Routing Mode

Typically, you operate the Screen in routing mode if you need a machine to act both as a router and a firewall. Another reason to choose Routing mode is if you want to use proxies with the firewall. In this mode, you need at least two exposed IP interfaces, and a hop visible to traceroute and other network utilities. In routing mode your firewall is visible and you have a slightly greater exposure to attack than when operating in stealth mode.

Be aware of the following considerations when operating in Routing mode:

• The existing Solaris machine must be acting as a router. The Screen uses Solaris to provide IP routing.

• The Screen makes use of the Solaris IP stack on the filtering interfaces, so it does not possess stealth characteristics.

• You must divide up different networks as you would with any router.

• The addition of a SunScreen to your network may require re-numbering IP addresses on your hosts (if you did not already have a router where your SunScreen is being placed.)