Limitations

SunScreen 3.1 Lite does not support the following SunScreen features. A SunScreen 3.1 Lite firewall:

• Cannot be a member of a high availability (HA) cluster.

• Does not support stealth-mode operation.

• Does not support proxies.

• Cannot create and cannot be made the primary Screen in a centrally managed group.

• Cannot support more than two interfaces; the filtering mechanisms ignore any other interfaces.

• Cannot support more than ten unregistered IP addresses that can be translated to a registered address using network address translation (NAT); it is limited to two NAT rules.

• Ignores the time-of-day field. It makes all rules active while that policy is active.

• Does not support and cannot create the time objects.

• Does not support and cannot create the ADMIN, HA, or STEALTH interfaces.