Most of the functions of the Security Server are configured and managed
through IP Objects, each having its own set of properties that define
the scope its actions. These
properties can be modified through either the Configurations interface
(graphical design format on the TTC Security Server Console) or through
the web based interface which can present the Objects' properties dialogs
at any browser based workstation.
Though the appearance of some IP Objects properties pages will be different,
depending on your immediate choice of interface, the functions defined
through either interface and recorded into the Security Server's registry
and operational tables will be identical.
About IP Objects
IP Objects are the building blocks used to create traffic management
Configurations. Each Object provides specific network control functionality
(e.g. load balancing, filtering, speed limiting, etc.).
Properties pages for each IP Object contain the operational settings
and management rules that determine how the particular Object will handle
the network traffic passing through it.
For more information regarding the placement and connection of IP Objects
in configurations, refer to the Configurations online Help.
IP Objects Index
The TTC Security Server can utilize many different IP Objects in a broad
range of traffic management configurations. The
following table provides a listing and brief description of each of the
IP Objects.
IP Objects will appear in the Properties
listing of the Security Server Management Console only when the specific
IP Object is utilized in the Active Configuration.
Regardless
of an Object's appearance in the Properties list, the Objects are available
for addition to any configuration through the configuration
editor.
The Class Based Queuing Object
(CBQ) is a highly configurable bandwidth management tool that allows for
a variety of class policies to be applied to differentiated classes of
traffic.
The Destination NAT Object (Network
Address Translation) redirects
select inbound sessions to alternate IP addresses or ports to mask the
internal network from the Internet.
The Discard Object is simply
a "Bit Bucket" to assist in accounting for traffic that does
not meet the management requirements specified in the configuration.
The Filter Object redirects
packets based on a combination of the Protocol, Source and Destination
Ports (or port ranges), and the Source and Destination IP Addresses.
The Flow Control Object is a
bandwidth management tool that allows for automatic regulation of specific
flows of traffic based upon its typal signature (i.e., source and destination
IP addresses and ports).
The Priority Object prioritizes
the throughput of multiple input connections based upon user configurable
bandwidth percentages.
The Security Agent is not as
much an IP Object as it is a sophisticated client/server package providing
network client workstation security administered from single location.
The Suspicious Traffic Object
is designed to be a tool for evaluating the string content of packets
for suspicious items that could signify either unacceptable, unauthorized
or hazardous traffic and reporting the activity to a log file.
The Traffic Discovery Object
isolates, quantifies and reports selected network traffic into an Active
Statistics display. Best used in conjunction with a Filter Object.
The Traffic Limiter Object is
used to selectively regulate the flow of traffic for a variety of network
sessions. This
regulation can be specified by User, Group, Protocol, internal and external
IP Addresses and ports as well as applications. Bandwidth
utilization is regulated on the outbound packets of the specified sessions
only.
The Traffic Priority Object
is used simply to escalate or demote the internal processing of selected
network sessions. Low,
Normal and High priority processing can be assigned to sessions specified
by User, Group, Protocol, internal and external IP Addresses and ports
as well as applications. Priortization
is regulated on the outbound packet processing only.
The WAN Load Balancer Object
enables the distribution of outbound IP traffic over a number of WAN or
Internet links, providing increased performance and redundancy of critical
WAN or Internet connections.
