Ids/Ips Field Descriptions - Symantec 360R - Security Gateway SGS Administration Manual

204 Field descriptions

IDS/IPS field descriptions

IDS/IPS field descriptions
Table C-31 Advanced tab field descriptions (Continued)
Section Field
Global IKE SA Lifetime
Settings (Phase 1
Rekey)
RADIUS Settings Primary RADIUS
Server
Secondary
RADIUS Server
Authentication
Port (UDP)
Shared Secret or
Key
The Symantec Gateway Security 300 series security gateway provides intrusion
detection and prevention (IDS/IPS). The IDS/IPS functions are enabled by
default, and provide atomic packet protection with spoof protection and IP. You
may disable IDS/IPS functionality at any time.
The following types of protection are offered with the IDS/IPS feature:
IP spoofing protection
■
IP options verification
■
TCP flag validation
■
Trojan horse protection
■
Description
Time, in minutes, before phase 1 renegotiation
of new encryption and authentication keys for
the tunnel.
The default value is 1080 minutes. The
maximum value is 2,147,483,647 minutes.
IP address or fully qualified domain name of the
server used to process extended authentication
exchanges with VPN clients.
The maximum values is 128 alphanumeric
characters.
IP address or fully qualified domain name of the
alternate server used to process extended
authentication exchanges with VPN clients.
The maximum values is 128 alphanumeric
characters.
Port on the RADIUS server used for
authentication.
The default value is 1812. The maximum value is
65535.
Authentication key used by the RADIUS server.
The maximum value is 50 alphanumeric
characters.