Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 - ADMINISTRATION Administration Manual

Also see for ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5: Manual Installation guide

Contents

Novell ZENWORKS ENDPOINT SECURITY MANAGEMENT 3.5 - ADMINISTRATION Administration Manual Manual pdf 130 page image

130 ZENworks Endpoint Security Management Administration Guidenovdocx (en) 17 September 20093 The default behavior setting may be re-defined. However, cChanging the settings in a sharedcomponent will affect all other instances of this same component. Use the Show Usagecommand to view all other policies associated with this component.4 Click SaveMultiple firewall settings can be included within a single location. One is defined as the defaultsetting, with the remaining settings available as options for the user to switch to. Having multiplesettings are useful when a user may normally need certain security restrictions within a networkenvironment and occasionally needs those restrictions either lifted or increased for a short period oftime, for specific types of networking (i.e., ICMP Broadcasts).Three firewall settings are included at installation, they are: All Adaptive - This firewall setting sets all networking ports as stateful (all unsolicitedinbound network traffic is blocked. All outbound network traffic is allowed), ARP and 802.1xpackets are permitted, and all network applications are permitted a network connection, all. All Open - This firewall setting sets all networking ports as open (all network traffic isallowed), all packet types are permitted. All network applications are permitted a networkconnection All Closed - This firewall setting closes all networking ports, and restricts all packet types.A new location will have the single firewall setting, All Open, set as the default. To set a differentfirewall setting as the default, right click the desired Firewall Setting and choose Set as Default.6.3.8 TCP/UDP PortsEndpoint data is primarily secured by controlling TCP/UDP port activity. This feature allows you tocreate a list of TCP/UDP ports which will be uniquely handled in this firewall setting. The listscontain a collection of ports and port ranges, together with their transport type, which defines thefunction of the range.NOTE: This feature is only available in the ZENworks Endpoint Security Management installation,and cannot be used for UWS security policies.To access this control, open the Locations tab, click the “+” symbol next to Firewall Settings, clickthe “+” symbol next to the desired Firewall, and click the TCP/UDP Ports icon in the policy tree onthe left.