HP-UX 11i June 2003 Release Notes

HP-UX 11i Version 1.0 Operating Environment Applications
Selectable Applications
Chapter 6
149
• Rewritten and enhanced user's manual: Task oriented documentation with new
sections on agent configuration, response programs, error messages, and
troubleshooting.
• New certificate generation and management tools: Accommodates a pure Java
implementation of SSL for the administrative GUI.
Documentation
The following documents are available in the “Internet and Security Solutions”
neighborhood at http://docs.hp.com/hpux/internet:
• HP Intrusion Detection System/9000 Release 2.1 Release Notes
(product no. J5083-90008)
• HP Intrusion Detection System/9000 Administrator's Guide
(product no. J5083-90007)
HP-UX IPFilter
The security product, HP-UX IPFilter (formerly known as IPFilter/9000), provides
system firewall capabilities by filtering IP packets to control traffic in and out of a
system. IPFilter/9000 includes support for Static Linking, Gigabit Ethernet, Auto Port
Aggregation (APA), and Virtual Local Area Network (VLAN).
updated for
September 2002
High availability environment with MC/ServiceGuard now supported with HP-UX
IPFilter version A.03.05.05.
updated for June
2002
PCI FDDI and PCI Token Ring interfaces are now supported with IPFilter/9000 version
A.03.05.04.
updated for March
2002
IPFilter/9000 has been updated to version A.03.05.03 to incorporate defect fixes.
new for
December 2001
IPFilter/9000, version A.03.05.02, is now available.
Impact
System performance may improve when IPFilter is installed but not running.
Documentation
For detailed, updated information, see the documents and web sites listed below:
• Documents (available at http://docs.hp.com):
— Installing and Administering HP-UX IPFilter (B9901-90009)
— HP-UX IPFilter Release Note (B9901-90010)
• Manpages:
ipf (4) packet filtering kernel interface
ipf (5) IP packet filter rule syntax
ipf (8) alters packet filtering kernel’s internal lists
ipl (4) data structure for IP packet log device
ipmon (8) monitors /dev/ipl for logged packets