Stormshield SN series - Hardware

NTP servers (host or
group-address range)
(max 15)
The NTP server represents the remote clock with which your firewall will be
synchronized.
You can Add or Delete servers by clicking on the relevant buttons.
When you click on Add, a new line will be added to the list of NTP servers. You may
select an object from the drop-down list or create one by clicking on . It will then be
possible to create a host, an IP address range or a group.
Click on Apply after you have entered the data for the new object.
Password (ASCII) Even though this is optional, you can enter a password for your NTP server which you
can use for authentication.
Hardware
The option for monitoring hardware activity Watchdog is available on all physical S or NG model
firewalls in the U Series.
Other Firewalls in the U Series can benefit from this tool, which can improve diagnoses and help.
This mechanism is implemented by default but has to be enabled via the BIOS system. Please
refer to the technical support department’s Knowledge Base (accessible from your secure area)
in order to find out the procedure.
Hardware monitoring
timeout (watchdog)
This device tests the activity of the firewall’s system. The frequency of tests is defined
by this timeout. When the system is idle, this watchdog will reboot the firewall and
raise a system event (24).
To stop monitoring, select Disable.
Industrial firewalls only (SNi40 models)
In order to ensure service continuity in an industrial setting, the SNi40 firewall is equipped with a
hardware bypass function, which when enabled, allows making network traffic pass through
without being scanned.
NOTE
This mechanism can only be enabled on the first two interfaces of the firewall.
Two of the firewall's operating modes are offered:
l Security mode: this mode favors network security and protection. The bypass mechanism
cannot be enabled. This is the firewall's default operating mode.
l Safety mode: this mode favors service continuity. The bypass mechanism will be enabled
whenever the appliance breaks down or there is a power outage.
Whenever Safety mode is enabled, one of three types of bypass may be activated:
l SystemOff bypass: it will be activated when the appliance experiences an electrical failure or
when there is a power outage.
l JustOn bypass: it will be activated when the appliance is restarted and will then be disabled.
l OnTimer bypass: when the product has to handle too many connections, this bypass will be
activated after a period defined in the configuration of Safety mode. Once the bypass has
been activated, the firewall administrator can then reset Safety mode.
Page 79/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
CONFIGURATION