fortigate02-防火墻策略-全文預(yù)覽
【正文】 于 39。 Q: 是否可以選擇性的清除用戶認(rèn)證狀態(tài)？ A: 是。 意味著可以有選擇的刪除用戶認(rèn)證狀態(tài)！ Debug：防火墻會(huì)話 ? 有認(rèn)證的會(huì)話將有更多的信息 session info: proto=6 proto_state=11 expire=3588 timeout=3600 flags=00000000 sockflag=00000000 sockport=80 av_idx=0 use=5 originshaper= replyshaper= ha_id=0 hakey=58157 policy_dir=0 tunnel=/ user=user2 group=group2 state=redir local may_dirty authed rem statistic(bytes/packets/allow_err): =4876/20/1 reply=5642/11/1 tuples=3 insink: prepost, reply prepost dev=89/98 gwy=hook=post dir= act=snat :1095:80(:38595) hook=pre dir=reply act=dnat :80:38595(:1095) hook=post dir=reply act=noop :80:1095(:0) pos/(before,after) 0/(0,0), 0/(0,0) misc=20212 policy_id=1 auth_info=2 chk_client_info=0 vd=4 serial=0000072b tos=ff/ff app=0 dd_type=0 dd_rule_id=0 Debug : authd, fnbamd ? 當(dāng)用戶在 Web登錄頁(yè)面成功認(rèn)證后 …… FG3600A1 (global) message_loop: checking timeouts :792 authd__read: called :1671 authd__wait_credential: called :262 authd__read__message: called :218 authd__is_full__message: called :2277 authd__change_state: called change state to: 15 :2053 authd__wait_auth: called :511 authd_fnbam_auth_user: called authd_fnbam_auth_user: username=user2, policy_id=1 authd_fnbam_locked_out: username=user2, src_addr=, n_failures=0, record_ttl=14244 user2(group2) authentication successful: grp_info=2 av_info=0, av_grp=0 timeout=300 :1381 authd__authentication_done: called :2277 authd__change_state: called change state to: 16 :2103 authd__send_ok: called :145 authd__send_data: called :2277 authd__change_state: called change state to: 20 :2197 authd__disconnect: called :2277 authd__change_state: called change state to: 21 :2242 authd__done: called message_loop: checking timeouts Qamp。 HTTP multiplex(多路復(fù)用 )一 HTTP multiplex(多路復(fù)用 )二 如果選中 沒有選中 Troubleshooting FG3600A3 diag firewall vip realserver ldb real servers virtualserver virtualserver diagnostics FG3600A3 diag firewall vip virtualserver filter filter for various virtual server diagnostics log logging diagnostics realserver realserver diagnostics session session diagnostics ssl SSL sessions stats statistics FG3600A3 diag firewall vip virtualserver realserver list vd root/0 vs HTTPSsrv/3 addr :80 status 1/1 conn: max 10 active 0 attempts 0 success 0 drop 0 fail 0 ssl: 0 FG3600A3 diag firewall vip realserver down change address down flush flush healthcheck server health check list list up change address up FG3600A3 diag debug application vs 7 基于用戶認(rèn)證的策略 基于用戶認(rèn)證的子策略 ? 啟用基于用戶的子策略 ? 可以針對(duì)不同的用戶組使用不同的 ? 時(shí)間表 ? 服務(wù) ? 保護(hù)內(nèi)容表 ? 流量控制 ? 流量日志 基于用戶認(rèn)證的子策略 ——例 ? 說(shuō)明 根據(jù)不同的用戶組部署不同的保護(hù)內(nèi)容表和流量控制 功能描述 ? 所有啟用用戶認(rèn)證
環(huán)評(píng)公示相關(guān)推薦
鄂ICP備17016276號(hào)-1