13.2.2 Trusted Interface
To later undo this change, clear the Final check box and distribute the
new policy.
Use this with caution, as for example setting the variable to
Enabled for the whole domain would start a logging session on
every affected host.
The trusted interface mechanism is used to allow use of the firewalled
host as a connection sharing server. Firewall rules are not applied to
traffic going through the trusted interface. If it is used wrongly it can open
up the host to any kind of attack from the network, so it is a good security
precaution to disable this mechanism if it is not absolutely needed.
Trusted Interface is enabled as follows:
1. Open the View menu and select the Advanced Mode option. The
Advanced Mode user interface is opened.
2. Select the subdomain where you want to enable Trusted Interface in
the Policy Domains pane.
3. Select the Policy tab in the Properties pane (the middle pane).
4. On the Policy tab, select the following path:
\F-Secure Internet Shield\Settings\Firewall Engine\Allow Trusted
Interface
Select Enabled to enable Trusted Interface for the currently selected
subdomain. This allows the end-users in the subdomain to configure a
network interface as Trusted Interface. Save and distribute the policy to
enforce the change.
CHAPTER 13
265
Need help?
Do you have a question about the CLIENT SECURITY 8.00 and is the answer not in the manual?
Questions and answers