Disabling Nat Mode; Enabling Ipsec Pass-Thru - Symantec 360R - Security Gateway SGS Administration Manual

Disabling NAT mode

Enabling IPsec pass-thru

To enable the IDENT Port
See "Advanced tab field descriptions"
1 In the SGMI, in the left pane, click Firewall.
2 In the right pane, on the Advanced tab, under Optional Security Settings,
check Enable IDENT Port.
3
Click Save.
You can configure the security gateway to work as a standard network router to
separate different subnets on an internal network. Disabling NAT Mode disables
the firewall security functions. This setting should only be used for Intranet
deployments where the security gateway is used as a bridge on a protected
network. When the security gateway is configured for NAT mode, it behaves as a
802.1D (MAC bridge) device.
To disable NAT Mode
See "Advanced tab field descriptions"
1 In the SGMI, in the left pane, click Firewall.
2
In the right pane, on the Advanced tab, under Optional Security Settings,
check Disable NAT Mode.
3 Click Save.
IPsec pass-thru is supported by the security gateway. If the VPN client used in
Exposed Host (DMZ) has problems connecting from behind the security gateway,
use the None setting.
The following list includes the supported IPsec types:
1 SPI
■
ADI - Assured Digital
2 SPI
■
Standard (Symantec, Cisco Pix, and Nortel Contivity) clients
2 SPI-C
■
Cisco Concentrator 30X0 Series clients
Configuring advanced options
on page 186.
on page 186.
Network traffic control 77