Configuring the Network Refresh and Permanent MAC Address Bindings. Netgear STM600 - ProSecure Web And Email Threat Management Appliance, STM300 - ProSecure Web And Email Threat Management Appliance, STM150 - ProSecure Web And Email Threat Management Appliance

ProSecure Web/Email Security Threat Management (STM) Appliance

3.

Select the radio buttons, make your selections from the drop-down list, and complete the fields as explained in the following table:

Table 14. Session Limits Settings

Setting

Session Limits

Description (or Subfield and Description)

Do You Want to

Enable per-user

Session Limits?

Select the Yes radio button to enable session limits, and then fill in the Limit Type and

Limit Value fields. The No radio button is selected by default.

Limit Type From the Limit Type drop-down list, make one of the following selections:

• Percentage of Maximum Sessions. Session limits are set as a percentage of the total connection capacity per user.

• Sessions per User. Session limits are set as an absolute number.

Limit Value Depending on the selection in the Limit Type field, this value is a percentage or an absolute number.

The Total Number of Packets Dropped field, which you cannot configure, shows the total number of packets that are dropped because the session limit has been exceeded.

Session Timeouts

If a session goes without data flow longer than the configured values, the session is terminated.

TCP Timeout

UDP Timeout

The time in seconds after which a TCP session without data flow is terminated. The default time is 1200 seconds.

The time in seconds after which an UDP session without data flow is terminated. The default time is 180 seconds.

ICMP Timeout The time in seconds after which an ICMP session without data flow is terminated. The default time is 8 seconds.

4.

Click Apply to save your settings. Changing any settings in the Session Timeouts section of the screen requires the STM to restart. If you click Reset, the STM restarts to restore the default network settings.

Configuring the Network Refresh and

Permanent MAC Address Bindings

The STM integrates smart virtual MAC address detection to automatically detect virtual MAC addresses and bind these to an interface. When the network topology changes, a virtual

MAC address might no longer be bound to the original interface. If this situation occurs, the host to which the virtual MAC address is assigned is no longer able to communicate with others through the STM. Therefore, the network need to be refreshed to enable the STM to redetect the virtual MAC address on the correct interface.

Chapter 3. Performing Network and System Management | 57

ProSecure Web/Email Security Threat Management (STM) Appliance

To refresh the network and view the MAC Address Bindings table:

1.

Select Global Settings > Network Settings from the menu. The Network Settings submenu tabs display with the Network Settings screen in view.

2.

Click the Network Refresh submenu tab. The Network Refresh screen displays. (The following figure shows the STM150.)

Figure 36.

58 | Chapter 3. Performing Network and System Management

ProSecure Web/Email Security Threat Management (STM) Appliance

3.

Select the check boxes and radio buttons and make your selections from the drop-down list as explained in the following table:

Table 15. Network Refresh Settings

Setting Description (or Subfield and Description)

Automatically Refresh the Network

Periodically refresh the MAC address bindings

Select this check box to enable the periodic refresh of the dynamic MAC address bindings. Specify if the refresh occurs either weekly or daily.

Weekly Select the Weekly radio button to enable a weekly refresh of the network, and then specify when the refresh needs to occur by selecting the day, hour, and minutes from the drop-down lists.

Daily Select the Daily radio button to enable a daily refresh of the network, and then specify when the refresh needs to occur by selecting the hour and minutes from the drop-down lists.

Click Apply to schedule the automatic refresh of the network, or click Reset to return to the default settings.

Manually Refresh the Network

Click Refresh to immediately refresh the network.

Note:

When you click Refresh, the network restarts.

Note:

The Advanced Settings button is described in the following section.

Managing Permanent MAC Address Bindings

You can permanently bind a MAC address to an interface. Such a binding does not change when the network topology changes and does not need to be redetected by the STM.

To create a permanent MAC binding:

1.

Select Global Settings > Network Settings from the menu. The Network Settings submenu tabs display with the Network Settings screen in view.

2.

Click the Network Refresh submenu tab. The Network Refresh screen displays (see the previous figure, which shows the STM150). Locate the Manually Refresh the Network section.

3.

Click the Advanced Settings button. The screen expands to display the MAC Address

Bindings section.

Chapter 3. Performing Network and System Management | 59