HP-UX IPFilter V17.05 Release Notes

1 About this Product
HP-UX IPFilter, product number B9901AA version 17.05 is a TCP/IP packet filter suitable for use
as a system firewall to protect back-end servers. The firewall functions as a security defense by
cutting down the number of exposure points on a machine. Although HP-UX IPFilter is a superset
of the functionality in the IPFilter 3.5 Alpha 5 open source version of the product (developed by
Darren Reed), HP does not support some of the perimeter firewall features in that release. If you
are using features that are not supported by HP, you can request support from the open source
IPFilter website. The URL for this site is http://caligula.anu.edu.au/~avalon. HP-UX IPFilter
version 17.05 also supports various features in open source IPFilter 4.1.24.
The HP-UX IPFilter version 17.05 product is supported on HP-UX 11i v3 systems. HP-UX IPFilter
version 17.05 can be obtained from the HP Software Depot at http://www.software.hp.com for
HP-UX 11i v3.
HP-UX IPFilter Version StringOS Version
A.11.31.17.05HP-UX 11i v3
For a complete list of commands and utilities that are not supported by HP, see “Unsupported
Features” (page 14).
1.1 Benefits and Features
HP-UX IPFilter version 17.05 provides the following key benefits:
• Protects an individual host on an intranet against internal attacks
• Protects an individual host on an intranet against external attacks which have breached
perimeter defenses
• Provides an alternative to the restricted configuration of Internet Services
• Protects bastion host on the perimeter or in the DMZ
The following major features are included with HP-UX IPFilter version 17.05:
• Rate-based filtering
• Address pooling
• The ippool utility
• The ippool.conf file
• State aging
• Log tags
• NAT tags
• Sticky NAT sessions
• Connection health checking with l4check
• IPFilter Log Events analysis
• Rule groups
• Explicitly permits or denies a packet from passing through based on:
— IP address or a range of IP addresses
— IP protocol (IP/TCP/UDP)
— IP fragments
— IP options
— IP security classes
— TCP ports and port ranges
— UDP ports and port ranges
1.1 Benefits and Features 5