HP VPN Firewall Appliances Access Control Configuration Guide
iii
Configuration procedure ···································································································································· 102
Managing sessions ················································································································································· 109
Overview ······································································································································································· 109
Session management operation ························································································································· 109
Session management functions ·························································································································· 109
Configuring session management in the Web interface·························································································· 110
Configuring basic session management settings ····························································································· 110
Displaying session table information ················································································································· 113
Displaying global session statistics ···················································································································· 114
Displaying history session statistics ··················································································································· 116
Displaying session statistics by the IP address or the security zone ······························································ 116
Configuring session management at the CLI ············································································································· 120
Session management task list ····························································································································· 120
Configuring session logging ······························································································································ 123
Displaying and maintaining session management ·························································································· 124
Configuring virtual fragment reassembly ·············································································································· 126
Overview ······································································································································································· 126
Configuring virtual fragment reassembly in the Web interface ····································································· 126
Configuration procedure ············································································································································· 126
Virtual fragment reassembly configuration example ······················································································· 128
Configuring virtual fragment reassembly at the CLI ································································································· 129
Configuration procedure ···································································································································· 129
Configuration example ······································································································································· 130
Configuring ASPF ···················································································································································· 132
Overview ······································································································································································· 132
Configuring ASPF in the Web interface ···················································································································· 132
Configuration procedure ···································································································································· 132
ASPF configuration example ······························································································································ 133
Configuring ASPF at the CLI ······································································································································· 134
Configuring session acceleration ··························································································································· 135
Feature and hardware compatibility ·························································································································· 135
Overview ······································································································································································· 135
Configuring session acceleration ······························································································································· 135
Configuration guidelines ············································································································································· 135
Configuring connection limits ································································································································· 137
Overview ······································································································································································· 137
Configuring connection limit policies in the Web interface ···················································································· 137
Configuring connection limit policies at the CLI ······································································································· 139
Connection limit configuration task list ············································································································· 139
Creating a connection limit policy ····················································································································· 139
Configuring the connection limit policy ············································································································ 139
Applying the connection limit policy ················································································································· 140
Displaying and maintaining connection limit policies ····················································································· 140
Connection limit configuration example ··········································································································· 140
Troubleshooting connection limiting ·················································································································· 142
Configuring portal authentication ·························································································································· 143
Overview ······································································································································································· 143
Extended portal functions ··································································································································· 143
Portal system components ··································································································································· 143
Portal system using the local portal server ········································································································ 145
Portal authentication modes ······························································································································· 146