Limitations

The SunScreenLite firewall does not support the following feature that are available in SunScreen. A SunScreen Lite firewall:

• Does not support stealth-mode operation.

• Cannot support more than two routing interfaces; the filtering mechanisms ignore any other interfaces.

• Does not support and cannot create the ADMIN, HA, or STEALTH interfaces.

• Cannot support more than ten unregistered IP addresses that can be translated to registered addresses using network address translation (NAT); it is limited to two NAT rules.

• Cannot be a member of a high availability (HA) cluster.

• Cannot create and cannot be made the primary Screen in a centralized management group (CMG).

• Does not support proxies.

• Does not support and cannot create the time objects.

• Ignores the time-of-day field. It makes all rules active while that policy is active.