Packet Filtering; Configuring Security Level Autoselection - F-SECURE CLIENT SECURITY 7.00 Administrator's Manual

266

13.2.3 Packet Filtering

13.3

Configuring Security Level Autoselection

This is one of the basic security mechanisms in the firewall, it filters all the
IP network traffic based on information in the protocol headers of each
packet. The packet filtering can be enabled or disabled from the
Advanced tab in the Network Protection Settings. Disabling it is
sometimes needed for testing purposes, but will endanger the security.
Because of this, most corporate environments should make sure that the
packet filtering is always on. This is controlled by the variable:
1. Open the View menu and select the Advanced Mode option. The
Advanced Mode user interface is opened.
2. Select Root in the Policy Domains pane.
3. Select the Policy tab in the Properties pane (the middle pane).
4. On the Policy tab, select the following path:
\F-Secure Internet Shield\Settings\Firewall Engine\Firewall Engine
To make sure the packet filtering is always enabled, set this variable to
Yes, and select the Final check box. Remember to distribute the policy to
enforce the change.
In this example Security level Autoselection is configured for a subdomain
that contains only laptops in such a way that when the computers are
connected to company LAN, the Office security level is used. When a
dialup connection is used, the security level is changed to Mobile.
Before you start, you should know the DNS server IP address and the
default gateway's address, as they are needed for defining the security
level autoselection criteria.
You can find out these addresses by issuing the
ipconfig -all
command in command prompt.
1. Open the View menu and select the Advanced Mode option. The
Advanced Mode user interface is opened.
2. Select the subdomain in the Policy Domains pane.