The Default Rule

When you install Intel Packet Protect, a default rule is created. The Default Rule provides a rule for enabling all communication to request a secure communication.

You do not have to use the Default Rule in your network; this rule can be deleted. In this case, only systems that have the behavior of Secure Initiator or Lockdown will initiate communication with security. Systems with Secure Responder behavior will initiate communication without security.

The Default Rule has these properties:

Destination Workgroup

Everybody.

Applies to every system in the LAN.

Security Action

Default Action.

The standard security action, which uses a time limit of 8 hours. See Customize Security Actions for detailed information about security actions.

If rule fails

Use the default behavior.

If the systems cannot negotiate a secure communication, then communication is allowed without any security for systems that use the Secure Responder or Secure Initiator behavior. For systems that use the Lockdown behavior, if the rule fails, then communication is denied.

Rule authentication

Use System Policy's settings.

When Intel Packet Protect was installed, each system was set up to use a pre-shared key. When two systems attempt to communicate securely using a pre-shared key, each system must have the same key entered. If these keys do not match, the systems cannot be authenticated and it will fail.

If you use the Default Rule and the Secure Responder behavior, the Default Rule will govern all your communication and your system will never exhibit the Secure Responder behavior. Click for information about Secure Responder behavior.


Copyright © 2000, Intel Corporation. All rights reserved.

Intel Corporation assumes no responsibility for errors or omissions in this document. Nor does Intel make any commitment to update the information contained herein.

* Other product and corporate names may be trademarks of other companies and are used only for explanation and to the owners' benefit, without intent to infringe.