A Gateway Enforcer appliance is generally used inline as a secure policy-enforcing bridge to protect a corporate network from external intruders. Before you install a Gateway Enforcer appliance, you need to think about locating it appropriately on the network. Gateway Enforcer appliances can be placed throughout the enterprise to ensure that all endpoints comply with the security policy.

Another use of the Gateway Enforcer appliance is hosting on-demand clients for guest-users. These clients are provided with temporary access to the Enforcer, have their security credentials verified, and are then permitted onto the network.

See About the Symantec Network Access Control On-Demand Clients.

The Gateway Enforcer in this case is not passing packets through, but rather serving as a host. This capability is not often used, and is thus done from the command line of the Enforcer.

configure > advanced > guest-enf enable

See About the Enforcer appliance CLI command hierarchy.

Several types of planning information can help you implement Gateway Enforcer appliances in a network.