Copyright: Copyright © 2000, Intel Corporation. All rights reserved.


Legal

Copyright © 2000, Intel Corporation. All rights reserved.

Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97214-6497 USA

Intel Corporation assumes no responsibility for errors or omissions in this document. Nor does Intel make any commitment to update the information contained herein.

* Other product and corporate names may be trademarks of other companies and are used only for explanation and to the owner's benefit, without intent to infringe.


Other Software

*Other brands, names, or trademarks are the property of their respective owners companies and are used only for explanation and to the owner's benefit, without intent to infringe.


Behavior

Secure Responder

Example: Workstations

Secure Responders initiate communication without security (in the clear), but can attempt to negotiate a secure communication if one is requested. For example, if a Secure Responder workstation attempts to access a file server and that file server requests a secure communication, the workstation can respond in a secure manner.

If two workstations are configured with this setting and they attempt to communicate with each other, the communication is allowed without security (in the clear).

Secure Initiators

Example: Servers

Secure Initiators request security for all communications, but don’t require it. For example, a Secure Initiator server always initiates communications by requesting security. If the negotiation for a secure communication is unsuccessful, the Secure Initiator server communicates without security (in the clear).

Lockdown

Example: Servers that require strict security for all communication

Lockdown computers require security for all communication. Lockdown computers do not communicate without security, that is, they do not communicate in the clear.

Only use Lockdown if a computer will be accessed by a very limited number of computers, and those computers are all properly set up with Packet Protect. If a backup to another computer on the network is scheduled automatically, it will fail unless the other computer is also security-enabled.

Pre-shared Key

A pre-shared key is similar to a secret password. It helps verify the identity of the initiator and the responder.


Port Numbers

Port Numbers

The server uses two ports for communicating with clients.

•	Policy Server Port Number: used for evaluating client configuration during the first step of client installation; its default is 4000.

•	Push Port Number: used for distributing policies and receiving events; its default is 4001. You can accept the default ports, or enter new port numbers (port numbers can range from 1024 to 65535).