SunScreen 3.2 Administrator's Overview

Previous: Glossary


Numbers and Symbols

	* service ( )

	(IP Security Architecture/ Internet Key Exchange. See IPsec/IKE ( )

	5-tuple ( )


A

	access control ( ) ( )
		defining rules ( )
		overview ( )
		packet filtering rules ( )

	ACE
		SecurID ( )
		stub client ( )

	ACE/Agent ( ) ( ) ( ) ( )

	ACE/Client ( ) ( )

	ACE/Server ( ) ( ) ( ) ( ) ( ) ( ) ( ) ( ) ( ) ( ) ( ) ( ) ( ) ( )

	Ace/Server ( )

	acemaster ( )

	action ( )
		ICMP message ( )
		SNMP message ( )

	address, gateway object ( )

	address object
		definition ( )
		group ( )
			limitation ( )
		host ( )
		modifying address note ( )
		multiple Screens ( )
		range ( )

	address set, valid ( )

	addresses
		hiding
			tunneling ( )

	admin interface ( ) ( )

	ADMIN interface, SunScreen Lite ( )

	administration graphical user interface. See administration GUI ( )

	administration GUI ( )
		browser support ( ) ( )
		command-line user interface ( )
		configuration editor
			See also configuration editor
		end-system SKIP ( )
		graphical user interface ( )
		interoperability with command line ( )
		overview ( )
		version number ( )

	Administration Station
		components ( )
		description of ( )
		remote administration ( )

	administrative user ( )
		authentication ( )

	AH (authentication header), IPsec/IKE ( )

	ah service ( )

	archie service ( )

	authentication ( ) ( )
		external users ( )
		internal users ( )
		IPsec ( )
		IPsec/IKE ( )
		MD5 ( )
		overview ( )
		SHA-1 ( )

	authentication events ( )

	authentication header (AH), IPsec/IKE ( )

	authorized user ( )
		authentication ( ) ( )
		authentication processing logic ( )
		creating ( )
		defining object ( )
		example
			create object ( )
			create object defining SunScreen ( )
			create simple-text object ( )
			display existing object ( )
			display object names ( )
			display objects ( )
		RADIUS details ( )


B

	`BROADCAST` ( )

	broadcast traffic ( )
		add`broadcast` ( )
		new service ( )


C

	CA
		See certificate authority

	CA issued note ( )

	caution, dynamic NAT ( )

	centralized management
		common object for ( )
		screen objects ( )

	centralized management group
		concepts ( )
		logs ( )
		primary Screen ( ) ( )
		secondary Screen ( )
		setting rules ( )
		SunScreen Lite ( )

	certdb ( )
		IKE & SKIP databases ( )
		ssadm subcommand ( )

	certificate
		associate MKID ( )
		gateway object ( )
		IKE ( )
		MKID ( )
		Sun CA ( )

	certificate authority ( )

	certificate object
		associating with a Screen ( )
		definition ( )
		group ( )
		optional description ( )
		single ( )
		unique name ( )

	certlocal ( )
		local IKE & SKIP databases ( )
		ssadm subcommand ( )

	certrldb ( )
		certificate revocation lists ( )
		ssadm subcommand ( )

	character
		forbidden ( ) ( ) ( ) ( ) ( )

	ciphertext message, proxies ( )

	command, harden ( )

	command line, editor ( )

	command-line user interface
		accessing Screen ( )
		administration GUI ( ) ( )

	command line user interface, configuration editor ( )

	command-line user interface
		reference ( )

	commands
		configuration editor ( )
		SunScreen SKIP commands ( )
		UNIX ( )
		unsupported ( )

	common object ( )
		address ( )
		authorized user ( ) ( )
		automatically saved ( )
		certificate ( )
		data object ( )
		database ( )
		interface ( ) ( )
		jar hash ( )
		jar signature ( )
		multiple Screens ( )
		not automatically saved ( )
		policy rules ( )
		proxyuser ( )
		require saving ( )
		Screen ( )
		service ( )

	common objects
		administrative user ( )
		automatically saved ( )
		proxy user ( )

	compatibility
		SKIP ( )
		SunScreen ( )

	complete valid address set ( )

	components
		Administration Station ( ) ( )
		Screen ( ) ( ) ( )

	configuration
		common object ( )
		security policy ( )

	configuration editor
		See also administration GUI
		command line ( )
		create controlling objects ( )
		data model ( )
		object types ( )

	content filtering ( )

	content scanning, VirusWall ( )

	controlling objects, creating ( )

	`CoolTalk` service ( )

	cryptography
		authentication ( )
		network layer note ( )
		privacy ( )
		public-key ( ) ( )
		shared-key ( ) ( )


D

	data algorithm, gateway object ( )

	data model, configuration editor ( )

	data object, common object ( )

	data protection, IPsec/IKE ( )

	database, common object ( )

	decrypting packets ( ) ( )

	decryption
		function details ( )
		IPsec/IKE ( )

	defining, VPN ( )

	description ( )
		gateway object ( )

	detail ( )

	Diffie-Hellman
		See also IKE

	disabled interface ( )

	discriminator ( )
		port ( )
		RPC number ( )
		type ( )

	distinguished name
		IKE ( )
		single certificate ( )
		SKIP ( )

	`dns` service ( )

	`dns` state engine ( )

	documentation ( )
		location of PDF files ( )

	DSS signature
		See IKE

	dynamic NAT
		caution ( )
		trusted Solaris ( )


E

	editor
		command line ( )
		GUI ( )

	email configuration, SMTP proxy ( )

	encapsulating security payload (ESP), IPsec/IKE ( )

	encrypting packets ( ) ( )

	encryption ( )
		DES ( )
		devices
			when required ( )
		function details ( )
		IPsec ( )
		IPsec/IKE ( )
		overview ( )
		proxies ( )
		public-key cryptography ( ) ( )
		shared-key cryptography ( ) ( )
		SKIP ( )
		SunScreen Lite ( )
		triple-DES ( )

	error message
		adminuser ( )
		authuser ( )
		lock not held ( )
		logmacro ( )
		proxyuser ( )
		save log macro ( )
		vars ( )

	error messages ( ) ( )
		logged packet reasons ( ) ( )
		`ssadm activate` ( )
		`ssadm edit` ( ) ( ) ( )
		`ssadm lock` ( ) ( )

	ESP (encapsulating security payload), IPsec/IKE ( )

	esp service ( )

	ether, state engine ( )

	ethernet, type field ( )

	ethernet 802.2 ( )

	ethernet 802.3 ( )

	ethernet II ( )

	ethernet SNAP ( )

	external users, authentication of ( )


F

	failover protection, HA ( )

	feature
		HA ( ) ( )
		NAT ( ) ( ) ( )

	filtering ( )
		packets ( )

	FTP proxy
		anonymous FTP ( )
		controlling site access ( )
		destination address ( )
		example
			display variable ( )
			primary Screen ( )
		functions ( )
		global version ( )
		limiting access to ftp commands ( )
		source address ( )

	`ftp` service ( )

	`ftp` state engine ( ) ( )
		PASV mode ( )

	function, stateful packet filtering ( )


G

	gateway, VPN ( )

	gateway object
		address ( )
		certificate ( )
		data algorithm ( )
		description ( )
		key algorithm ( )
		MAC algorithm ( )
		name ( )
		rule index ( )
		tunnel address ( )
		VPN ( )

	getpeerinfo, tsolpeerinfo invokes ( )

	global log limiter ( )

	graphical user interface ( ) ( )
		administration GUI ( )
		install wizard ( ) ( )
		skiptool GUI ( )

	group ( )

	GUI
		administration ( )
		skiptool ( )

	GUI editor ( )


H

	HA
		active Screen ( )
		automatic disconnection ( )
		communication in ( )
		configuring ( )
		definition of ( )
		disrupted connections ( )
		event log ( )
		failover ( )
		failover protection ( )
		failure of primary Screen ( )
		function details ( ) ( )
		limitations ( ) ( )
		lost connections ( )
		NAT ( )
		overview ( )
		passive Screens ( ) ( ) ( )
		primary Screen ( )
		reinstate Screen ( )
		remote administration ( )
		routing mode ( )
		secondary Screen ( )
		setting an HA cluster ( )
		Solaris settings ( )
		state information limitations ( )
		SunScreen Lite ( )

	HA cluster ( )
		communicating with`ftp` and`telnet` to members of ( )
		communication between members ( )
		forcing failover ( )
		function details ( )
		hubs necessary for ( )
		mirror configuration ( )
		mirror state ( )
		naming Screen ( )
		network interface ( )
		non-switching hub ( )
		stealth interface ( )

	HA interface ( )
		SunScreen Lite ( )

	harden command ( )

	hardening OS
		optional ( )
		stealth mode ( )

	help
		documentation ( )
		man pages ( )
		online ( )

	high availability
		non-switching hub ( )
		stealth interface ( )

	high availability. See HA ( )

	HTTP proxy
		defining source address ( )
		example
			display variable ( )
		filtering content ( )
		filtering Java applets ( )
		filtering restrictions ( )
		ftp access ( )
		functions ( )
		limitations ( )
		NAT implementation ( )
		operation ( )
		prevent access ( )
		restrict Web content ( )
		SSL support ( )
		useful in implementing NAT ( )
		using Java ( )
		VirusWall scanning ( )

	hub
		non-switching
			HA cluster ( )
			stealth mode ( )


I

	ICMP messages ( )

	ICMP packets ( )

	`icmp` service ( )

	`icmp` state engine ( ) ( )

	IETF standard ( )

	IKE
		See also IPsec
		certdb ( )
		certificate ( )
		certlocal ( )
		certrldb ( )
		IPsec SA ( )
		IPsec security association ( )
		signature ( )

	IKE peers ( )

	incomplete valid address set ( )

	individual servers, SunScreen Lite ( )

	installation, requirements ( )

	integrity validation ( )

	interface ( )
		admin ( )
		HA ( )
		HA cluster network ( )
		mixed routing and stealth ( )
		modes ( )
		routing ( ) ( ) ( )
		routing mode ( ) ( )
		stealth mode ( )

	interface object ( )

	interface objects, single Screen ( )

	interface type
		admin ( )
		disabled ( )
		HA ( )
		routing ( )
		stealth ( )

	interfaces
		SunScreen Lite ( ) ( )

	internal users, authentication of ( )

	Internet Key Exchange
		See IKE

	Internet Key Exchange (IKE) ( )

	Internet Protocol security (IPsec) ( )

	IP address, defining rules ( )

	IP addresses ( )

	`ip all service` ( )

	`ip forward` service ( )

	`ip mobile` service ( )

	IP protocol ( )

	`ip tunnel` service ( )

	`ipfwd` state engine ( )

	`ipmobile` state engine ( )

	IPsec ( ) ( ) ( )
		authentication ( )
		configuration ( )
		DES ( )
		encryption ( )
		MD5 ( )
		SHA-1 ( )
		triple-DES ( )

	IPsec/IKE ( ) ( )
		AH (authentication header) ( )
		authentication ( )
		data protection ( )
		decryption ( )
		encryption ( )
		ESP (encapsulating security payload) ( )
		integrity validation ( )

	IPsec/IKE and SKIP ( )

	IPsec SA
		See also IKE

	ipsec service ( )

	`iptunnel` state engine ( )

	ipv6 tunnel service ( )

	isakmp service ( )


J

	Jar hashes, VJM ( )

	Jar hashes and signatures, JVM ( )

	Jar signatures ( )

	Java
		plug-in
			installation instructions ( )
			Solaris ( )
			Windows ( )

	Java Virtual Machine, see JVM ( )

	JVM ( )
		Jar hashes ( )
		Jar hashes and signatures ( )


K

	key algorithm, gateway object ( )

	key manager, SunScreen SKIP ( )

	keys, issued ( )


L

	local administration
		concepts ( ) ( )
		overview ( )
		routing mode Screen ( )
		routing-mode Screen ( )

	log
		altering size ( )
		automated centrally managed group ( )
		automated management ( )
		automated postprocessing logs ( )
		binary records ( )
		bridging macros ( )
		centralized management group ( ) ( )
		common optional attributes ( )
		embedded string filters ( )
		examining ( ) ( )
		example ( )
			`clear` ( )
			`clear` log ( )
			debugging ( )
			defining specific macro ( )
			display global default ( )
			display global log limiter ( )
			display macro definition ( )
			display Screen definitions ( )
			display Screen names ( )
			display size specific Screen ( )
			display specific macro definition ( )
			displaying log statistics ( )
			expanding given macro ( )
			expanding log macro ( )
			`get_and_clear` automatically ( )
			`get_and_clear` log ( )
			`logapp` operand ( )
			`logsev` operand ( )
			processing local file log record ( )
			processing records ( )
			retrieving items from current log ( )
			setting size specific Screen ( )
		extended events ( ) ( )
		extended log event enhancements ( )
		extended log events ( ) ( )
		filtering macros ( )
		filtering mechanisms ( )
		filtering Screen logs ( )
		general event type enhancements ( )
		`get_and_clear` operation ( )
		global default size ( )
		group-Screen installations ( )
		HA ( )
		HA cluster ( )
		installation ( )
		limiter variables ( )
		limiters ( )
		`list` ( )
		listing macros ( )
		local macros ( )
		locations ( )
		logdump extensions ( )
		logged network packet enhancements ( )
		logging server ( )
		macro expansion ( )
		macros ( )
		macros registry ( )
		manual management ( )
		naming macros ( )
		network session ( ) ( )
		network traffic ( )
		packet filtering ( )
		primary Screen log file size ( )
		propagating limiters ( )
		reason why packet logged ( )
		retrieval and clearing ( )
		secondary Screen log file size ( )
		session summary events ( )
		`snoop` ( )
		specific Screen ( )
		statistics ( )
		traffic size ( )
		using log macros ( )
		who cleared log ( )

	log browsing
		active Screen ( )
		administration GUI ( )

	`LOG_DETAIL` ( )

	`LOG_NONE` ( )

	`LOG_SESSION` ( )

	log statistics
		administration GUI ( )
		command-line retrieval ( )

	`LOG_SUMMARY` ( )

	logdump, derived from snoop ( )

	logged packet reasons ( ) ( )
		why codes ( )

	logging ( )
		packet logging
			detail ( )
			none ( )
		sessions ( )
		spoofed packet ( )

	logmacro, save error message ( )


M

	MAC address ( )

	MAC algorithm
		gateway object ( )
		VPN gateway ( )

	macros, log filtering ( )

	man page, `ssadm logdump` ( )

	man pages
		help ( )
		IKE ( )
		SKIP ( )
		Solaris ( ) ( )
		SunScreen ( )

	master key identifier
		See MKID

	message authentication code
		See also MAC address

	message transfer agent
		See see MTA

	mirror configuration, HA cluster ( )

	mirror state, HA cluster ( )

	mixed-mode, routing and stealth ( )

	MKID, SKIP certificate ( )

	multiple Screens
		address object ( )
		common object ( )
		policy rules for ( )


N

	name
		forbidden characters ( ) ( ) ( ) ( ) ( )
		gateway object ( )
		VPN ( )

	name space identifier
		See NSID

	naming conventions ( )

	NAT
		and tunneling ( )
		caution ( )
		configuration ( )
		demilitarized zone ( )
		dynamic ( )
		example mappings ( )
		function details ( )
		HA ( )
		mapping collisions ( )
		ordered translations ( )
		sequence ( )
		site mappings ( )
		stateful ( )
		static ( )
		SunScreen Lite ( )

	network packet traffic ( )

	network security policy, setting up ( )

	network services, service groups ( )

	network topology
		security policy ( ) ( )

	new service
		`ip` ( )
		`ip fwd` ( )
		`ip mobile` ( )
		`ip tunnel` ( )

	`nfs readonly` service ( )

	`nis` state engine ( )

	no logging ( )

	non-switching hub
		HA cluster ( )
		stealth interface ( )

	NSID, SKIP certificate ( )

	ntp
		service ( )
		state engine ( ) ( )

	ntp service ( )


O

	object types
		configuration editor ( )
		named ( )
		ordered ( )

	online help ( )

	ordered rules sequence ( )

	overview
		access control ( )
		administration GUI ( )
		authentication ( )
		encryption ( )
		HA ( )
		local administration ( )
		public-key encryption ( )
		remote administration ( )


P

	packet
		filtering ( )
		IP screening guidelines ( )

	packet filtering ( )
		routing--mode sequence ( )
		set up rules ( )
		state engine ( )
		stateful service rules ( )
		stealth--mode sequence ( )

	packet logging ( ) ( )

	packets
		ALLOW rule ( )
		checking size ( )
		concatenated ( )
		creating ( )
		decrypting ( ) ( )
		encapsulated ( )
		encrypting ( ) ( )
		filtering ( )
		fragmentation ( )
		ICMP ( )
		ICMP screening guidelines ( )
		logged error messages ( )
		logging ( ) ( )
		passing RIP ( )
		replacing addresses ( )
		restoring original ( )
		transmission ( )
		tunneling ( )
		VPN ( ) ( )

	parameters ( )

	PASV mode (FTP) ( )

	PDF files ( )

	PIN, SecurID ( )

	`ping` state engine ( )

	plaintext message, proxies ( )

	`pmap_nis` state engine ( )

	`pmap_tcp` state engine ( )

	`pmap_udp` state engine ( )

	policy ( )
		currently active ( )
		new version ( )
		older version ( )
		rules with multiple Screens ( )
		version or history ( )

	policy rules
		function details ( )
		ordered ( )
		rule syntax ( )

	policy versions ( ) ( )

	pre-shared key
		See IKE

	primary Screen ( )
		common object ( ) ( )
		HA ( )
		screen objects ( )

	primary Screen in centralized management, SunScreen Lite ( )

	primary Screens
		centralized management group ( ) ( )

	protocol, IP ( )

	proxies ( ) ( )
		activate policy ( )
		ciphertext message ( )
		client software ( )
		content filtering ( )
		encryption ( )
		extend ( )
		FTP protocol ( )
		FTP proxies ( )
		HTTP protocol ( )
		plaintext message ( )
		regulate ( )
		RSA Security ACE/Server ( )
		server software ( )
		setting rules ( )
		SMTP protocol ( )
		SunScreen Lite ( )
		system configurations ( )
		TCP protocol ( )
		Telnet protocol ( )
		UDP protocol ( )
		user authentication ( )
		variables RADIUS client protocol ( )

	proxy
		activate policy ( )
		client software ( )
		content filtering ( )
		DNS configuration ( )
		establish proxy user authenticity ( )
		example
			session illustration ( )
		FTP connection ( )
		FTP protocol ( ) ( )
		FTP proxy collateral mapping ( )
		how proxies work ( )
		HTTP
			VirusWall ( )
		HTTP protocol ( ) ( )
		JAR hashes ( )
		limitations ( )
		locate proxy user authenticity rule ( )
		multithreaded program ( )
		MX records ( )
		policy rule matching ( )
		protocols ( )
		proxy user anonymous ( )
		SecurID PIN server ( )
		server software ( )
		setting rules ( )
		SMTP
			VirusWall ( )
		SMTP protocol ( ) ( )
		system configurations ( )
		Telenet protocol ( )
		Telnet protocol ( )
		user authentication ( ) ( )

	proxy user
		authentication ( )
		creating object ( )
		defining object ( )
		example
			add GROUP members ( )
			create GROUP object ( )
			create SIMPLE object ( )
			display all names ( )
			display all objects ( )
			display objects ( )
			remove GROUP object ( )
		FTP proxies ( )
		GROUP object ( )
		GROUP objects ( )
		login ( )
		Login page ( )
		object definition ( )
		RADIUS ( )
		RADIUS access to LDAP ( )
		RADIUS LDAP stored in SDS ( )
		SecurID ( )
		SIMPLE null authentication ( )
		SIMPLE object ( )
		SIMPLE objects ( )
		SPECIAL external authentication method ( )
		special objects ( )
		Telnet proxies ( )

	public key certificate, X509 ( )

	public-key cryptography ( ) ( )

	public-key encryption, overview ( )


R

	RADIUS
		example
			create address objects ( )
			create node secret ( )
			create rule ( )
			create variables ( )
		multiple-Screen installations ( )
		prefigured parameters ( )
		requestor ( )
		response time ( )
		server port ( )
		testing ( ) ( )
		testing by SDS ( )
		testing by SecurID ( )
		typical configuration ( )
		UDP datagrams ( )
		user authentication details ( )
		variables ( ) ( )

	`RealAudio` ( )

	`realaudio` service ( ) ( )

	`realaudio` state engine ( )

	remote-access server ( )

	remote administration
		ADMIN interface ( )
		Administration Station ( )
		concepts ( ) ( )
		HA ( )
		overview ( )
		Screen ( )
		SunScreen Lite ( )

	remote shell (`rsh`) ( )

	requirements
		hardware ( )
		installation ( )
		software ( )

	`rip` service, RIP packets ( )

	routing and stealth, mixed-mode ( )

	routing information protocol, RIP ( )

	routing interface ( ) ( )

	routing mode ( ) ( )
		HA limitations ( )
		interface ( )
		limitations ( )
		remote-access server ( )
		subdividing a network ( )
		traditional firewall ( )
		virtual interface ( )

	rpc service ( )

	`rpc_tcp` state engine ( )

	`rpc_udp` state engine ( )

	RSA encryption
		See IKE

	RSA-ENCRYPTION ( ) ( )

	RSA signature
		See IKE

	`rsh` state engine ( )
		remote shell sessions ( )

	rule
		ALLOW ( )
		DENY ( )

	rule index, gateway object ( )


S

	SA (security association), IPsec/IKE ( )

	sample network map ( )

	Screen
		active HA Screen ( )
		components ( ) ( )
		configuration objects ( )
		HA limitations ( )
		managing multiple Screens ( )
		multiple management ( )
		passive ( )
		primary ( )
		reinstate ( )
		remote administration ( )
		remote headless ( )
		secondary ( )

	Screen description of ( )

	screen object
		centralized management ( )
		primary Screen ( )
		secondary Screen ( )

	screening guidelines
		ICMP packets ( )
		IP packets ( )

	secondary Screen ( )
		administration capabilities ( )
		HA ( )
		screen objects ( )

	secondary Screens, centralized management group ( )

	SecurID
		access paths ( )
		ACE ( )
		ACE/Agent installation ( )
		example
			token PIN establishment ( )
		example configuration ( )
		example create registry address ( )
		example stub client configuration ( )
		stub client ( )
		stub client location ( )
		token PIN ( )
		typical authentication ( )
		UDP and TCP protocols ( )
		use caution in deployment ( )

	security association (SA), IPsec/IKE ( )

	security considerations ( )

	security network, sample network map ( )

	security parameters index (SPI ) ( )

	security policy
		`Initial` ( )
		network topology ( ) ( )
		ordered policy rules ( )
		policy objects ( )
		security decisions ( )

	service
		* ( )
		ah ( )
		archie ( )
		`CoolTalk` ( )
		`dns` ( )
		entries for ports ( )
		esp ( )
		`ftp` ( )
		`icmp` ( )
		`ip all` ( )
		`ip mobile` ( )
		ipsec ( )
		ipv6 tunnel ( )
		isakmp ( )
		network service groups ( )
		`nfs readonly` ( )
		ntp ( ) ( )
		predefined ( )
		`realaudio` ( )
		rip ( )
		rpc ( )
		single
			`broadcast` filter ( )
			`reverse` filter ( )
		smtp ( )
		`sqlnet` ( )
		`TCP` ( )
		`tcp all` ( )

	service, traceroute ( )

	service
		tsolpeerinfo ( )
		udp ( )
		VDOLive ( )
		`www` ( )

	service object
		definition ( )
		group ( )
			creating new service ( )
			definition ( )
			modifying ( )
			predefined ( )
		single ( )
			creating new ( )
			`forward` filter ( )
			keyword ( )
			modifying ( )
			`port` filter ( )
			state engine ( )

	services
		discriminator ( )
		`realaudio` state engine ( )
		standard ( )
		state engine ( )

	session logging ( )

	shared-key cryptography ( ) ( )

	shell commands ( )

	signature, IKE ( )

	single Screen, interface objects ( )

	SKIP ( ) ( ) ( )
		certlocal ( ) ( )
		compatibility ( )
		encryption ( )
		RC2 limitation ( )
		SunScreen Lite ( )

	SKIP and IPsec/IKE ( )

	SKIP certificate, NSID ( )

	skiptool GUI
		encryption of administration commands ( )
		graphical user interface ( )

	small work groups, SunScreen Lite ( )

	SMTP proxy
		create rules ( )
		email configuration ( )
		email configuration issues ( )
		example
			add restrictions ( )
			define address group ( ) ( )
			define relay restrictors ( )
			define spam restrictors ( )
			display restrictors ( )
			displaying spam restrictors ( )
			email rule ( )
			remove restriction ( ) ( )
		functions ( )
		MTA filtering ( )
		operation ( )
		rules ( )
		spam
			control ( )
		VirusWall scanning ( )

	`smtp` service ( )

	SNMP
		alerts ( )
		IP addresses ( )
		receivers ( )
		time status indicator ( )
		timer interval ( )

	SNMP traps ( )
		supported ( )

	`snoop` ( )

	snoop, logdump derived from ( )

	`snoop program` ( )

	`snoop` program ( ) ( )

	Solaris, Trusted Solaris 8 for the SPARC platform ( )

	Solaris, compatible versions for the SPARC and Intel platforms ( )

	Solaris IPsec
		See IPsec

	spam
		control ( )
		restictors
			defining ( )
			syntactic forms ( )
		restrictors
			displaying ( )
			working with ( )

	SPI (security parameters index) ( )

	spoof protection ( )

	SQL *Net protocol ( )

	`sqlnet` state engine ( )

	ssadm
		certdb subcommand ( )
		certlocal subcommand ( )
		certrldb subcommand ( )

	`ssadm logdump`, man page ( )

	standard, IETF ( )

	star service ( )

	state engine
		characteristics ( )
		connection management ( )
		definition ( )
		discriminator ( )
		discriminator value ( )
		discriminators ( )
		`dns` ( )
		ether ( )
		`ftp` ( ) ( )
		`icmp` ( )
		`ip` ( )
		`ipfwd` ( )
		`ipmobile` ( )
		`iptunnel` ( )
		new service ( )
		`nis` ( )
		ntp ( ) ( )
		parameters ( )
		`ping` ( )
		`pmap_nis` ( )
		`pmap_tcp` ( )
		`pmap_udp` ( )
		precedence level ( )
		`realaudio` ( )
		`rpc_tcp` ( )
		`rpc_udp` ( )
		`rsh` ( )
		services ( )
		`tcp` ( ) ( )
		`tcpall` ( )
		`udp` ( )
		`udp_datagram` ( )
		`udp_stateless` ( )
		`udpall` ( )

	state engines ( )

	state information, HA limitations ( )

	stateful packet filtering ( )
		details ( )

	statistics, log file ( )

	stealth ( )

	stealth interface ( )
		HA cluster ( )
		high availability ( )
		non-switching hub ( )

	STEALTH interface, SunScreen Lite ( )

	stealth mode ( )
		acts as a bridge ( )
		description ( )
		hardening OS ( )
		interface ( )
		SunScreen Lite ( )

	summary
		packet logging
			summary ( )

	SunScreen
		command compatibility ( )
		compatibility ( )
		configuration editor ( )
		error messages ( )
		example
			continue adding SecurID rules ( )
		how it works ( )
		migration from SunScreen EFS, Release 2.0 ( )
		migration from SunScreen SPF-200 ( )
		upgrading ( )

	SunScreen 3.2
		prerequisites ( )
		resources ( )

	SunScreen and SunScreen Lite
		common features SunScreen Lite and SunScreen
			common features ( )

	SunScreen compared with SunScreen Lite ( )

	SunScreen EFS 1.1 ( )

	SunScreen Lite ( ) ( ) ( ) ( )
		ADMIN interface ( )
		centralized management group ( )
		encryption ( )
		HA ( )
		HA interface ( )
		individual servers ( )
		interfaces ( )
		limitations ( )
		NAT ( )
		number of interfaces ( )
		primary Screen in a centralized management ( )
		remote administration ( )
		SKIIP ( )
		small work groups ( )
		STEALTH interface ( )
		stealth mode ( )
		time-of-day rules ( ) ( )

	SunScreen Lite compared with SunScreen ( )

	SunScreen SKIP
		commands ( )
		end-system SKIP ( )
		header ( )
		key manager ( )
		limitations note ( )
		log ( )

	SunScreen SKIP. See SKIP ( )


T

	`tcp all` service ( )

	tcp_keepalive ( )

	`TCP` service ( )

	`tcp` state engine ( )

	`tcpall` state engine ( )

	telnet, trusted Solaris system ( )

	Telnet proxy
		example
			SunScreen SKIP ( )
		functions ( )
		operation ( )
		other issues ( )
		request user name ( )
		TCP ( )

	time-based rules, function details ( )

	time objects ( )
		SunScreen Lite ( )

	time-of-day rules, SunScreen Lite ( )

	`traceroute` service ( )

	traditional firewall ( )

	traffic key, generated ( )

	traffic log size ( )

	troubleshooting
		access to console ( )
		gathering information ( )
		printing debug information ( )
		ss_debug_level ( )

	trusted Solaris
		dynamic NAT ( )
		telnet example ( )
		tsolpeerinfo ( )

	Trusted Solaris 8 for the SPARC platform ( )

	tsolpeerinfo, getpeerinfo invocation ( )

	tsolpeerinfo service ( )

	tunnel address, gateway object ( )

	tunneling
		and VPN ( )
		function details ( ) ( )
		hiding addresses ( )
		packets ( )


U

	UDP, `traceroute service` ( )

	`udp_datagram` state engine ( )

	udp service ( )

	`udp` state engine ( )

	`udp_stateless` state engine ( )

	`udpall` state engine ( )

	UNIX commands ( )

	unsupported commands ( )

	upgrading ( ) ( )
		Solaris support ( )
		Unicode internationalization note ( )

	upgrading from SunScreen EFS 1.1 ( )

	user authentication ( )
		administrative user ( )
		authuser ( )
		function details ( )
		proxy user ( )

	users
		external ( )
		internal ( )


V

	valid address set ( )
		complete ( )
		incomplete ( )

	`VDOLive` service ( )

	version
		new policy ( )
		older policy ( )
		policy ( )

	version number ( )
		administration GUI ( )
		historical ( )
		policy versions ( )

	virtual private network
		See VPN

	virtual private network. See VPN ( )

	VirusWall
		content scanning ( )
		filtering scripts and applets ( )
		HTTP proxy ( ) ( )
		mail viruses ( )
		SMTP proxy ( )

	VJM, Jar signatures ( )

	VPN ( ) ( )
		adding a rule ( )
		defining ( )
		encryption devices required ( )
		example configuration ( )
		function details ( ) ( )
		gateway object ( )
		limitations ( )
		name ( )
		overview ( )
		setting up ( ) ( )
		SunScreen Lite ( )
		tunneling data ( )

	VPN gateway ( )

	vpngateway ( )


W

	why codes, logged packet reasons ( )

	`www` service ( )

Previous: Glossary