Amer-networks E5Web GUI Manual de usuario descargar pdf (Pagina 489)

100

101

Chapter 7: Address Translation

This chapter describes cOS Core address translation capabilities.

• Overview, page 489

• NAT, page 491

• NAT Pools, page 498

• SAT, page 502

7.1. Overview

The ability of cOS Core to change the IP address of packets as they pass through the Clavister

Security Gateway is known as address translation.

The ability to transform one IP address to another can have many benefits. Two of the most

important are:

• Private IPv4 addresses can be used on a protected network where protected hosts need to

have access to the public Internet. There may also be servers with private IPv4 addresses that

need to be accessible from the public Internet.

• Security is increased by making it more difficult for intruders to understand the topology of

the protected network. Address translation hides internal IP addresses which means that an

attack coming from the "outside" is more difficult.

Types of Translation

cOS Core supports two types of translation:

• Dynamic Network Address Translation (NAT)

• Static Address Translation (SAT)

Application of both types of translation depend on the specified security policies, which means

that they are applied to specific traffic based on filtering rules that define combinations of

source/destination network/interface as well as service. Two types of cOS Core IP rules, NAT rules

and SAT rules are used to configure address translation.

489

1 2 ... 484 485 486 487 488 489 490 491 492 493 494 ... 776 777

Comentarios a estos manuales

Sin comentarios

Amer-networks E5Web GUI Manual de usuario Pagina 489

Comentarios a estos manuales

Relacionado con productos y manuales para Accesorios De Computador Amer-networks E5Web GUI