Symantec 360R - Security Gateway SGS Administration Manual page 75

Port triggers can be used very quickly (milliseconds), but for only one computer
at a time. The speed with which port triggers are used gives the illusion of
allowing multiple computers having the same ports opened.
Special Applications entries work best with applications that require low
throughput. You may experience reduced performance with multiple computers
activating streaming media or a heavy incoming or outgoing volume.
The appliance only listens for traffic on the LAN. The computer on the LAN
activates the trigger, not traffic from the outside. The LAN application must
initiate traffic and you must know the ports or range of ports it uses to set up a
special applications entry. If traffic initiates from the outside, you must use an
inbound rule.
To configure a special application
Special applications help with dynamic packet forwarding. Configure a special
application for two-way communication. You can then edit it or delete it as your
needs change.
See "Special Application tab field descriptions"
To configure a special application
1 In the SGMI, in the left pane, click Firewall.
2 In the right pane, on the Special Applications tab, under Select Applications,
in the Name text box, type a name that represents the application.
3 Check Enable.
4 On the Outgoing Protocol drop-down list, select TCP or UDP.
5 In the Outgoing Port Range Start text box, type the first port number of the
port range to listen on.
6 In the Outgoing Port Range End text box, type the last number of the port
range to listen on.
7 In the Incoming Port Range Start text box, type the first port number in the
range to open.
8 In the Incoming Port Range End text box, type the last port number in the
range to open.
9 Click Add.
To update an existing special application
1 In the SGMI, in the left pane, click Firewall.
Network traffic control
Configuring special applications
on page 183.
75