Symantec SGS 360 (10224331) Firewall

Symantec™ Gateway Security 300 Series

Release Notes About this document

Intrusion detection and prevention

This document contains the following information:

IDS and IPS protect the site from additional Internet attacks.

• Product features • Support

VPN functionality

• Documentation

The privacy and confidentiality benefits of IPsec VPN technologies are enhanced by features that add performance and allow tunnels to be more easily configured.

• Installing Symantec Gateway Security 300 Series • Issues and limitations • Documentation issues Before installing the product, read this document in its entirety. It contains important information about the Symantec Gateway Security 300 Series functionality. This document accompanies Symantec Gateway Security 300 Series firmware build XXX.

Product features Symantec Gateway Security 300 Series provides a wide range of integrated security functions to meet your security needs. This section describes functionality, hardware, and software features.

Antivirus policy enforcement (AVpe) Automatically monitors and ensures that supported Symantec antivirus client protection is up-to-date and active on workstations and personal computers attempting to pass data through the security gateway. You can configure the appliance to block access for clients that are not compliant.

On-board content filtering (URL) Content filtering improves productivity and reduces wasted bandwidth by restricting access to unwanted Internet sites. You can configure content filtering to allow or deny access to specified sites. Up to one hundred static URLs may be added to both an allow list and a deny list.

VPN tunnel high-availability and persistence If a network failure occurs, Gateway-to-Gateway VPN tunnels automatically reestablish on the back-up port. When the appliance reboots, VPN tunnels are automatically reconnected. VPN configuration groups This allows definition of Client-to-Gateway VPN groups that share VPN configuration parameters. When a client establishes a tunnel, the appropriate configuration parameters are automatically downloaded. This eliminates repetitive manual configuration of every individual client. VPN configuration parameters are consistent with those of other Symantec VPN products. AES encryption Advance Encryption Standard (AES) is the successor to the popular DES encryption scheme. AES provides higher security via longer key lengths up to 256-bits while at the same time reducing processing overhead. External VPN authentication with integrated RADIUS client Extended authentication allows enterprises to integrate VPN client authentication into their enterprise-wide authentication design.

ICSA VPN certification Symantec Gateway Security 300 Series is certified to the highest level of comprehensive security and allowing interoperability with other ICSA-certified VPN end points.

Rear-access cabling and controls Provides rear access for all cables, connectors, and operator controls for one-sided access during installation and reconfiguration.

Usability features

Support

‘This section describes some of the Symantec Gateway Security usability features in the Security Gateway Management Interface (SGMI).

Customers still within the included 90-day maintenance agreement may contact the Technical Support group by phone or online at www.symantec.com/techsupp/ Customers who purchased Platinum or Gold support agreements may contact Platinum Technical Support by the Platinum Web site at www-secure.symantec.com/ platinum/ or Gold Technical Support at www secure.symantec.com/gold/

Setup Wizard for ISP connection Queries for configuration parameters provided by ISPs for most major technologies: • DSL Internet service Available over telephone lines • Broadband cable Internet service Usually provided by cable TV providers • PPPoE Used by some service providers • Dial-up analog or ISDN modem Used through telephone lines Native language operator interfaces Small businesses in many geographies around the world can deploy Symantec Gateway Security 300 Series appliances and operate them in their