SunScreen 3.2 Installation Guide

Previous: Appendix B Defining Security Policies


A

	access control list, ACL ( )

	administration GUI
		launching ( )
		launching error ( ) ( ) ( )
		MKID ( )
		proxy error ( )
		remote Administration Station ( )

	administration software
		Administration Station ( )
		administrative Screen ( )

	Administration Station
		adding certificate ( )
		administer Screen ( )
		define rules ( )
		IPsec ( ) ( )
		launch administration GUI ( ) ( )
		PC SKIP ( ) ( )

	administration station, PC SKIP ( )

	Administration Station
		remote administration packages ( )
		SKIP certificates ( ) ( )
		Solaris Core Distribution ( )
		Solaris packages ( )
		supported configurations ( ) ( )

	Administration Station packages, remote installation ( )

	administrative Screen
		IKE certificates ( )
		IPsec ( )

	algorithm
		Data ( )
		Key ( )
		MAC ( )


C

	CD-ROM, SKIP 1.5.1 ( )

	certificates
		Administration Station ( )
		Administration Station command line ( )
		command line ( )
		creating through command line ( )
		generate through command line ( )
		IKE rules ( )
		IKE self-generated ( ) ( ) ( ) ( )
		MKID ( ) ( )
		routing mode ( ) ( )
		Screen ( ) ( ) ( )
		Screen's certificate ID ( ) ( )
		SKIP CA-issued ( ) ( ) ( ) ( ) ( )
		SKIP UDH ( )
		SKIP UDH self-generated ( ) ( ) ( ) ( )
		stealth mode ( ) ( )

	command line
		administration packages ( )
		default installation ( )
		IKE self-generated ( )
		installation ( )
		IPsec IKE ( )
		limitations and requirements ( )
		local routing ( )
		packages ( )
		`pkgadd` ( )
		windows 2000 ( )

	command line installation
		Administration Station ( )
		required packages ( )

	configuration
		creating ( ) ( )

	content scanning, third-party products ( )

	conversion
		FireWall-1 ( ) ( )

	cryptography, 4096-bit ( )

	Custom installation
		remote administration ( ) ( ) ( )


D

	documentation, reading ( )


E

	encrypted communication
		IKE ( )
		SKIP ( ) ( )

	encryption ( )
		IPsec ( )
		predefined rule ( )
		SKIP ( ) ( ) ( )
		skiptool GUI ( )

	end-system SKIP, Administration Station ( )


F

	FireWall-1
		conversion errors ( )
		preparing for conversion ( )
		reserved characters ( )
		reserved words ( )
		verifying converted rules ( )

	FireWall-1 conversion failure, troubleshooting ( )


G

	gateway ( )

	generate
		conversion files ( )
		new configuration ( )


H

	hardening
		dedicated firewall ( )
		stealth mode ( )

	hardening Screen
		mixed mode ( )
		stealth mode ( )

	hardware, minimum requirements ( )


I

	IKE
		command line ( )
		generate keys ( )
		issued certificates ( )
		remote administration ( ) ( )
		routing mode ( )
		syntax and options examples ( )
		using with SunScreen ( )

	IKE certificates
		administrative Screen ( )
		routing mode ( )

	IKE pre-shared, windows 2000 ( )

	IKE self-generated, IKE rules ( )

	installation
		Administration Station ( )
		certificates ( )
		command line ( )
		conversion utility ( )
		default ( )
		default command line ( )
		IKE self-generated ( )
		local administration ( ) ( )
		local routing ( )
		local using command line ( )
		overview ( ) ( )
		packages ( )
		`pkgadd` ( )
		remote administration ( ) ( ) ( ) ( ) ( ) ( ) ( ) ( )
		remote using command line ( )
		requirements ( )
		routing mode ( ) ( ) ( )
		SKIP CA-issued ( )
		SKIP UDH self-generated ( ) ( ) ( )
		stealth Administration Station ( )
		stealth mode ( ) ( )
		stealth Screen ( )
		summary ( ) ( )
		Trusted Solaris ( )
		Trusted Solaris 8 ( )

	IP
		addresses ( )
		interfaces ( )
		routing ( )
		stack ( )

	IPsec, routing mode ( )

	IPv4 ( ) ( ) ( ) ( )


J

	Java plug-in
		CD-ROM ( )
		compatibility with SunScreen ( )
		installing ( )


K

	keys and certificates, CA-issued ( )


L

	list, Key algorithm ( )

	login
		change default name and password ( ) ( )
		change default user name and password ( )
		change name and password ( )
		default user name and password ( ) ( )
		name and password ( )


M

	MD5 ( ) ( ) ( ) ( ) ( )

	mixed mode, hardening Screen ( )

	MKID, key and certificate ( )

	modes of operation
		mixed ( )
		routing ( )
		stealth ( )


N

	NAT
		upgrading ( ) ( ) ( )

	network ( )

	network interfaces
		configuration ( ) ( ) ( )
		configure ( )
		routing Screen interface support ( )
		stealth mode ( )
		stealth Screen interface support ( )

	network security policy
		action types ( )
		address group worksheet ( )
		address ranges worksheet ( )
		Administration Station interfaces worksheet ( )
		authorized users worksheet ( )
		considerations ( )
		control access ( )
		data objects ( )
		determining ( )
		host addresses worksheet ( )
		information on creating ( )
		initial security level ( )
		interfaces ( )
		IP addresses ( )
		map your network ( )
		naming services ( )
		NAT map worksheet ( )
		rules worksheet ( )
		sample rules worksheet ( )
		Screen interfaces worksheet ( )
		worksheets ( )


O

	ordered NAT mappings ( ) ( ) ( )


P

	packages
		command line ( )
		end-system SKIP ( ) ( )
		hardening Screen ( )
		IKE ( )
		installation through command line ( )
		minimum Solaris ( )
		missing ( )
		removing note ( )
		SKIP ( )
		SPARC platform edition ( )

	packet filtering rules ( ) ( ) ( )

	patches
		security patches ( )
		Solaris 2.6 kernel patches ( )
		Trusted Solaris ( )
		upgrading ( ) ( )

	`pkgadd`
		administration packages ( ) ( )
		local administration ( ) ( )
		remote administration ( )

	`pkgadd` command ( )

	`pkgrm` command ( ) ( )

	private keys, generate through command line ( )


R

	remote administration
		configuring interfaces ( )
		connections ( )

	remote installation
		Administration Station ( ) ( )

	removing
		#efs# proxy prefix ( )
		configuration proxy rules ( )
		configurations and log files ( )
		GUI uninstaller ( )
		moving SMTP proxy option ( )
		product registry ( )
		reboot removes packet filtering modules ( )
		software using `pkgadd` ( )
		SunScreen software ( )
		verifying ( )

	requirements and restrictions
		IPv4 ( )
		IPv6 ( )

	routing, local installation through command line ( )

	routing mode
		considerations ( )
		default installation ( )
		IKE ( )
		install icon ( ) ( )
		installation ( ) ( ) ( )
		local administration ( )
		mixing stealth and routing ( )
		proxies ( )
		remote administration ( ) ( )
		router and firewall ( )
		SKIP ( )
		Web Start Wizards SDK 3.0.1 ( )


S

	Screen ( )
		firewall ( )
		local administration packages ( )
		remote administration packages ( )
		Solaris End User Distribution ( )
		Solaris packages ( )

	Screen and administration software
		Screens ( ) ( )

	Screen packages
		local installation ( )
		remote installation ( )

	Screen software, firewall Screen ( )

	security issues ( )

	security policy
		implementation ( )
		mapping ( )
		security levels ( )

	SKIP
		1.5.1 on CD-ROM ( )
		RC2 limitation ( )
		remote administration ( ) ( )
		routing mode ( ) ( )
		skiptool GUI ( )
		stealth mode ( )
		user's guide ( )
		windows and NT ( )

	SKIP CA-issued, load through command line ( )

	SKIP certificates
		Administration Station ( )
		routing mode ( )
		Screen ( )
		stealth mode ( )

	SKIP encryption, predefined rule ( )

	SKIP private key and certificates, load through command line ( )

	SKIP UDH key and certificates, create through command line ( )

	software
		minimum requirements ( )
		stealth Administration Station ( )
		stealth Screen ( )

	Solaris 2.6, kernel patches ( )

	Solaris packages
		Administration Station ( )
		Screen ( )

	Solaris SunScreen, windows 2000 ( )

	stealth mode
		bridge ( )
		considerations ( )
		hardening ( )
		hardening Screen ( )
		installation ( ) ( )
		IP interfaces ( )
		remote administration ( ) ( )
		SKIP ( )
		with routing ( )

	subnetwork ( )

	SunScreen
		administration GUI ( )
		Administration Station software installation ( ) ( )
		administrative Screen software installation ( )
		books and publications ( )
		converting from FireWall-1 ( )
		getting support ( )
		IKE self-generated certificate ( ) ( )
		installation tasks ( )
		installer ( )
		installing as Custom ( ) ( ) ( )
		installing as Typical ( )
		installing with local administration ( )
		installing with remote administration ( ) ( ) ( )
		network interfaces ( )
		operation modes ( )
		package requirements ( )
		patches ( )
		removing configurations and log files ( )
		removing proxy rules ( )
		removing software ( )
		removing software using `pkgadd` ( )
		requirements and restrictions ( )
		resources ( )
		security patches ( )
		security solution ( )
		SKIP CA-issued certificate ( ) ( )
		SKIP UDH self-generated certificate ( ) ( )
		third-party products ( )
		Trusted Solaris 8 ( ) ( )
		upgrading prior releases ( )
		user profile ( )
		using IKE ( )
		Web browser ( )
		Web server ( )
		windows 2000 ( )

	SunScreen overview
		Trusted Solaris ( )
		upgrading ( )

	SunScreen SPF-200
		changed NAT mappings ( )
		upgrading from ( )


T

	Trusted Solaris
		allowed privileges ( )
		effective privileges ( )
		installation overview ( )
		installing Administration Station software ( )
		installing Screen software ( )
		patches ( )
		rights ( )
		SunScreen software installation ( )
		trusted networking details ( )
		TSOL templates ( )
		`tsolpeerinfo` ( ) ( )
		UNLABELED templates ( )

	`tsolpeerinfo`
		DYNAMIC NAT ( )
		STATIC NAT ( )

	Typical installation, local administration ( )


U

	U.S. export laws, currently allows 4096-bit ( )

	upgrading
		administration GUI ( )
		administration GUI key-size limitation ( )
		automatic backup ( )
		backup SunScreen SPF-200 Administration Station ( )
		backup SunScreen SPF-200 Screen ( )
		backups ( )
		command or argument changes ( )
		cryptography modules ( )
		current mode ( )
		custom scripts ( )
		define HA screen object ( )
		existing policies ( )
		from prior SunScreen releases ( )
		gathering SunScreen SPF-200 Screen configurations ( )
		HA primary Screen ( ) ( )
		HA secondary Screen ( )
		high availability system ( )
		install patch 105047-21 ( )
		install patch on Screen from Administration Station ( )
		install software on Administration Station ( )
		kernel patches ( )
		kernel patches for Screen ( )
		locally-administered Screen ( )
		MKID ( )
		order of installation ( )
		ordered NAT mappings ( )
		overview ( )
		patch ( )
		patches ( )
		prerequisite Solaris packages ( )
		recommended security patches ( )
		remote Administration Station ( )
		remotely-administered Screen ( )
		removing packages ( )
		retaining existing policies ( )
		review packet filtering rules ( )
		routing mode ( )
		save existing log files ( )
		saving files ( )
		saving log files ( )
		software installation order ( )
		Solaris 2.6 kernel patches ( )
		SunScreen SPF-200 ( ) ( ) ( )
		upgrade icon ( )
		verify migrated configurations ( )
		verify remote administration ( )
		Web browser ( )


V

	VPN ( )


W

	Web browser
		administration GUI ( )
		Java-enabled ( )
		local file access requirements ( )
		view status and logs ( )
		with local file access ( )
		without local file access ( )

	Web server
		Apache ( )
		Solaris Web Start ( )

	windows 2000
		IKE pre-shared ( )
		IPsec IKE ( )

Previous: Appendix B Defining Security Policies