1. Manuals
  2. Brands
  3. Symantec Manuals
  4. Gateway
  5. 4400 Series
  6. Installation manual

Symantec 4400 Series Installation Manual

Clientless vpn gateway
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
Symantec™ Clientless VPN
Gateway 4400 Series

Installation Guide

Supported Platforms:
Models 4420 and 4460

Advertisement

Table of Contents
loading

Related Manuals for Symantec 4400 Series

Summary of Contents for Symantec 4400 Series

  • Page 1: Installation Guide

    Symantec™ Clientless VPN Gateway 4400 Series Installation Guide Supported Platforms: Models 4420 and 4460...

  • Page 2: Technical Support

    Corporation. NO WARRANTY. The technical documentation is being delivered to you AS-IS and Symantec Corporation makes no warranty as to its accuracy or use. Any use of the technical documentation or the information contained therein is at the risk of the user. Documentation may include technical or other inaccuracies or typographical errors.

  • Page 3: Contacting Technical Support

    24 hours a day, 7 days a week worldwide in a variety of languages for those customers enrolled in the Platinum Support program Advanced features, such as the Symantec Alerting Service and Technical Account Manager role, offer enhanced response and proactive security support Please visit our Web site for current information on Support Programs.

  • Page 4: Customer Service

    Problem description Error messages/log files Troubleshooting performed prior to contacting Symantec Recent software configuration changes and/or network changes Customer Service To contact Enterprise Customer Service online, go to www.symantec.com/ techsupp/, select the appropriate Global Site for your country, then select the enterprise Continue link.

  • Page 5: Table Of Contents

    Contents Chapter 1 Introducing Symantec Clientless VPN Gateway 4400 Series About the Symantec Clientless VPN Gateway 4400 Series ......5 Intended audience ....................6 Document structure ....................6 About product documentation ................7 Checking the components list ................7 Replacement CD-ROMs ................. 8...
  • Page 6 Plan for your license file ................41 Obtaining your license file ................. 42 Organizing your license files ..............42 Using the Symantec License Request & Maintenance Web site ....44 Activating your license files ............... 44 Uploading your license files ................50 Removing license files ................
  • Page 7 Web service information ................65 Defining your network architecture ............68 Appendix B Legal agreements About the Symantec Clientless VPN Gateway 4400 Series licenses .... 71 SYMANTEC CLIENTLESS VPN GATEWAY APPLIANCE LICENSE AND WARRANTY AGREEMENT ................ 71 1. Software License: ..................72 2.
  • Page 8 4 Contents Appendix C Troubleshooting About troubleshooting ..................86 Accessing troubleshooting information ............86 Appendix D Specifications and safety About this appendix .................... 88 Product specifications ..................88 Safeguard instructions ..................89 Product certifications ..................91...

  • Page 9: Introducing Symantec Clientless Vpn Gateway 4400 Series

    Checking the components list About the Symantec Clientless VPN Gateway 4400 Series The Symantec Clientless VPN Gateway is a Secure Sockets Layer (SSL) based dedicated appliance that provides the complete security essential for enabling universal enterprise remote access. The Symantec Clientless VPN Gateway 4400 Series supports the following end user clients (Internet browsers).

  • Page 10: Intended Audience

    Netscape v7.x You can use Microsoft Internet Explorer version 6 or later or Netscape Navigator version 7 or later to manage your Symantec Clientless VPN Gateway 4400 Series through the Security Gateway Management Interface (SGMI). In addition, you must ensure that your SGMI workstation has a minimum of 512 MB of RAM.

  • Page 11: About Product Documentation

    Lists the product specifications and the certifications obtained for the appliance. About product documentation The Symantec Clientless VPN Gateway 4400 Series functionality is described in this guide and the Symantec™ Clientless VPN Gateway 4400 Series Administrator’s Guide. The Symantec™ Clientless VPN Gateway 4400 Series Administrator’s Guide...

  • Page 12: Replacement Cd-Roms

    8 Introducing Symantec Clientless VPN Gateway 4400 Series Checking the components list Table 1-3 Components list (Continued) Part Description Symantec Clientless VPN Contains the following items: Gateway v5.0 Software and Appliance restore partition Documentation for 4400 Adobe Acrobat Reader Series (the restore CD-...

  • Page 13: Installing The Appliance

    Note: Read the installation instructions before connecting the system to its power source. You can install the Symantec Clientless VPN Gateway 4400 Series either free- standing or in a rack. Installing your free-standing appliance You can install the Symantec Clientless VPN Gateway 4400 Series as a free- standing appliance.

  • Page 14: Mounting In A Rack

    Ensure that the installation site has a smooth and level surface, such as the top of a computer table in a minimum access area. In addition, avoid placing the Symantec Clientless VPN Gateway 4400 Series appliance in a cluttered or busy area. Ensure this area is only accessible by authorized security personnel.

  • Page 15: About Model 4420

    Secure the mounting brackets to the equipment rack. About model 4420 This section describes the back panel of the Symantec Clientless VPN Gateway model 4420. Model 4420 offers two active 10/100 Fast Ethernet ports. There are four inactive ports for future expansion.

  • Page 16: Connecting Model 4420 To The Network

    12 Installing the appliance About model 4420 Table 2-1 describes the back panel of model 4420. Table 2-1 Model 4 420 back panel feature Location Feature Description Cooling fans Maintains proper operating temperature. Ensure that the ventilation holes in the front and back are not blocked.

  • Page 17: Connecting Power Cord To Model 4420

    The hard disk spins, the fans turn on, and the LEDs and LCD screen on the appliance light up. A number of status messages and Symantec CVG 5.0 display on the LCD screen when the appliance completes its start process.

  • Page 18: Connecting Model 4460 To The Network

    14 Installing the appliance About model 4460 Table 2-2 lists the model 4460 back panel. Table 2-2 Model 4460 back panel Location Feature Description Master power switch Turns the appliance on or off. (top) Power socket Connection for AC power cord. (bottom) Cooling fan Maintains proper operating temperature.

  • Page 19: Turning On The Power For The Model 4460

    The hard disk spins up, the fans turn on, and the LEDs and LCD screen on the appliance light up. A number of status messages and Symantec CVG 5.0 display on the LCD screen when the appliance completes its start process.
  • Page 20 16 Installing the appliance About model 4460...

  • Page 21: Appliance Setup And Initial System Configuration

    VPN Gateway appliance, which includes getting the appliance set up and running. For information on configuring the appliance through the GUI, see the Symantec Clientless VPN Gateway 4400 Series Administrator’s Guide. There are two steps to take before beginning the initial setup process:...
  • Page 22 You can use the Clientless VPN Gateway appliance without a license file for a 30- day evaluation period. At any point during those 30 days, use the online license file generator from the Symantec licensing and registration Web site at https:// licensing.symantec.com...

  • Page 23: Front Panel Layout

    Gateway appliance takes place at the appliance’s front panel, where you enter and modify parameters, such as system and network IP addresses. Figure 3-1 Symantec Clientless VPN Gateway 4400 Series front panel Table 3-1 describes the elements of the front panel and how they work.

  • Page 24: Front Panel Controls

    20 Appliance setup and initial system configuration Front panel layout Table 3-1 Front panel descriptions (Continued) Location Feature Description Status indicators: The outside network activity indicator blinks when there is traffic on the outside network interface (int1) of the model 4420. This feature is disabled on the model 4460.
  • Page 25 Appliance setup and initial system configuration Front panel layout Figure 3-2 Front panel controls Table 3-2 describes the function of the front panel controls. Use these controls to input your information. The up, down, left, and right buttons do not physically have arrows on the buttons.

  • Page 26: Example Network Diagram

    22 Appliance setup and initial system configuration Example network diagram Example network diagram Figure 3-3 provides a sample of a typical network. The Clientless VPN Gateway is managed by a client computer with a browser. Supported browsers include Microsoft Internet Explorer version 6 or later or Netscape version 7 or later. You browse to the specific appliance interface and then type a user name and password to log onto the Security Gateway Management Interface.

  • Page 27: Using The Network Setup Worksheet

    User input during initial setup To configure an interface for appliance management, you need the following: Interface IP address_____________________________________ Netmask________________________________________________ Default Gateway_________________________________________ Symantec Clientless VPN Gateway appliance output during initial setup Record the Administrator password from the LCD display: Administrator password __________________________________ The password is output during the hardware setup process.

  • Page 28: Changing Passwords

    Use Security Gateway Management Interface > Sever tab > Password. Run the appliance setup and accept the new administrator password by selecting [Yes]. For details on changing passwords, see the Symantec Clientless VPN Gateway 4400 Series Administrator’s Guide. Performing the initial appliance network setup This section covers the initial appliance network setup.
  • Page 29 Appliance setup and initial system configuration Performing the initial appliance network setup When the system messages display on the LCD, press any arrow button to display the 1. Network system menu option. Press e to start the network setup. Under Select Interface, use the left or right arrow button to select Interface 0 or Interface 1 for your management interface.

  • Page 30: Displaying System Information

    LCD screen then displays the time and status messages. You can now configure the appliance using the Security Gateway Management Interface (SGMI) or the Command-line Interface (CLI) from the inside interface. See the Symantec Clientless VPN Gateway 4400 Series Administrator’s Guide for more information. Displaying system information Once you complete the initial network appliance setup the LCD screen enters a monitoring mode that it remains in during normal system operations.

  • Page 31: Using The System Menu

    4. System ID Displays the Symantec system ID. Press e to return to the system menu once the Symantec system ID is displayed on the LCD screen. Press either the down button or the right button to move to the next menu item.

  • Page 32: Connecting To The Appliance

    In the user name text box, type admin. In the password text box, type the password you received and wrote down during the appliance LCD setup. Click Login. The SGMI displays. For a detailed description of the SGMI, see the Symantec Clientless VPN Gateway Administrator’s Guide.

  • Page 33: Configuring Your Clientless Vpn Gateway Appliance

    After you have successfully connected to the Clientless VPN Gateway appliance, the system displays the SGMI. For more detailed instructions about how to configure the Clientless VPN Gateway see the Symantec Clientless VPN Gateway 4400 Series Administrator’s Guide. Locking front LCD panel controls Locking the appliance front LCD panel controls provides additional security against personnel who should not have access privileges.

  • Page 34: Running The Quickstart Wizard (Optional)

    30 Appliance setup and initial system configuration Running the Quickstart Wizard (Optional) “Settings for HyperTerminal CLI connection” on page 30. Table 3-5 Settings for HyperTerminal CLI connection Parameter Setting Bits per second 9600 Data bits Parity None Stop bits Flow control None Hardware handshake Emulation...
  • Page 35 Use HOST files for temporary mappings. You can change information entered in the Quickstart Wizard or the LCD setup using the SGMI, see the Symantec Clientless VPN Gateway Administrator’s Guide for more information. Before starting the Quickstart Wizard, gather the following information:...

  • Page 36: Command-Line Interface (Cli) Features

    32 Appliance setup and initial system configuration Command-Line Interface (CLI) features To pre-configure the Internal authentication server, at the Use the internal authentication server prompt, type: You must type the full word: yes or no.Typing yes starts the Internal authentication server and creates a Role called officeRole, a Scheme (SCVGScheme), and a test user (demo).

  • Page 37: Uniform Command Formats

    Appliance setup and initial system configuration Configuring the Ethernet port Uniform command formats Commands always start with an object followed by the action and then attribute value pairs: object action name1=value1 name2=value2 This example shows the definition of network interface 1. ip show interfaceID=1 Interface Netmask...
  • Page 38 34 Appliance setup and initial system configuration Configuring the Ethernet port Log on using the default administrator account, at the setup login prompt type admin At the password prompt type your admin password. The default username is admin and the password is the one generated during the LCD setup.

  • Page 39: Adding The Default Gateway

    Note: If a computer with a Web browser is connected to the same subnet as the Clientless VPN Gateway, you may complete the configuration using the Security Gateway Management Interface instead of using the command-line interface as shown here. See the Symantec Clientless VPN Gateway Administrator’s Guide for more information. Adding the default gateway...

  • Page 40: Restoring The Software

    Log out to close the session, type the following command: exit Restoring the software The Symantec Clientless VPN Gateway 4400 Series CD-ROM ships with the appliance and contains a Symantec Clientless VPN Gateway 4400 Series restore program. In the unlikely event that a complete reinstallation of the software image on the appliance is required, you can boot this CD-ROM in a computer connected to the appliance.
  • Page 41 CD-ROM drive. Insert the appliance IDE CD-ROM into the CD-ROM drive. When the program runs, you are prompted to accept the Symantec Software License Agreement and directions for the procedure also displays. While pressing and holding down the s button on the front panel controls, turn on the power to the appliance using the power switch.
  • Page 42 38 Appliance setup and initial system configuration Restoring the software 12 Remove the CD-ROM and restart your computer to return it to normal service. 13 Turn on the appliance and perform the initial setup process again. “Performing the initial appliance network setup” on page 24.

  • Page 43: License Setup

    To give you time to organize the licensing process, all the software included with your Symantec Clientless VPN Gateway 4400 Series is enabled for a 30-day grace period. Once you load and enable your license file, your 30-day grace period is no longer valid.

  • Page 44: Obtaining And Organizing License Serial Numbers

    Serial numbers on Serial Number Certificates correspond to a particular order that you have placed, and may not apply to a particular appliance. If you have placed orders for other Symantec products, you may find that the license serial numbers appear intermingled on the same Serial Number Certificate. For example, if you ordered one appliance, you won’t have to worry about separating...

  • Page 45: Plan For Your License File

    Full company name. Maintenance serial number for base license. The Symantec System ID is an ID number that identifies your appliance to the licensing system, which you can find through the product’s GUI or command- line interface using the license command.

  • Page 46: Obtaining Your License File

    When you apply for your license file, ensure that you associate the email, and associated attachment, that you receive from Symantec with a specific appliance. You should create a folder structure to collect and sort the license files you receive with a naming convention that helps you identify which file goes with which appliance.
  • Page 47 Table 4-1 License File Organization Worksheet I. Certificate number II. Appliance serial number III. Symantec System ID number IV. Base Symantec Clientless VPN Gateway license Part codes Description License Serial number sessions Base license Base maintenance V.

  • Page 48: Using The Symantec License Request & Maintenance Web Site

    Using the Symantec License Request & Maintenance Web site The Symantec Clientless VPN Gateway 4400 Series software is shipped with a license that lets the software operate for 30 days. This license begins when you install the product. You must obtain a license file within the 30-day grace period to continue using the product.
  • Page 49 License setup Using the Symantec License Request & Maintenance Web site To activate your license files Browse to https://licensing.symantec.com. Under Supported Languages, select your language. In the Licensing and Registration page, under Enter Serial Number, in the Serial Number text box, type your base software serial number.
  • Page 50 In the Symantec System ID text box, type your appliance Symantec System ID. A valid Symantec System ID is required to activate the product on a specific machine.You can find the Symantec System ID using the Symantec Gateway Management Interface on the Server tab, on the left pane License menu option, under Obtain New Licenses For The Symantec Clientless VPN Gateway.
  • Page 51 License setup Using the Symantec License Request & Maintenance Web site These are serial numbers that are associated with licenses purchased for this appliance only. If you have more than three serial numbers to enter, click add. Clicking add inserts new fields above the ones you have already filled in. You can now input any additional serial numbers you may have.
  • Page 52 48 License setup Using the Symantec License Request & Maintenance Web site Press submit. 10 On the technical contact information page, under Contact 1, do the following: In the First Name text box, type the first name of your technical contact.
  • Page 53 License setup Using the Symantec License Request & Maintenance Web site 11 Click submit. 12 Under Confirm the following information, do the following: Under Serial Numbers, confirm the serial numbers and products you have registered. Under License Registration, confirm your email address and Symantec System ID.

  • Page 54: Uploading Your License Files

    Uploading your license files 13 Click submit. The person you specified receives an email from Symantec with an attached license file, which he or she can use to enable all the product features registered. The subject line of that email contains a serial number for one of the licensed products contained within the order.

  • Page 55: Removing License Files

    If you must remove a license file, contact Symantec Technical Support. Explanation of the appliance licensing and maintenance Symantec Clientless VPN Gateway 4400 Series usage is controlled by a licensing scheme. Obtaining a license file When you purchase a license, Symantec provides you with a software Serial Number Certificate.

  • Page 56: Maintenance Contracts

    The appliance runs for 30 days without a license file. However, a license file is necessary to enable the software on the appliance to run after this 30-day grace period has expired. You obtain a license file by accessing the Symantec licensing Web site. See “Getting started with your 30-day grace period”...

  • Page 57: Maintenance Renewals

    Warranty Agreement. The license agreement grants the licensee the right to use the software on the associated appliance. The LINUX operating system used in Symantec Clientless VPN Gateway 4400 Series is covered by the GNU General Public License (GPL) and the Library General Public License (LGPL).
  • Page 58 54 License setup About Symantec Clientless VPN Gateway 4400 Series licenses...

  • Page 59: Appendix A Developing A Pre-Installation Security Plan

    Appendix Developing a pre- installation security plan This chapter includes the following topics: About developing a security plan Defining your security policy Educating users Filling out worksheets...

  • Page 60: About Developing A Security Plan

    About developing a security plan Developing a security plan is your first step in your installation process and helps you collect the information needed to install and configure your Symantec Security Gateway appliance. The process of developing a security plan consists of three basic steps:...

  • Page 61: Before Writing Your Security Plan

    Developing a pre-installation security plan Defining your security policy Before writing your security plan Before you begin writing rules to implement your plan using the Symantec Clientless VPN Gateway Administrator’s Guide, you need to answer the following questions: What is your network topology and deypolyment scenario?

  • Page 62: Educating Users

    58 Developing a pre-installation security plan Educating users policies, implementing them carefully, and confirming that they work as intended. Educating users Your overall site policy involves a numbers of tasks. Of these, user education is paramount. Publish your company’s security policy. Make sure your users are informed of the determination of would-be invaders and the sophistication of available password guessing programs.

  • Page 63: Filling Out Worksheets

    Developing a pre-installation security plan Filling out worksheets Network planning Filling out worksheets To aid you in the planning process, we have provided a set of policy planning worksheets. Use these worksheets to help implement the specific tasks of your security plan and to assist you during the installation process.
  • Page 64 60 Developing a pre-installation security plan Filling out worksheets Table A-1 to list all persons involved in administering the system. Table A-1 Administrator names Name Email Phone Pager Are organization computer resources accessible by remote dial-in? _____ Yes _____ No Are organization computer resources accessible by an internal network? _____ Yes _____ No...

  • Page 65: Site Hardware Information

    Before you begin the installation process, you must collect some basic hardware information. To collect hardware information for your site Record the Host ID of the Symantec Clientless VPN Gateway 4400 Series. ____________________________________ Record the Symantec System ID for the appliance. This is used for licensing.

  • Page 66: Tcp/Ip Address

    62 Developing a pre-installation security plan Filling out worksheets Record the name of your Internet Service Provider (ISP). ______________________________ Does your site have, or plan to have, more than one Internet access point? _____ Yes _____ No Are there any other Internet connections besides the security gateway (such as modems connected to workstations)? If yes, list.
  • Page 67 Developing a pre-installation security plan Filling out worksheets Do you have an internal name server? _____ Yes _____ No Do you have someone at your site who is knowledgeable about, and comfortable working with, DNS and how to configure it properly? _____ Yes _____ No If yes, who?

  • Page 68: Allowed Tcp/Ip Services

    64 Developing a pre-installation security plan Filling out worksheets 11 If yes, and you have your own internal NNTP server, record its IP address and the address of the server that will be supplying you with news feeds. _____ Internal server: _____________________ _____ External news server: ________________ Note: Only IP can be directly handled by the security gateway.

  • Page 69: Web Service Information

    Developing a pre-installation security plan Filling out worksheets Table A-3 TCP/IP services (Continued) Group Authentication Access times Telnet HTTP Other Note: Over time, you will likely refine these permissions. You should make periodic updates to this list. Web service information Use the following section to define information about your Web services.
  • Page 70 66 Developing a pre-installation security plan Filling out worksheets If yes, select the location of the Web server: _____ Internal to the security gateway _____ External to the security gateway Record the Web server name and IP address: Name:_________________ Address:____________________ Will you be using an external caching/proxy server? If yes, record the server name and IP address.

  • Page 71: Access Lists

    Developing a pre-installation security plan Filling out worksheets Access lists List those users and groups to which you plan to write rules to allow access. Table A-5 to list all entity identifications allowed. Table A-5 Entity identification IP address/DNS name Type Internal/external Table A-6...

  • Page 72: Defining Your Network Architecture

    68 Developing a pre-installation security plan Filling out worksheets Defining your network architecture In the following section, list all of the entities that comprise your network. Show all routers and computers systems that will be directly affected by, or connected to, the security gateway and its directly connected networks.
  • Page 73 Developing a pre-installation security plan Filling out worksheets Table A-9 Router IP addresses Router IP addresses Your external network can also include external servers, such as an external Web server. Use Table A-10 to list all external network servers. Table A-10 External network servers DNS name services Mail server...
  • Page 74 70 Developing a pre-installation security plan Filling out worksheets...

  • Page 75: Appendix B Legal Agreements

    Series licenses The appliance software is covered by the Symantec Clientless VPN Gateway 4400 Series License and Warranty Agreement. The license agreement grants the licensee the right to use the software on the associated appliance. The LINUX operating system used in Symantec Clientless VPN Gateway 4400 Series is covered by the GNU General Public License (GPL) and the Library General Public License (LGPL).

  • Page 76: Software License

    You may: A.use the Software solely as part of the Appliance for no more than the number of concurrent users as have been licensed to You by Symantec under a License Module; B.use the Restore Software solely to restore the Appliance to its original factory functionality in the event the Software preloaded on the Appliance is corrupted or becomes unusable;...

  • Page 77: Content Updates

    Legal agreements SYMANTEC CLIENTLESS VPN GATEWAY APPLIANCE LICENSE AND WARRANTY AGREEMENT D.after written notice to Symantec and in connection with a transfer of the Appliance, transfer the Software on a permanent basis to another person or entity, provided that You retain no copies of the Software, Symantec consents to the transfer and the transferee agrees in writing to the terms and conditions of this agreement.
  • Page 78 Appliance. Your sole remedy in the event of a breach of this warranty will be that Symantec will, at its option, repair or replace any defective Hardware returned to Symantec within the warranty period or refund the money You paid for the Appliance.

  • Page 79: Disclaimer Of Damages

    Appliance to You, freight and insurance prepaid. In the event that Symantec, in its sole discretion, determines that it is unable to replace or repair the Hardware, Symantec will refund to You the F.O.B. price paid by You for the defective Appliance.

  • Page 80: Export Regulation

    Otherwise, this Agreement will be governed by the laws of England. This Agreement and any related License Module is the entire agreement between You and Symantec relating to the Appliance and: (i) supersedes all prior or contemporaneous oral or written communications, proposals and representations with respect to its subject matter;...

  • Page 81: Excluded Software

    Excluded Software, including any modifications thereto, only upon request at a nominal charge. If You are interested in obtaining a copy of such source code, please contact Symantec Customer Service at one of the above addresses for further information.

  • Page 82: Q Public License, Version 1.0

    78 Legal agreements Third-party attributions F. Q Public License, Version 1.0 Copyright (C) 1999 Trolltech AS, Norway. G. Berkeley DB Software Copyrights, Conditions, and Disclaimers Copyright (c) 1990-2000 Sleepycat Software. All rights reserved. Copyright (c) 1990, 1993, 1994, 1995 The Regents of the University of California. All rights reserved.

  • Page 83: Popt Requirements, Copyright, And Disclaimer

    Legal agreements Third-party attributions M. Popt Requirements, Copyright, and Disclaimer Software: Copyright (c) 1998 Red Hat Software. N. Pam Requirements, Copyright, and Disclaimer THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.

  • Page 84: Vrrpd License Terms

    80 Legal agreements GNU library general public license R. VRRPD License Terms (c) JME SOFT This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation;...
  • Page 85 Legal agreements GNU library general public license The reason we have a separate public license for some libraries is that they blur the distinction we usually make between modifying or adding to a program and simply using it. Linking a program with a library, without changing the library, is in some sense simply using the library, and is analogous to running a utility program or application program.
  • Page 86 82 Legal agreements GNU library general public license terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Library.
  • Page 87 Legal agreements GNU library general public license It may happen that this requirement contradicts the license restrictions of other proprietary libraries that do not normally accompany the operating system. Such a contradiction means you cannot use both them and the Library together in an executable that you distribute.
  • Page 88 84 Legal agreements GNU library general public license ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE LIBRARY IS WITH YOU. SHOULD THE LIBRARY PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO...

  • Page 89: Appendix C Troubleshooting

    Appendix Troubleshooting This chapter includes the following topics: About troubleshooting Accessing troubleshooting information...

  • Page 90: About Troubleshooting

    About troubleshooting About troubleshooting You can find up-to-date troubleshooting information for Symantec Clientless VPN Gateway 4400 Series (and all Symantec products) on the Symantec Web site, www.symantec.com. Accessing troubleshooting information Use the following procedure to access troubleshooting information from the Symantec Knowledge Base.

  • Page 91: Appendix D Specifications And Safety

    Appendix Specifications and safety This chapter includes the following topics: About this appendix Product specifications Safeguard instructions Product certifications...

  • Page 92: About This Appendix

    88 Specifications and safety About this appendix About this appendix This appendix lists the product specifications and safety certifications. Product specifications Each respective model offers increased performance and these different specifications are listed in Table D-1. Table D-1 Product specifications Parameter Model 4420 4460...

  • Page 93: Safeguard Instructions

    Warning: To reduce the risk of electrical shock, do not disassemble this product. Return it to Symantec when service or repair work is required. Opening or removing covers may expose you to dangerous voltage or other risks. Incorrect reassembly can cause electric shock when this product is subsequently used.
  • Page 94 Warning: Electrical current from power, telephone, and network cables is hazardous. Operating the unit in an equipment rack If you plan to install the Symantec Gateway Security 4400 Series in an equipment rack, use these precautions: Ensure the ambient temperature around the appliance (which may be higher than the room temperature) are within the specified limits.

  • Page 95: Product Certifications

    Specifications and safety Product certifications Product certifications The Symantec Clientless VPN Gateway 4400 Series is designed to meet the following regulatory requirements for public safety: UL and CSA Standard for Safety of Information Technology Equipment including Electrical Business Equipment (UL 60950, 3rd Edition and CAN/ CSA C22.2 No.60950-00).
  • Page 96 92 Specifications and safety Product certifications...
  • Page 97 Index Numerics front panel controls description 19 30-day grace period 39, 44, 52 locking 29 front panel layout 19 access lists, checklists 66 activating, license files 44 GNU library general public license 80 additive licenses 51 address configuration 22 administrator password 23 advanced configurations 29 high availability license bundles 53 appliance setup 24...
  • Page 98 23 traffic 20 changing 24 transmit 20 LCD 23 Web activity 20 logon 28 Symantec Software License Agreement 71 root password 23 Symantec System ID 40, 46 Platinum support 53 Symantec System ID, defined 41 power cord installation system...
  • Page 99 Index network setup 27 shutdown 27 system ID 27 TCP/IP checklist 62 temperature 20 troubleshooting 86 Turn 13 turning on model 4420 13 model 4460 15 unlocking front panel controls 29 USB port modem connection 12, 14 user documentation 7 using locked front panel controls 29 using, system menu 27 WEB service, checklist 65...
  • Page 100 4 Index...

Table of Contents