Stealth Mode

You can operate SunScreen in stealth mode if you do not need routing functions, or if you want to decrease possibilities for attacks. In stealth mode, SunScreen acts much like a bridge in that no IP interfaces are exposed to the public or private network, and packets are transparently filtered by the Screen. While operating in this mode, the Screen cannot be attacked through any means other than a denial of service attack, and cannot be seen or detected through traceroute or similar network tools.

Be aware of the following considerations when operating in stealth mode:

• The Screen acts similar to a bridge and does not route packets.

• Stealth mode does not require IP address re-numbering on hosts.

• You only need to configure the network interface you plan on using for remote administration.