

Post Office Protocol Version 3
Mail Services

PostScript header
Adding Binary Files to the Info Server Database

precedence
changing for service group rules
Changing Order of Precedence
packet screening rules
Order of Precedence of Packet Screening Rules

precedence for destination access rules
Order of Precedence

precedence for service group rules
Order of Precedence

precedence for user restriction rules
Order of Precedence

print client,configuring
Configuring the Print Client

Print Manager
Configuring the Print Client

print queue for lp proxy
Configuring the Print Client

print server
configuring
Configuring the Print Server

print services
Understanding the lp Proxy

print services
Application Level Security Services (Proxies)

printer port
How the lp Proxy Works

privacy with trust
Privacy With Trust (Trusted Link)

privacy without trust
Privacy Without Trust (Private Link)

private links
Privacy Without Trust (Private Link)

processing packets
calling appropriate program
Calling the Appropriate Program
checking request type
Checking the Request Type
checking source and destination
Checking Source and Destination
overview
Processing Packets and Requests
process the request
Processing the Request
receive packet
Receiving Packets

processing requests
Processing the Request

programs
called by firewall during processing
Calling the Appropriate Program

protecting integrity database
Protecting the Integrity Database

protocols
and proxies
Understanding Proxy Services
rules
Protocol Rules

proxies
POP3
Understanding the POP3 Proxy

proxies
and protocols
Understanding Proxy Services
Gopher
Understanding the HTTP and Gopher Proxies
MediaBase
Managing MediaBase Services
plug proxy
Understanding the Plug Proxy
rlogin
Understanding the TELNET and rlogin Proxies
SNMP
Understanding the SNMP Proxy
Sybase
Understanding the Sybase Proxy
TELNET
Understanding the TELNET and rlogin Proxies

proxies
circuit
Application Level Security Services (Proxies)
circuit proxy
Managing Custom Services With Authentication
configuring
Configuring Proxy Services
creating configuration sets
Creating Multiple Configurations for a Proxy
described
Application Level Security Services (Proxies)
FTP proxy
Understanding the FTP Proxy
logs created
Creating Logs
multimedia
Managing Multimedia Services
plug
Application Level Security Services (Proxies)
SMPT
Mail Services
strong user authentication
Application Level Security Services (Proxies)
supported
Application Level Security Services (Proxies)
understanding
Understanding Proxy Services
X11
Managing X Window Services

proxy services
user restrictions
Understanding User Restrictions

proxy-aware web browsers
Using Proxy-Aware Browsers

Q files
Info Server Queries and Executable Programs

quarantine area
Planning the Firewall Configuration for Content Scanning
Configuring and Enabling Content Scanning

queries to Info Server
Info Server Queries and Executable Programs

query files
Adding Query Files to the Info Server Database

QuickTime movie header
Adding Binary Files to the Info Server Database

Quit menu command
Quit Menu Command
Saving Your Changes

Quote of the Day service (in example)
Configuring the Firewall for Plug Proxy Services

RADIUS
RADIUS Authentication
RADIUS Authentication

random-challenge password
Access Key II Authentication
CRYPTOCard RB-1

reading exception reports
Reading Exception Reports

reading service summary reports
Reading Service Summary Reports

RealAudio
TCP port 7070
How the Multimedia Proxy Works

RealAudio/RealVideo See RealPlayer
Application Level Security Services (Proxies)

RealAudio/RealVideo proxy
RealPlayer
Using the Proxy for Real Audio and Real Video Proxy Without Transparency

RealPlayer
Application Level Security Services (Proxies)

RealPlayer
Using the Proxy for Real Audio and Real Video Proxy Without Transparency

RealPlayer proxy
transparency
Using the RealPlayer Proxy

RealPlayer proxy
configuring
Accessing Multimedia Proxy Configuration
using
Using the RealPlayer Proxy

Reboot menu command
Reboot Menu Command
Saving Your Changes

receiving packets
Receiving Packets

Remote Authentication Dial-In User Service
RADIUS Authentication

remote execution
Application Level Security Services (Proxies)

remote print queue
Configuring the Print Client

remote shell See rsh proxy
Understanding the rsh Proxy

remote use of Gauntlet Firewall Manager
Managing Gauntlet Firewall Options

replication server
Understanding the SQL Server Proxy

reports
accessing configuration
Accessing Report Configuration
configuring frequency
Configuring Report Frequency
configuring recipients
Configuring Report Recipients
exception reports
Creating Reports
Creating Exception Reports
log file
Reading Logs

report recipients
Configuring Report Recipients

reporting
understanding
Understanding Logging and Reporting

reporting
security alerts
Security Alerts

reports
configuring
Configuring Reports
creating
Creating Reports
events to ignore
Configuring Events to Ignore in Exception Reports
frequency
Configuring Report Frequency
reading
Reading Logs and Reports
service summary reports
Creating Service Summary Reports
Creating Reports

requests
checking type
Checking the Request Type
processing
Processing the Request

request type
Checking the Request Type

resolution requirement
Configuring Your System

restoring the firewall
Backing Up and Restoring

retention time for log
Configuring Log Retention Time

reusable passwords
Reusable Passwords
Reusable Passwords

RFC 1213 (MIB-II)
SNMP Agent and Management Information Base

risk assessment for plug proxy
Managing Custom Services

rlogin
Application Level Security Services (Proxies)

rlogin
How the TELNET and rlogin Proxies Work

rlogin proxy
understanding
Understanding the TELNET and rlogin Proxies

rlogin proxy
authentication management
Creating Authentication User Entries
configuring
Configuring TELNET and rlogin Proxy Settings
enabling
Enabling TELNET and rlogin Proxy Services
planning
Planning TELNET and rlogin Proxy Settings
verifying setup
Verifying Your Setup
with authentication
TELNET and rlogin with Authentication
without authentication
TELNET, rlogin, and TN3270 Without Authentication

rlogin proxy
accessing configuration
Accessing TELNET and rlogin Proxy Configuration
configuring
Configuring the Firewall for Terminal Services
default rules
How the TELNET and rlogin Proxies Work
how it works
How the TELNET and rlogin Proxies Work
understanding
Managing Terminal Services
using terminal services
Using Terminal Services

rlogin-gw
How the TELNET and rlogin Proxies Work

routing VNP packets
Routing the Packet

rsh
Application Level Security Services (Proxies)

rsh proxy
configuring
Configuring rsh Proxy Settings

rsh proxy
accessing configuration
Accessing rsh Proxy Configuration
configuring firewall
Configuring the Firewall for rsh Services
configuring remote system
Configuring the Remote System
default configuration
How the rsh Proxy Works
enabling
Enabling rsh Proxy Services
how it works
How the rsh Proxy Works
planning settings
Planning rsh Proxy Settings
time-out values
Configuring rsh Proxy Settings
understanding
Understanding the rsh Proxy
using
Using rsh Services
verifying setup
Verifying Your Setup

rsh-gw daemon
How the rsh Proxy Works

rules
creating destination access rules
Creating Destination Access Rules
deleting destination access rules
Deleting Destination Access Rules
destination access
Default Destination Access Rules
modifying destination access rules
Modifying Destination Access Rules
order of precedence
Order of Precedence
Order of Precedence
Order of Precedence
packet screening rules
Adding Packet Screening Rules
understanding service group rules
Understanding Service Group Rules
user restriction
How User Restrictions Work

rules
and service groups
Service Groups

running web servers
Running a Web Server

S/Key
S/Key Authentication
S/Key System

SafeWord
SafeWord Authentication Server
SafeWord Authentication Server

sample headers
Adding Binary Files to the Info Server Database

Satanic or Cult category
Understanding Cyber Patrol

Save and Apply menu command
Save and Apply Menu Command
Saving Your Changes

Save menu command
Save Menu Command
Saving Your Changes

Save, Apply, and Reboot menu command
Saving Your Changes
Save, Apply, and Reboot Menu Command

saving changes
Saving Your Changes

scanning See content scanning
Understanding Content Scanning

screen resolution requirement
Configuring Your System

Search Engines category
Understanding Cyber Patrol

SecureNet Key
SecurID System Authentication

SecurID
SecurID Authentication
SecurID System Authentication
SecurID Authentication

security alerts
Security Alerts

security alerts section
Exception Reports: The Security Alerts Section

security breaches, reasons
Gauntlet Firewall Design Philosophy

Security Dynamics
SecurID Authentication

security perimeter
Establishing a Security Perimeter
example
How the Gauntlet Firewall Works
trusted networks
Trusted Networks
untrusted networks
Untrusted Networks

security, per-application
Application Level Security Services (Proxies)

sendmail program
Mail Services
-bt
Verifying Your Setup

servers
description
Firewall Server
running web servers
Running a Web Server
X server
How the X11 Proxy Works

service access
Understanding Destination Access

Service Configurations option (security rules)
Adding Service Group Rules

service groups
Allow Password Change option
Creating Service Groups
Port option
Creating Service Groups
rules
Service Groups

service group access
Understanding Destination Access

service group rules
adding
Adding Service Group Rules

service group rules
accessing configuration
Accessing Service Group Rules Configuration
adding
Adding Service Group Rules
changing order
Changing Order of Precedence
deleting
Deleting Service Group Rules
modifying
Modifying Service Group Rules
order of precedence
Order of Precedence
understanding
Understanding Service Group Rules

service groups
accessing configuration
Accessing Service Group Configuration
configuring
Configuring Service Groups
creating
Creating Service Groups
default
Service Groups
default
Default Service Groups
deleting
Deleting Service Groups
described
Service Groups
destination restrictions
Creating Service Groups
membership
Service Group Membership
modifying
Modifying Service Groups
planning
Planning Service Groups
trusted
Trusted Service Group
understanding
Understanding Service Groups
untrusted
Untrusted Service Group
when to add new
When to Add New Service Groups

service summary reports
Creating Reports
Creating Service Summary Reports

service summary reports
reading
Reading Service Summary Reports

services to be disabled
Gauntlet Firewall Operating System

Sex Education category
Understanding Cyber Patrol

Sexual Acts/Text category
Understanding Cyber Patrol

SHTTP services
Application Level Security Services (Proxies)

SHTTP services
SHTTP and SSL Services

Simple Mail Transport Protocol
Mail Services

smap daemon
How the SMTP Proxy Works

smap SMTP client
Understanding the SMTP Proxy

smapd daemon
Understanding the SMTP Proxy

SMPT proxy
configuring
Configuring SMTP Proxy Services

SMTP
Mail Services
Application Level Security Services (Proxies)
and content scanning
Understanding Content Scanning

SMTP Mail
content scanning
SMTP Mail

SMTP proxy
client
Understanding the SMTP Proxy
enabling
Enabling SMTP Proxy Services
planning
Planning SMTP Proxy Services
verifying
Verifying Your Setup

SMTP proxy
accessing configuration
Accessing SMTP Proxy Configuration
configuring
Configuring the Firewall for SMTP Services
configuring other settings
Configuring Other Settings
how it works
How the SMTP Proxy Works
understanding
Understanding the SMTP Proxy

SNMP agent
and MIB
SNMP Agent and Management Information Base

SNMP agent
Configuring SNMP Agents
accessing configuration
Accessing SNMP Agent Configuration
community
SNMP Agent Community
configuring
Configuring SNMP Agents
configuring firewall
Configuring the Firewall as an SNMP Agent
configuring settings
Configuring SNMP Agent Settings
configuring SNMP network managers
Configuring SNMP Network Managers
enabling
Enabling the SNMP Agent
how it works
How the SNMP Agent Works
object ID
SNMP Agent Object ID
planning settings
Planning SNMP Agent Settings
trap
Trap
understanding
Understanding the SNMP Agent

SNMP network managers
configuring
Configuring SNMP Network Managers

SNMP proxy
configuring SNMP agents
Configuring SNMP Agents
enabling
Enabling SNMP Proxy Services
ICMP traffic
Configuring SNMP Proxy Settings
ping
Configuring SNMP Proxy Settings
planning firewall
Planning the Firewall for SNMP Services
trap requests
SNMP Trap Requests

SNMP proxy
accessing configuration
Accessing SNMP Proxy Configuration
configuring
Configuring SNMP Proxy Settings
configuring firewall
Configuring the Firewall for SNMP Services
configuring SNMP agent
Configuring SNMP Agents
how it works
How the SNMP Proxy Works
understanding
Understanding the SNMP Proxy

SNMP requests
SNMP Requests

SNMP trap requests
SNMP Trap Requests

software components of Gauntlet Firewall
Gauntlet Firewall Software

sources
checking
Checking Source and Destination

source IP address rules
Source IP Address and Destination IP Address Rules

source port rules
Source Port and Destination Port Rules

specifying allowed activities
Service Groups

spoofing
IP-spoofing checks
Understanding Packet Screening

spoofing
spoofed packets
IP Screening Utility

Sports & Entertainment category
Understanding Cyber Patrol

SQL server proxy. See Microsoft SQL Server Proxy
Understanding the SQL Server Proxy

SQL services
Application Level Security Services (Proxies)

SSL proxy
enabling
Enabling Proxy Services
transparent access
Transparent Access

SSL proxy
accessing configuration
Accessing HTTP, SSL, and Gopher Proxy Configuration
configuring
Configuring SSL Proxy Settings
how it works
How the HTTP, Gopher, and SSL Proxies Work

SSL services
SHTTP and SSL Services

standard firewall configuration
How the Gauntlet Firewall Works

standard printer port
How the lp Proxy Works

starting VNPs
Starting Your VPN

stopping VNPs
Stopping Your VPN

StreamWorks
Application Level Security Services (Proxies)
proxy, transparency
Using the StreamWorks Proxy

StreamWorks
configuring proxy
Accessing Multimedia Proxy Configuration
player
Using the StreamWorks Proxy

StreamWorks XDMA port (UDP port 1558)
How the Multimedia Proxy Works

StreamWorks, using proxy
Using the StreamWorks Proxy

strong authentication
and proxies
Application Level Security Services (Proxies)

strong authentication
Understanding the User Authentication Management System
Access Key II
Access Key II Authentication
Access Key II Authentication
APOP
APOP
circuit proxy
Understanding the Circuit Proxy
CRYPTOCard RB-I
CRYPTOCard RB-1
CRYPTOCard RB-I
Defender Security Server
Digipass Authentication
Digipass
Digipass Authentication
Digipass Authentication
HTTP proxy
Understanding the HTTP and Gopher Proxies
RADIUS
RADIUS Authentication
RADIUS Authentication
reusable passwords
Reusable Passwords
Reusable Passwords
S/Key
S/Key Authentication
S/Key System
SafeWord
SafeWord Authentication Server
SafeWord Authentication Server
SecureNet Key
SecurID System Authentication
SecurID
SecurID System Authentication
SecurID Authentication
understanding
Understanding Strong Authentication
web services
Accessing Web Services with Authentication

supported proxies
Application Level Security Services (Proxies)

syb-gw
How the Sybase Proxy Works

Sybase clients
configuring
Configuring Sybase Clients

Sybase proxy
accessing configuration
Accessing Sybase Proxy Configuration
configuring
Configuring Sybase Proxy Settings
configuring firewall
Configuring the Firewall for Sybase Services
configuring Sybase clients
Configuring Sybase Clients
enabling
Enabling Sybase Proxy Services
how it works
How the Sybase Proxy Works
planning settings
Planning Sybase Proxy Settings
recommended configuration
How the Sybase Proxy Works
understanding
Understanding the Sybase Proxy
verifying setup
Verifying Your Setup
verifying your setup
Verifying Your Setup

Sybase SQL
Application Level Security Services (Proxies)

Symantec Norton AntiVirus for Firewalls
Configuring the Content Scanner

system configuration
Configuring Your System

system integrity
configuring checks
Configuring Integrity Checks
creating an integrity database
Creating an Integrity Database
files to ignore in check
Configuring Files to Ignore
how it works
How System Integrity Works
understanding
Understanding System Integrity
updating the integrity database
Updating the Integrity Database
verifying
Verifying System Integrity

System Manager
creating user accounts
Creating User Accounts

system warnings section
Exception Reports: The System Warnings Section

TCP port 119
How the News Proxy Works

TCP port 110
How the POP3 Proxy Works

TCP port 1755
How the Multimedia Proxy Works

TCP port 25
How the SMTP Proxy Works

TCP port 44
SHTTP and SSL Services

TCP port 513
How the TELNET and rlogin Proxies Work

TCP port 514
How the rsh Proxy Works

TCP port 515
How the lp Proxy Works

TCP port 6000
How the X11 Proxy Works
How the X11 Proxy Works

TCP port 7
Gopher and FTP Services

TCP port 7000
How the Multimedia Proxy Works

TCP port 7070
How the Multimedia Proxy Works

TCP port 80
SHTTP and SSL Services

TCP protocol and plug proxy
Understanding Proxy Services

TCP traffic
circuit proxy
Application Level Security Services (Proxies)
plug-board proxy
Application Level Security Services (Proxies)

TCP-based protocols for plug proxy
Planning

TELNET
Application Level Security Services (Proxies)

TELNET
Application Level Security Services (Proxies)
and circuit proxy
How the Circuit Proxy Works
and X11 proxy
How the X11 Proxy Works

TELNET proxy
authentication management
Creating Authentication User Entries

TELNET proxy
accessing configuration
Accessing TELNET and rlogin Proxy Configuration
configuring
Configuring TELNET and rlogin Proxy Settings
configuring firewall
Configuring the Firewall for Terminal Services
default rules
How the TELNET and rlogin Proxies Work
enabling
Enabling TELNET and rlogin Proxy Services
how it works
How the TELNET and rlogin Proxies Work
planning
Planning TELNET and rlogin Proxy Settings
understanding
Understanding the TELNET and rlogin Proxies
Managing Terminal Services
using terminal services
Using Terminal Services
verifying setup
Verifying Your Setup
with authentication
TELNET and rlogin with Authentication
without authentication
TELNET, rlogin, and TN3270 Without Authentication

telnetd
How the TELNET and rlogin Proxies Work

terminal services
Managing Terminal Services
Application Level Security Services (Proxies)

testing VNPs
Testing Your VPN

Text header
Adding Binary Files to the Info Server Database

text-based interface to Gauntlet Firewall
Managing Gauntlet Firewall Options

time-based password
SecurID Authentication

time-out values
rsh proxy
Configuring rsh Proxy Settings

tn-gw
How the TELNET and rlogin Proxies Work

TN3270
with authentication
TN3270 With Authentication

TN3270 requests
Understanding the TELNET and rlogin Proxies

trap
Trap

traceroute
Permit Rules

transparency
LDAP clients
Configuring LDAP Clients
RealPlayer proxy
Using the RealPlayer Proxy
SMTP proxy
Configuring Your Internal Mail Hub
StreamWorks proxy (not supported)
Using the StreamWorks Proxy

transparency
default for Gauntlet Firewall
Transparency
described
Transparency
HTTP access
Transparent Access
lp proxy
Configuring the Print Client
NetShow proxy
Using the NetShow Proxy
VODLive proxy
Using the VDOLive Proxy

trap requests
SNMP proxy
SNMP Trap Requests

trusted links
Privacy With Trust (Trusted Link)

trusted network groups
Trusted Network Group

trusted networks
Trusted Networks
and unknown networks
Unknown Networks
transparency
Transparency

trusted service groups
default
Trusted Service Group

trusted service groups
FTP
How the FTP Proxy Works

trusted VNP
creating
Creating a Trusted or Private VPN

UDP and network monitoring
Managing Packet Screening

UDP port 1558
How the Multimedia Proxy Works

UDP-based services and plug proxy
Managing Custom Services

unknown host name
Unknown Keyword

Unknown keyword
Unknown Keyword

unknown networks
Unknown Networks

untrusted networks
and unknown networks
Unknown Networks

untrusted network groups
Untrusted Network Group

untrusted networks
Untrusted Networks
transparency
Transparency

untrusted service groups
default
Untrusted Service Group
HTTP access
Untrusted Service Group
password
Untrusted Service Group

updating integrity database
Updating the Integrity Database

upgrade information
Upgrade Considerations

URL filtering
configuring
Configuring URL Filtering
understanding
Understanding URL Filtering

Usenet news
Managing News Services
Application Level Security Services (Proxies)

users
changing authentication methods
Changing Authentication Method
changing group membership
Changing Group Membership
deleting
Deleting Users
disabling
Disabling Users
enabling
Enabling Users
in authentication management system
Users in the Authentication Management System

user accounts
creating
Creating User Accounts

user accounts
Gauntlet Firewall Design Philosophy

user authentication entries
Creating User Authentication Entries

user authentication management system
Understanding the User Authentication Management System
Configuring the Firewall

user configuration,accessing
Accessing User Configuration

user IDs,changing
Changing User IDs

user names,changing
Changing User Names

user restrictions
supporting proxy services
Understanding User Restrictions

user restriction rules
planning
Planning User Restriction Rules
wildcard
Creating User Restriction Rules

user restriction rules
How User Restrictions Work
order of precedence
Order of Precedence

user restrictions
User Restrictions
accessing configuration
Accessing User Restriction Configuration
changing order of precedence
Changing Order of Precedence
configuring rules
Configuring User Restriction Rules
creating rules
Creating User Restriction Rules
deleting rules
Deleting User Restriction Rules
how they work
How User Restrictions Work
modifying rules
Modifying User Restriction Rules
order of precedence
Order of Precedence

users
changing passwords
Changing Passwords
configuring
Configuring Users
creating
Creating Users
deleting
Deleting Users
disabling
Disabling Users
modifying
Modifying Users
understanding
Understanding Users and Groups

using circuit proxy
Using the Circuit Proxy

using FTP services
Using FTP Services

using Gauntle Firewall Manager
Using the Gauntlet Firewall Manager

using Gopher services
Using Gopher Services

using Info Server
Using the Info Server

using lp proxy
Using lp Services

using news
Using News

using RealPlayer proxy
Using the RealPlayer Proxy

using rsh services
Using rsh Services

using StreamWorks proxy
Using the StreamWorks Proxy

using VODLive proxy
Using the VDOLive Proxy

using web services
Using Web Services

using X11 services
Using X11 Services

/usr/local/etc/infodb
How the Info Server Works
Stopping Your VPN

utilities
management utilities
Management Utilities

/var/adm/SYSLOG
Creating Logs

VASCO Data Security
Access Key II Authentication

VDOLive
TCP port 7000
How the Multimedia Proxy Works

VDOLive proxy
configuring
Accessing Multimedia Proxy Configuration
using
Using the VDOLive Proxy

verifying circuit proxy setup
Verifying Your Setup

verifying FTP proxy setup
Verifying Your Setup

verifying Microsoft SQL Server proxy setup
Verifying Your Setup

verifying multimedia proxy setup
Verifying Your Setup

verifying packet screening configuration
Verifying Your Configuration

verifying rsh proxy setup
Verifying Your Setup

verifying setup for rlogin proxy
Verifying Your Setup

verifying setup for TELENT proxy
Verifying Your Setup

verifying SMTP proxy
Verifying Your Setup

verifying Sybase proxy setup
Verifying Your Setup

verifying system integrity
Verifying System Integrity

video
MediaBase proxy
Managing MediaBase Services

Violence/Profanity category
Understanding Cyber Patrol

virtual private networks (VPN)
Managing Virtual Private Networks

virtual X server
How the X11 Proxy Works

virus checking See content scanning
Managing Content Scanning

VODLive proxy
transparency
Using the VDOLive Proxy

VPN (virtual private networks)
Managing Virtual Private Networks
routing packets
Routing the Packet

VPNs
accessing encryption configuration
Accessing Encryption Key Configuration
adding
Working With the VPN Configuration
configuring
Accessing the VPN Configuration
deleting
Deleting VPNs
deleting keys
Deleting Encryption Keys
encryption keys
Working With Encryption Keys
how they work
How Virtual Private Networks Work
modifying
Modifying VPNs
modifying keys
Modifying Encryption Keys
passthrough link
Encryption Through Multiple Firewalls (Passthrough Link)
planning
Planning VPNs
privacy with trust (trusted link)
Privacy With Trust (Trusted Link)
privacy without trust (private link)
Privacy Without Trust (Private Link)
private link
Privacy Without Trust (Private Link)
starting
Starting Your VPN
stopping
Stopping Your VPN
testing
Testing Your VPN
trusted link
Privacy With Trust (Trusted Link)
understanding
Understanding VPNs

warnings
using both interfaces
Managing Gauntlet Firewall Options

warnings
packet screening
Managing Packet Screening
packet screening rules
Planning Packet Screening Rules
using proprietary protocols
Managing Custom Services

weak authentication
Accessing Web Services with Authentication

web browser
configuring
Configuring Your Web Browser

web browsers
proxy aware
Using Proxy-Aware Browsers

web browsers
configuring
Configuring Web Browsers
configuring non-proxy-aware browsers
Configuring Web Browsers

web servers, running
Running a Web Server

web services
accessing for non-proxy-aware browsers
Accessing Web Services
Info Server
Understanding the Info Server
See Also HTTP proxy
Using Web Services

web services
Application Level Security Services (Proxies)
accessing with authentication
Accessing Web Services with Authentication
accessing without authentication
Accessing Web Services without Authentication
using
Using Web Services
x
Using Web Services

Web services (SSL)
Application Level Security Services (Proxies)

whois
Understanding the Plug Proxy

whois
Application Level Security Services (Proxies)

wildcard
in user restriction rules
Creating User Restriction Rules

wildcard character
Understanding Networks and Network Groups

wildcard characters
plug proxy
Configuring Plug Proxy Settings

wildcards
in SNMP proxy configuration
Configuring SNMP Proxy Settings

Work Time
Configuring Cyber Patrol Settings

X client
How the X11 Proxy Works

X port
How the X11 Proxy Works

X server
How the X11 Proxy Works

X Window services
Application Level Security Services (Proxies)

X11
Application Level Security Services (Proxies)

X11 proxy
and TELNET
How the X11 Proxy Works
configuring
Configuring X11 Proxy Settings
planning
Planning X11 Proxy Settings
X port
How the X11 Proxy Works

X11 proxy
accessing configuration
Accessing X11 Proxy Configuration
configuring firewall
Configuring the Firewall for X11 Services
enabling
Enabling X11 Proxy Services
how it works
How the X11 Proxy Works
understanding
Understanding the X11 Proxy
using X11 services
Using X11 Services

xurl-encoded characters
filtering
Understanding URL Filtering

ZIP header
Adding Binary Files to the Info Server Database