HP VSR1000 Security Configuration Manual page 8

Configuring SSL ······················································································································································· 282
Overview ······································································································································································· 282
SSL security mechanism ······································································································································ 282
SSL protocol stack ··············································································································································· 282
FIPS compliance ··························································································································································· 283
SSL configuration task list ············································································································································ 283
Configuring an SSL server policy ······························································································································· 283
Configuring an SSL client policy ································································································································ 285
Displaying and maintaining SSL ································································································································· 286
Configuring ASPF ···················································································································································· 287
Overview ······································································································································································· 287
ASPF basic concepts ··········································································································································· 287
ASPF inspections·················································································································································· 288
ASPF configuration task list ········································································································································· 290
Configuring an ASPF policy ········································································································································ 290
Applying an ASPF policy to an interface ·················································································································· 290
Displaying and maintaining ASPF ······························································································································ 291
ASPF configuration examples ····································································································································· 291
ASPF FTP application inspection configuration example ················································································ 291
ASPF TCP application inspection configuration example ··············································································· 293
ASPF H.323 application inspection configuration example ·········································································· 294
Configuring APR ······················································································································································ 296
Overview ······································································································································································· 296
PBAR ····································································································································································· 296
Group-based application recognition ··············································································································· 296
Configuring PBAR ························································································································································ 297
Configuring application groups ································································································································· 297
Enabling application statistics on an interface ········································································································· 298
Displaying and maintaining APR ································································································································ 299
APR configuration example ········································································································································· 299
Network requirements ········································································································································· 299
Configuration procedure ···································································································································· 299
Verifying the configuration ································································································································· 300
Managing sessions ················································································································································· 301
Overview ······································································································································································· 301
Session management operation ························································································································· 301
Session management functions ·························································································································· 301
Session management task list ····································································································································· 302
Setting the session aging time for different protocol states ····················································································· 302
Setting the session aging time for different application layer protocols ································································ 303
Specifying persistent sessions ····································································································································· 304
Configuring session logging ······································································································································· 304
Displaying and maintaining session management ··································································································· 305
Configuring connection limits ································································································································· 307
Connection limit configuration task list ······················································································································ 307
Creating a connection limit policy ····························································································································· 307
Configuring the connection limit policy ····················································································································· 308
Applying the connection limit policy ·························································································································· 308
Displaying and maintaining connection limits ·········································································································· 309
Connection limit configuration example ···················································································································· 310
Troubleshooting connection limits ACLs in the connection limit rules with overlapping segments ······················ 312
vi