SunScreen 3.1 Reference Manual

Previous: Glossary


Numbers and Symbols

	5-tuple ( )


A

	access control ( )
		defining rules ( )
		overview ( )
		packet filtering rules ( )

	access level see administrative access level ( )

	action
		ALLOW ( )
		DENY ( )
		ENCRYPT ( )
		SECURE ( )

	address ( )
		administration ( )
		group ( )
		individual ( )
		IP ( )
		range ( )

	address group, dialog box ( )

	address objects, multiple Screens ( )

	address range, dialog box ( )

	ADMIN interface, SunScreen Lite ( )

	administration
		address ( )
		certificate ( )
		interfaces ( )

	administration graphical user interface. See administration GUI ( )

	administration-group, certificate ( )

	administration GUI
		administrative access rules ( )
		browser support ( )
		command-line user interface ( ) ( )
		defining VPN gateways ( ) ( )
		documentation button ( ) ( )
		elements ( )
		end-system SKIP ( )
		gateways ( )
		graphical user interface ( )
		Help button ( )
		Information page ( )
		instructions ( )
		interoperability with command line ( )
		local administration ( )
		localhost example ( )
		Login page ( )
		NAT ( )
		NAT rule mapping ( )
		navigation bar ( )
		navigation buttons ( )
		overview ( )
		packet-filtering rules ( )
		Policies List page ( )
		proxies ( )
		reference ( )
		remote administration ( )
		Save As button
			Edit(RO) button ( )
		starting ( )
		version number ( )
		VPN ( )

	Administration Station ( )
		components ( ) ( )
		description of ( )
		remote administration ( ) ( ) ( )

	administrative access level ( )

	administrative access rule
		local ( )
		Policy Rules page ( )

	administrative access rules ( )
		remote ( )

	administrative user ( )
		authentication ( )
		dialog box ( )

	ALLOW action ( )
		controls ( )

	associate MKID, dialog box ( )

	authentication
		external users ( )
		internal users ( )
		overview ( )

	authentication events ( )

	authorized user ( ) ( )
		authentication ( ) ( )
		authentication processing logic ( )
		creating ( )
		defining object ( )
		dialog box ( )
		example
			create object ( )
			create object defining SunScreen ( )
			create simple-text object ( )
			display existing object ( )
			display object names ( )
			display objects ( )
		RADIUS details ( )


B

	backwards compatibility installation ( )

	`BROADCAST` ( )

	broadcast traffic ( )
		add`broadcast` ( )
		new service ( )

	browser
		back, forward, and reload buttons ( )
		HotJava ( )
		log ( )
		Netscape Navigator ( )


C

	CA issued note ( )

	centralized management ( )
		certificate for Screen ( )
		common objects for ( )
		screen object ( )
		screen objects
			screen objects ( )

	centralized management group
		concepts ( )
		logs ( )
		primary Screen ( )
		secondary Screens ( )
		setting rules ( )
		SunScreen Lite ( )

	certificate
		administration ( )
		administration-group ( )
		associate MKID ( ) ( )
		dialog box ( )
		generating Screen ( )
		group ( )
		issued ( )
		local ( )
		screen object ( )

	ciphertext message, proxies ( )

	command buttons, Policy Rules page ( )

	command-line user interface
		accessing Screen ( )
		administration GUI ( ) ( )
		configuration editor ( )
		reference ( )

	commands
		configuration editor ( )
		SunScreen SKIP commands ( )
		UNIX ( )
		unsupported ( )

	common objects ( )
		address ( )
		administrative user ( ) ( )
		associate MKID certificate ( )
		authorized user ( ) ( )
		automatically saved ( ) ( ) ( )
		certificate ( )
		components ( )
		data objects ( )
		database ( )
		interface ( )
		jar hash ( )
		jar signature ( )
		multiple Screens ( )
		policy rules ( )
		proxy user ( ) ( )
		screen object ( ) ( )
		service ( )
		time ( )

	compatibility
		SKIP ( )
		SunScreen ( )

	components
		Administration Station ( ) ( ) ( )
		Screen ( ) ( ) ( )

	configuration
		common objects ( )
		security policy ( )

	configuration editor
		create controlling objects ( )
		data model ( )
		object types ( )

	controlling objects, creating ( )

	controls, Policies List page ( )

	`CoolTalk` service ( )

	creating, screen objects ( )

	cryptography
		authentication ( )
		network layer note ( )
		privacy ( )
		public-key ( ) ( )
		shared-key ( ) ( )


D

	data model, configuration editor ( )

	data object, common objects ( )

	database, common objects ( )

	decrypting packets ( ) ( )

	decryption, function details ( )

	defining the name of ( )

	definition dialog box ( )
		interface ( )
		NAT ( )
		VPN ( )

	DENY action ( )
		controls ( )

	description ( )

	detail ( )

	dialog box ( )
		address group ( )
		address range ( )
		administrative user ( )
		associate MKID ( )
		certificate ( )
		dialog box
			screen object ( )
		host address ( )
		Jar hash ( )
		Jar signature ( )
		local administrative access rules ( )
		policy rule index ( )
		proxy user ( )
		remote administrative access rules ( )
		screen object Primary/Secondary tab ( )
		screen object SNMP tab ( )
		service group ( )
		single service ( )
		time ( )

	discriminator ( )
		port ( )
		RPC number ( )
		type ( )

	`dns` service ( )

	`dns` state engine ( )

	documentation ( )
		location of HTML files ( )
		location of PDF files ( )

	documentation HTML files, location of ( )

	documentation PDF files, location of ( )

	dynamic packet filtering
		details ( )
		function details ( )


E

	Edit(RO) button ( )

	editing ( )
		screen object ( )
		screen objects ( )

	editing a screen object
		Miscellaneous tab ( )
		Primary/Secondary tab ( )

	editing a Screen object, SNMP tab ( )

	elements, administration GUI ( )

	ENCRYPT action ( )
		controls ( )

	encrypting packets ( ) ( )

	encryption ( ) ( )
		function details ( )
		overview ( )
		proxies ( )
		public-key cryptography ( ) ( )
		shared-key cryptography ( ) ( )
		SKIP ( )
		SunScreen Lite ( )

	error messages ( ) ( )
		logged packet reasons ( ) ( )
		`ssadm activate` ( )
		`ssadm edit` ( ) ( ) ( )
		`ssadm lock` ( ) ( )

	event logging, function details ( )

	external users, authentication of ( )


F

	failover protection, HA ( )

	feature
		centralized management group ( )
		HA ( ) ( )
		NAT ( ) ( ) ( )

	FTP proxy
		anonymous FTP ( )
		controlling site access ( )
		destination address ( )
		example
			display variable ( )
			primary Screen ( )
		functions ( )
		global version ( )
		limiting access to ftp commands ( )
		source address ( )

	`ftp` service ( )

	`ftp` state engine ( ) ( )
		PASV mode ( )

	function, dynamic packet filtering ( )

	functions, dynamic packet filtering ( )


G

	global log limiter ( )

	graphical-user interface ( )

	graphical user interfaces
		administration GUI ( )
		installation wizard ( ) ( )
		skiptool GUI ( )
		SunScreen SKIP ( )


H

	HA
		active Screen ( )
		automatic disconnection ( )
		certificate for Screen ( )
		definition of ( )
		event log ( )
		failover protection ( )
		failure of primary Screen ( )
		function details ( ) ( )
		interface ( )
		limitations ( ) ( )
		overview ( )
		passive Screens ( ) ( )
		reinstate Screen ( )
		screen object ( )
		Solaris 7 for the Intel Platform limitations ( )
		Solaris 7 limitations ( )
		Solaris settings ( )
		state information limitations ( )
		SunScreen Lite ( )

	HA cluster
		communicating with`ftp` and`telnet` to members of ( )
		communication between members of ( )
		communication in ( )
		configuring ( )
		disrupted connections ( )
		failover ( )
		forcing failover ( )
		function details ( ) ( )
		hubs necessary for ( )
		lost connections ( )
		naming Screen ( )
		network interfaces ( )
		primary Screen ( )
		secondary Screen ( )
		setting up ( )

	HA interface, SunScreen Lite ( )

	hardening OS
		optional ( )
		stealth mode ( )

	help
		documentation ( )
		man pages ( )
		online ( )

	Help button ( )

	high availability. See HA ( )

	host address box, dialog box ( )

	hostname
		Screen name ( )
		`uname -n command` ( )

	HotJava browser ( )

	HTTP proxy
		defining source address ( )
		example
			display variable ( )
		filtering content ( )
		filtering Java applets ( )
		filtering restrictions ( )
		functions ( )
		limitations ( )
		NAT implementation ( )
		operation ( )
		prevent access ( )
		restrict Web content ( )
		SSL support ( )
		useful in implementing NAT ( )
		using Java ( )


I

	ICMP messages ( )

	ICMP packets ( )

	`icmp` service ( )

	`icmp` state engine ( ) ( )

	individual IP addresses
		address groups ( )
		address ranges ( )
		function details ( )
		modifying address note ( )

	individual servers, SunScreen Lite ( )

	Information page ( )

	installation ( )
		requirements ( )

	interface ( ) ( )
		routing ( )
		routing mode ( )
		stealth mode ( )

	interface objects, single Screen ( )

	interfaces
		administration ( )
		HA ( )
		HA cluster network ( )
		mixed routing and stealth ( )
		modes ( )
		routing ( )
		routing mode ( )
		stealth ( )
		SunScreen Lite ( ) ( )

	internal users, authentication of ( )

	Internet Explorer ( )

	IP address, defining rules ( )

	IP addresses ( )

	`ip all service` ( )

	`ip forward` service ( )

	`ip mobile` service ( )

	`ip tunnel` service ( )

	`ipfwd` state engine ( )

	`ipmobile` state engine ( )

	`iptunnel` state engine ( )

	issued keys and certificates ( )


J

	Jar hash, dialog box ( )

	Jar hashes, VJM ( )

	Jar hashes and signatures, JVM ( )

	Jar signature, dialog box ( )

	Jar signatures, Jar signatures ( )

	Java
		plug-in
			installation instructions ( )
			Solaris ( )
			Windows ( )
		SunScreen 3.1 ( )

	Java Virtual Machine, see JVM ( )

	JVM ( )
		Jar hashes ( )
		Jar hashes and signatures ( )


K

	key manager
		SKIP ( )
		SunScreen SKIP ( )

	keys, issued ( )


L

	local, certificate ( )

	local administration ( )
		administration GUI ( )
		concepts ( ) ( )
		overview ( )
		routing mode Screen ( )
		routing-mode Screen ( )
		URL ( )

	local administrative access rules
		dialog box ( )
		Policy Rules page ( )

	log
		administration GUI statistics ( )
		altering size ( )
		automated centrally managed group ( )
		automated management ( )
		automated postprocessing logs ( )
		binary records ( )
		bridging macros ( )
		centralized management global group log size ( )
		centralized management group ( ) ( )
		command-line user interface statistics ( )
		common optional attributes ( )
		configuring events using command-line user interface ( )
		embedded string filters ( )
		examining ( ) ( )
		example ( )
			`clear` ( )
			`clear` log ( )
			debugging ( )
			defining specific macro ( )
			display global default ( )
			display global log limiter ( )
			display macro definition ( )
			display Screen definitions ( )
			display Screen names ( )
			display size specific Screen ( )
			display specific macro definition ( )
			displaying log statistics ( )
			expanding given macro ( )
			expanding log macro ( )
			`get_and_clear` automatically ( )
			`get_and_clear` log ( )
			`logapp` operand ( )
			`logsev` operand ( )
			processing local file log record ( )
			processing records ( )
			retrieving items from current log ( )
			saving error message ( )
			setting global default ( )
			setting global default (250MB) ( )
			setting size specific Screen ( )
		extended events ( ) ( )
		extended log event enhancements ( )
		extended log events ( ) ( )
		filtering macros ( )
		filtering mechanisms ( )
		filtering Screen logs ( )
		general event type enhancements ( )
		`get_and_clear` operation ( )
		global default size ( )
		group-Screen installations ( )
		HA ( )
		HA cluster ( )
		installation ( )
		limiters ( )
		`list` verb ( )
		listing macros ( )
		local macros ( )
		locations ( )
		logdump extensions ( )
		logged network packet enhancements ( )
		logging server ( )
		macro expansion ( )
		macro name and body ( )
		macros ( )
		macros registry ( )
		manual management ( )
		naming macros ( )
		network session ( ) ( )
		network traffic ( )
		packet filtering ( )
		primary Screen log file size ( )
		propagating limiters ( )
		reason why packet logged ( )
		retrieval and clearing ( )
		secondary Screen log file size ( )
		session summary events ( )

	Log, set viewing filter ( )

	log
		`snoop` ( )
		specific Screen ( )
		statistics ( )
		traffic size ( )
		using log macros ( )
		variable ( )
		who cleared log ( )

	log browsing
		active Screen ( )
		administration GUI ( )

	`LOG_DETAIL`< /primary> ( )

	`LOG_NONE` ( )

	log out ( )

	`LOG_SESSION` ( )

	`LOG_SUMMARY` ( )

	logged packet reasons ( ) ( )
		why codes ( )

	logging ( )
		packet logging
			detail ( )
			none ( )
		sessions ( )

	Login page, fields ( )


M

	MAC-layer bridging ( )

	macros, log filtering ( )

	Mail Proxy tab
		screen object ( )
		spam ( )

	man page, `ssadm logdump` ( )

	man pages
		help ( )
		SKIP ( )
		Solaris ( )
		SunScreen ( )

	message transfer agent, see MTA ( )

	Miscellaneous tab, editing a screen object ( )

	multiple Screen, policy rules for ( )

	multiple Screens
		address objects ( )
		common objects ( )


N

	names, using characters ( )

	naming conventions ( )

	NAT ( )
		configuration ( )
		definition dialog box ( )
		demilitarized zone ( )
		dynamic ( )
		example mappings ( )
		function details ( )
		mapping collisions ( )
		sequence ( )
		site mappings ( )
		stateful ( )
		static ( )
		SunScreen Lite ( )

	Netscape Navigator ( ) ( )

	network address translation, ordered translations ( )

	network packet traffic ( )

	network security policy, setting up ( )

	network services, service groups ( )

	network topology
		security policy ( ) ( )

	new service
		`ip` ( )
		`ip fwd` ( )
		`ip mobile` ( )
		`ip tunnel` ( )

	`nfs readonly` service ( )

	`nis` state engine ( )

	no logging ( )


O

	object types
		configuration editor ( )
		named ( )
		ordered ( )

	online help ( )

	ordered rules sequence ( )

	overview
		access control ( )
		administration GUI ( )
		authentication ( )
		encryption ( )
		HA ( )
		local administration ( )
		public-key encryption ( )
		remote administration ( )


P

	packet filtering
		sequence ( )
		set up rules ( )
		state engine ( )
		stateful service rules ( )

	packet-filtering rules ( )
		adding a VPN rule ( )
		VPN rules ( )

	Packet Filtering tab
		ALLOW action ( )
		DENY action ( )
		ENCRYPT action ( )
		fields on ( )
		Policy Rules page ( )
		SECURE action ( )

	packet logging ( ) ( )

	packets
		ALLOW rule ( )
		checking size ( )
		concatenated ( )
		creating ( )
		decrypting ( ) ( )
		DENY rule ( )
		encapsulated ( )
		encrypting ( ) ( )
		filtering ( )
		fragmentation ( )
		ICMP ( )
		ICMP screening guidelines ( )
		IP screening guidelines ( )
		logged error messages ( )
		logging ( ) ( )
		passing RIP ( )
		replacing addresses ( )
		restoring original ( )
		transmission ( )
		tunneling ( )
		VPN ( ) ( )

	parameters ( )

	password ( )

	PASV mode (FTP) ( )

	patches
		applying ( ) ( )
		required ( ) ( )
		Solaris 2.6 ( ) ( )
		Solaris For the Intel Platform ( )
		SPARC ( ) ( )
		x86 ( )

	`ping` state engine ( )

	plaintext message, proxies ( )

	`pmap_nis` state engine ( )

	`pmap_tcp` state engine ( )

	`pmap_udp` state engine ( )

	Policies List page ( )
		controls ( )

	policy
		new version ( )
		older version ( )
		rules for with multiple Screens ( )

	policy rule index, dialog box ( )

	policy rules
		function details ( )
		ordered ( )
		rule syntax ( )

	Policy Rules page
		administration GUI ( )
		administrative access rules ( )
		command buttons ( )
		error message ( )
		local administrative access rules ( )
		NAT tab ( )
		packet filtering rules ( )
		Packet Filtering tab ( )
		panel tabs ( )
		remote administrative access rules ( )
		rule definition panel ( )
		VPN tab ( )

	Policy Rules panel ( )

	policy versions ( ) ( )

	primary Screen
		centralized management group ( )
		common objects ( )

	primary Screen in centralized management, SunScreen Lite ( )

	Primary/Secondary tab, editing a Screen object ( )

	proxies ( ) ( )
		activate policy ( ) ( )
		ciphertext message ( )
		client software ( ) ( )
		content filtering ( ) ( )
		DNS configuration ( )
		encryption ( )
		establish proxy user authenticity ( )
		event logging ( )
		example
			session illustration ( )
		extend ( )
		FTP connection ( )
		FTP protocol ( ) ( )
		FTP proxies ( ) ( )
		FTP proxy collateral mapping ( )
		how proxies work ( )
		HTTP protocol ( ) ( )
		JAR hashes ( )
		limitations ( )
		locate proxy user authenticity rule ( )
		multithreaded program ( )
		MX records ( )
		plaintext message ( )
		policy rule matching ( )
		protocols ( )
		proxy user anonymous ( )
		regulate ( )
		SecurID PIN server ( )
		Security Dynamics ACE/Server ( )
		server software ( ) ( )
		setting rules ( ) ( )
		SMTP protocol ( ) ( )
		SunScreen Lite ( )
		system configurations ( ) ( )
		TCP ( )
		TCP only in routing mode ( )
		TCP protocol ( )
		Telnet protocol ( ) ( )
		Telnet proxies ( )
		UDP protocol ( )
		user authentication ( ) ( ) ( )
		variables RADIUS client protocol ( )

	proxy user
		authentication ( )
		creating object ( )
		defining object ( )
		dialog box ( )
		example
			add GROUP members ( )
			create GROUP object ( )
			create SIMPLE object ( )
			display all names ( )
			display all objects ( )
			display objects ( )
			remove GROUP object ( )
		FTP proxies ( )
		GROUP object ( )
		GROUP objects ( )
		login ( )
		Login page ( )
		object definition ( )
		RADIUS ( )
		RADIUS access to LDAP ( )
		RADIUS LDAP stored in SDS ( )
		SecurID ( )
		SIMPLE null authentication ( )
		SIMPLE object ( )
		SIMPLE objects ( )
		single ( )
		SPECIAL external authentication method ( )
		special objects ( )
		Telnet proxies ( )

	public-key cryptography ( ) ( )

	public-key encryption, overview ( )


R

	RADIUS
		example
			create address objects ( )
			create node secret ( )
			create rule ( )
			create variables ( )
		multiple-Screen installations ( )
		other protocol items ( )
		prefigured parameters ( )
		requestor ( )
		response time ( )
		server port ( )
		testing ( ) ( )
		testing by SDS ( )
		testing by SecurID ( )
		typical configuration ( )
		UDP datagrams ( )
		user authentication details ( )
		variables ( ) ( )

	`RealAudio` ( )

	`realaudio` service ( ) ( )

	`realaudio` state engine ( )

	remote-access server ( )

	remote administration
		administration GUI ( )
		Administration Station ( ) ( ) ( )
		concepts ( ) ( ) ( )
		overview ( )
		Screen ( ) ( ) ( )
		SunScreen Lite ( )
		URL ( )

	remote administrative access rules
		dialog box ( )
		Policy Rules page ( )

	remote shell (`rsh`) ( )

	requirements
		hardware ( )
		installation ( )
		patches ( ) ( )
		software ( )

	`rip` service, RIP packets ( )

	routing, interfaces ( )

	routing and stealth, mixed interfaces ( )

	routing information protocol, RIP ( )

	routing mode ( )
		capabilities ( )
		HA limitations ( )
		interfaces ( )
		limitations ( )
		remote-access server ( )
		subdividing a network ( )
		traditional firewall ( )
		virtual interface ( )

	`rpc_tcp` state engine ( )

	`rpc_udp` state engine ( )

	`rsh` state engine ( )
		remote shell sessions ( )

	rule
		ALLOW ( )
		DENY ( )


S

	sample network map ( )

	Save As button ( )

	Screen ( ) ( ) ( )
		active ( )
		active HA Screen ( )
		certificate for in centralized management group ( )
		certificate for in HA cluster ( )
		components ( ) ( )
		configuration objects ( )
		HA limitations ( )
		managing multiple Screens ( )
		multiple management ( )
		passive ( ) ( )
		reinstate ( )
		remote administration ( ) ( ) ( )
		remote headless ( )

	Screen certificate generating ( )

	Screen description of ( )

	Screen name
		definition ( )
		hostname ( )
		IP address ( )

	screen object ( ) ( )
		centralized management ( )
		certificate ( )
		creating ( )
		editing ( ) ( )
		HA ( )
		Mail Proxy tab ( )
		Mail Proxy tab dialog box ( )
		Miscellaneous tab ( ) ( )
		Primary/Secondary tab ( )
		Primary/Secondary tab dialog box ( )
		SNMP tab dialog box ( )

	screening guidelines
		ICMP packets ( )
		IP packets ( )

	secondary Screens
		administration capabilities ( )
		centralized management group ( )

	SECURE action ( )
		controls ( )

	SecurID
		access paths ( )
		ACE/Agent installation ( )
		example
			token PIN establishment ( )
		example configuration ( )
		example create registry address ( )
		example perform stub client configuration ( )
		stub client ( )
		stub client location ( )
		token PIN ( )
		typical authentication ( )
		UDP and TCP protocols ( )
		use caution in deployment ( )

	security considerations ( )

	security network, sample network map ( )

	security policy
		`Initial` ( )
		network topology ( ) ( )
		ordered policy rules ( )
		policy objects ( )
		security decisions ( )
		version ( )

	service ( )
		group ( )
		single ( )

	service group, dialog box ( )

	services
		`CoolTalk` ( )
		creating new ( )
		discriminator ( )
		`dns` ( )
		`ftp` ( )
		`icmp` ( )
		IP address information ( )
		`ip all` ( )
		`ip mobile` ( )
		modifying ( )
		network service groups ( )
		`nfs readonly` ( )
		predefined ( )
		`realaudio` ( )
		`realaudio` state engine ( )
		smtp ( )
		`sqlnet` ( )
		standard ( )
		state engine ( ) ( )
		`TCP` ( )
		`tcp all` ( )

	services, traceroute ( )

	services
		VDOLive ( )
		`www` ( )

	services and service groups
		creating new services ( )
		entries for ports ( )
		modifying services ( )
		standard services ( )

	session logging ( )

	shared-key cryptography ( ) ( )

	single Screen, interface objects ( )

	single service, dialog box ( )

	SKIP
		compatibility ( )
		encryption ( )
		key manager ( )
		RC2 limitation ( )
		SunScreen Lite ( )

	skiptool GUI
		encryption of administration commands ( )
		graphical user interface ( )

	small work groups, SunScreen Lite ( )

	SMTP proxy
		create rules ( )
		email configuration ( )
		email configuration issues ( )
		example
			add restrictions ( )
			define address group ( ) ( )
			define relay restrictors ( )
			define spam restrictors ( )
			display restrictors ( )
			display spam restrictors ( )
			email rule ( )
			remove restriction ( ) ( )
		functions ( )
		MTA filtering ( )
		operation ( )
		rules ( )
		spam control ( )

	`smtp` service ( )

	SNMP, timed status indicator ( )

	SNMP tab, editing a screen object ( )

	SNMP traps ( )

	SNMP traps, supported ( )

	`snoop` ( )

	`snoop program` ( )

	`snoop` program ( ) ( )

	Solaris 7, HA limitations ( )

	Solaris 2.6
		patch ( ) ( )

	Solaris 2.6 for the SPARC and Intel platforms ( )

	Solaris 7 for the Intel Platform, HA limitations ( )

	Solaris 7 for the SPARC and Intel platforms ( )

	Solaris 8 for the SPARC and Intel platforms ( )

	spam, Mail Proxy tab ( )

	SPARC
		patch ( ) ( )

	SQL *Net protocol ( )

	`sqlnet` state engine ( )

	`ssadm logdump`, man page ( )

	state engine
		characteristics ( )
		connection management ( )
		discriminator ( )
		discriminator value ( )
		discriminators ( )
		`dns` ( )
		`ftp` ( ) ( )
		`icmp` ( )
		`ip` ( )
		`ipfwd` ( )
		`ipmobile` ( )
		`iptunnel` ( )
		new service ( )
		`nis` ( )
		parameters ( )
		`ping` ( )
		`pmap_nis` ( )
		`pmap_tcp` ( )
		`pmap_udp` ( )
		precedence level ( )
		`realaudio` ( )
		`rpc_tcp` ( )
		`rpc_udp` ( )
		`rsh` ( )
		services ( )
		`tcp` ( ) ( )
		`tcpall` ( )
		`udp` ( )
		`udp_datagram` ( )
		`udp_stateless` ( )
		`udpall` ( )

	state information, HA limitations ( )

	statistics, log file ( )

	stealth ( )
		interfaces ( )

	STEALTH interface, SunScreen Lite ( )

	stealth mode
		acts as a bridge ( )
		capabilities ( )
		description ( )
		hardening OS ( )
		interfaces ( ) ( )
		SunScreen Lite ( )

	summary
		packet logging
			summary ( )

	SunScreen
		command compatibility ( )
		compatibility ( )
		configuration editor ( )
		error messages ( )
		example
			continue adding SecurID rules ( )
		how it works ( )
		migration from SunScreen EFS, Release 2.0 ( )
		migration from SunScreen EFS, Release 3.0 ( )
		migration from SunScreen SPF-200 ( )
		upgrading ( )

	SunScreen 3.1, Java ( )

	SunScreen and SunScreen Lite
		common features SunScreen Lite and SunScreen
			common features ( )

	SunScreen compared with SunScreen Lite ( )

	SunScreen EFS 1.1 ( )

	SunScreen EFS 3.0
		requisites ( )
		resources ( )

	SunScreen Lite ( ) ( ) ( ) ( )
		ADMIN interface ( )
		centralized management group ( )
		encryption ( )
		HA ( )
		HA interface ( )
		individual servers ( )
		interfaces ( )
		limitations ( )
		NAT ( )
		number of interfaces ( )
		primary Screen in a centralized management ( )
		remote administration ( )
		SKIIP ( )
		small work groups ( )
		STEALTH interface ( )
		stealth mode ( )
		time-of-day rules ( ) ( )

	SunScreen Lite compared with SunScreen ( )

	SunScreen SKIP
		commands ( )
		end-system SKIP ( )
		graphical user interface ( )
		header ( )
		key manager ( )
		limitations note ( )
		log ( )

	SunScreen SKIP. See SKIP ( )


T

	TCP, proxies ( )

	`tcp all` service ( )

	`TCP` service ( )

	`tcp` state engine ( )

	`tcpall` state engine ( )

	Telnet proxy
		example
			SunScreen SKIP ( )
		functions ( )
		operation ( )
		other issues ( )
		request user name ( )
		TCP ( )

	time, dialog box ( )

	time-based rules, function details ( )

	time objects ( )
		SunScreen Lite ( )

	time-of-day rules, SunScreen Lite ( )

	timed status indicator, SNMP ( )

	`traceroute` service ( )

	traditional firewall ( )

	traffic key, generated ( )

	traffic log size ( )

	transmission control protocol See TCP. ( )

	troubleshooting
		access to console ( )
		gathering information ( )
		printing debug information ( )
		ss_debug_level ( )

	Trusted Solaris 7 for the SPARC platform ( )

	tunneling
		function details ( ) ( )
		hiding addresses ( )
		packets ( )


U

	UDP, `traceroute service` ( )

	`udp_datagram` state engine ( )

	`udp` state engine ( )

	`udp_stateless` state engine ( )

	`udpall` state engine ( )

	UNIX commands ( )

	unsupported commands ( )

	upgrading ( ) ( )
		Solaris support ( )
		Unicode internationalization note ( )

	upgrading from SunScreen EFS 1.1 ( )

	URL ( )
		remote administration ( )

	user, admin ( )

	user authentication
		administrative user ( )
		authuser ( )
		function details ( )
		proxy user ( )

	users
		external ( )
		internal ( )


V

	`VDOLive` service ( )

	version
		new policy ( )
		older policy ( )
		policy ( )
		security policy ( )

	version number ( )
		administration GUI ( )
		historical ( )
		policy versions ( )

	virtual private network. See VPN ( )

	VJM, Jar signatures ( )

	VPN ( ) ( ) ( )
		adding a rule ( ) ( )
		defining ( )
		definition dialog box ( )
		function details ( ) ( )
		limitations ( )
		overview ( )
		setting up ( ) ( )
		SunScreen Lite ( )
		tunneling data ( )


W

	why codes, logged packet reasons ( )

	`www` service ( )


X

	x86
		patch ( ) ( )

Previous: Glossary