SunScreen 3.1 Lite Installation Guide


This SunScreen 3.1 Lite Installation Guide provides all information necessary to install the SunScreen firewall from the Solaris 8 Easy Access CD-ROM onto your network.

Who Should Use This Book

This guide is intended for SunScreen system administrators responsible for the operation, support, and maintenance of network security. It is assumed that you are familiar with UNIX system administration and TCP/IP networking concepts, and with your network topology.

How This Guide Is Organized

The SunScreen 3.1 Lite Installation Guide is organized into the following chapters:

Chapter 1, "Installation Overview," introduces SunScreen concepts including product architecture, hardware, operating system, and browser requirements.

Chapter 2, "Installation Considerations," covers choosing the level of security for SunScreen, and preparing for installation with either local or remote administration.

Chapter 3, "Installing Lite With Local Administration," contains instructions for installing SunScreen in routing mode with local administration.

Chapter 4, "Installing Lite With Remote Administration," contains instructions for remotely installing SunScreen using self-generated or issued certificates.

Chapter 5, "Removing SunScreen," explains how to remove the SunScreen 3.1 Lite software.

Appendix A, "Command Line Installation," shows examples of using the command line to install SunScreen 3.1 Lite in routing mode with remote administration or in stealth mode.

Appendix B, "Upgrading Cryptography Modules," explains how to add additional cryptography modules to your SKIP configuration.

Ordering Sun Documents, an Internet professional bookstore, stocks select product documentation from Sun Microsystems, Inc.

For a list of documents and how to order them, visit the Sun Documentation Center on at

Accessing Sun Documentation Online

The docs.sun.comSM Web site enables you to access Sun technical documentation online. You can browse the archive or search for a specific book title or subject. The URL is

Getting Support for SunScreen Products

If you require technical support, contact your Sun sales representative or Sun Authorized Reseller. See for information on contacting Sun and for information on Sun's support Services.

Typographic Conventions

The following table describes the typographic changes used in this book.

Table P-1 Typographic Conventions

Typeface or Symbol 




 The names of commands, files, and directories; on-screen computer output

Edit your .login file.

Use ls -a to list all files.

machine_name% you have mail.


 What you type, contrasted with on-screen computer output

machine_name% su



 Command-line placeholder: replace with a real name or value

To delete a file, type rm filename.


Book titles, new words, or terms, or words to be emphasized. 

Read Chapter 6 in User's Guide.

These are called class options.

You must be root to do this.

Shell Prompts in Command Examples

The following table shows the default system prompt and superuser prompt for the C shell, Bourne shell, and Korn shell.

Table P-2 Shell Prompts



 C shell promptmachine_name%
 C shell superuser promptmachine_name#
 Bourne shell and Korn shell prompt$
 Bourne shell and Korn shell superuser prompt#

Related Books and Publications

The following books may be useful or interesting when installing the SunScreen: