Blocking Icmp Requests; Enabling Wan Broadcast Storm Protection; Enabling Ipsec Pass-Thru - Symantec 460R - Gateway Security Administrator's Manual

Blocking ICMP requests

You can configure the security gateway to drop and log any Internet Control Message Protocol (ICMP)
redirect requests received on a WAN interface.
To block ICMP requests
See "Advanced tab field descriptions"
1
2
3

Enabling WAN broadcast storm protection

Broadcast storm protection protects regular traffic from an overabundance of broadcast traffic. For
example, a condition may exist in which a broadcast message results in many responses, each of which
results in still more responses. This filter triggers when 63% of the WAN buffers are taken up by broadcast
packets.
You may want to disable this feature to allow applications that require broadcast packets.
To enable WAN broadcast storm protection
See "Advanced tab field descriptions"
1
2
3

Enabling IPsec pass-thru

IPSec pass-thru is supported by the security gateway. If the VPN client used in Exposed Host has problems
connecting from behind the security gateway, use the None setting.
The following list includes the supported IPsec types:
Note: Only change the IPsec pass-thru setting if instructed to do so by Symantec Technical Support.
In the SGMI, in the left pane, click Firewall.
In the right pane, on the Advanced tab, under Optional Security Settings, next to Block ICMP Requests,
do one of the following:
To block ICMP requests, click Enable.
To allow ICMP requests, click Disable.
Click Save.
In the SGMI, in the left pane, click Firewall.
In the right pane, on the Advanced tab, under Optional Security Settings, next to WAN Broadcast Storm
Protection, check Enable.
Click Save.
1 SPI
ADI - Assured Digital
2 SPI (default)
Standard (Symantec, Cisco Pix, and Nortel Contivity) clients
2 SPI-C
Cisco Concentrator 30X0 Series clients
Others
Redcreek Ravlin
None
on page 143.
on page 143.
Network traffic control
Configuring advanced options
63