Datasheet

Release Notes for 3Com X Family of Unified Security Platforms, Release 3.2 Page 9
Custom Web Filter Lists
When you enter URL patterns or regular expressions in the Custom Filter List (Web Filter > Custom
Filter List), limit the URL pattern or expression to 64 characters or fewer. If you enter a pattern or
expression longer than 64 characters, the device may drop the pattern without issuing an error.
IPS TRAFFIC THRESHOLD FILTER CONFIGURATION
When you define a Traffic Threshold filter, the specified zone pair must also exist explicitly in a security
profile. If a matching security profile is not defined, the traffic on the virtual segment is not inspected by
the X family device.
For example, if the only security profile configured on a device is the default (ANY <==> ANY) and you
create a Traffic Threshold profile to apply to traffic on the zones LAN ==> WAN, you must create a
security profile that explicitly applies to the LAN ==> WAN zone pair, or add this zone pair to an existing
security profile. If a security profile for a zone pair is missing, the Virtual Segments table on the LSM
Security Profiles page table displays the error message “No security profile is assigned to the in/out
pair. Traffic will NOT be inspected against DV filter policies.”
NTP SERVER CONFIGURATION
You can configure up to four NTP servers on the X family device. If you try to configure a fifth NTP
server, you will lose the settings for all of the NTP servers already configured.
Workaround: If you have configured four NTP servers on the device and need to add another, delete
one of the existing servers first.
CSW SUPPORT
X family devices fully support Custom Shield Writer (CSW) packages using the 2.5.2 CSW application.
HIGH AVAILABILITY
Version 3.1 and newer supports redundant X family devices. The High Availability (HA) feature allows
for a primary and a standby device, with the standby device automatically taking over if the primary
device fails. Note the following requirements:
1. You need a separate DV license for the standby device.
2. To allow the standby device to automatically download DV updates, verify that both devices
are configured with an HA management IP address on an external virtual interface and that
this address can reach the Internet.
DHCP CONFIGURATION
To configure the X family device as a DHCP server, both of the following firewall rules are required to
permit the DHCP protocol to and from the client:
Action Source Destination Service
Permit LAN this-device dhcp-server
Permit this-device LAN dhcp-client