SunScreen, Part Two: Policies, Rules, and NAT

Monday, 10 February 2003, 12:55 PM EST

The first article in this series introduced SunScreen 3.2, which is available as part of the Solaris 9 distribution. SunScreen is Sun Microsystem's firewall product and provides a variety of features that allow system and network administrators to secure their networks as well as provide for remote access capabilities. This article will cover the some of the rudimentary facilities in SunScreen such as adding and removing rules, setting up a remote management station, and network address translation.

SunScreen uses the concept of policies as a way of defining the rules that the SunScreen firewall implements. Policy rules consist of a variety of items, which Sun terms as "Common Objects". Common objects include such items as the following:

IP Addresses
SunScreen Screens
Services
Certificates
Time

This is not an exhaustive list by any means. There are many more common objects that can define the rules used to implement SunScreen policies. Common objects provide a significant flexibility, which allows SunScreen policies to be very powerful.

[ Read more ]

Related items




Spotlight

USBdriveby: Compromising computers with a $20 microcontroller

Posted on 19 December 2014.  |  Security researcher Samy Kamkar has devised a fast and easy way to compromise an unlocked computer and open a backdoor on it: a simple and cheap ($20) pre-programmed Teensy microcontroller.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Fri, Dec 19th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //