Manuel d'utilisation / d'entretien du produit UTM50-100NAS du fabricant NETGEAR
Aller à la page of 484
202-10482-02 January 2010 v1.0 NETGEAR , Inc. 350 East Plumeria Drive San Jose, CA 95134 ProSecure Unified Threat Management (UTM) Appliance Reference Manual.
ii v1.0, January 2010 © 2009–2010 by NETGEAR, In c. All rights reserved. T rademarks NETGEAR and the NETGEAR l ogo are registered trademarks and ProSecure and ProSafe are trademarks of NETGEAR, Inc. Microsoft, W i ndows, and W i ndows NT are re gistered trademarks o f Mi crosoft Corporation.
v1.0, January 2010 iii Federal Of fice for T elecommuni cations Approvals has been notified of the placing of this equipment on the market and has been granted the righ t to test the series for compliance with the regul ations.
v1.0, January 2 010 iv Open SSL Copyright (c) 1998–2000 The OpenSSL Project. All rights reserved. Redistribution and use in source and binary forms, with or withou t modification, are permitted provided that the following conditions are met: 1.
v1.0, January 2010 v Product and Publication Det ails PPP Copyright (c) 1989 Carnegie Mellon University . All rights reserved. Redistribution and use in source and binary forms are permitted provide d.
v1.0, January 2 010 vi.
vii v1.0, January 2010 Content s ProSecure Unified Threat Management (UTM) Appliance Reference Manual About This Manual Conventions, Formats, and Scope ........................ .................... ................ ................... .. xvii How to Print This Manual .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual viii v1.0, January 2010 Chapter 2 Using the Setup Wizard to Provision t he UTM in Y our Network Understanding the S teps for Initial Connection ........ ................. .........
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual ix v1.0, January 2010 Configuring Secondary WAN Addresses ...... ... ...... ................ ................. ............ .......... 3-17 Configuring Dynamic DNS .. .............
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual x v1.0, January 2010 Managing the Application Le vel Gateway for SIP Sessions ............... ................ ... 5-31 Creating Services, QoS Profiles, and Bandwid th Profiles ...
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual xi v1.0, January 2010 Creating Gateway-to-Gateway VPN Tunnels with the Wizard .................. ............... 7-4 Creating a Client to Gateway VPN T unnel ............. ........
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual xii v1.0, January 2010 Viewing the UTM SSL VPN Connection S tatus ........ ................... .................... ...... 8-16 Viewing the UTM SSL VPN Log ............. ..........
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual xiii v1.0, January 2010 Updating the Scan Signatures and Scan E ngine Firmware ...... ................... ........ 10-21 Configuring Date and T ime Service ... ....................
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual xiv v1.0, January 2010 T r oubleshooting the ISP Connection ............... ................ ................... ................ .......... 12-5 T roubles hooting a TCP/IP Network Using a Pi ng Utility .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual xv v1.0, January 2010 Firewall Restart ........ ................. ................ ............. ................ ................ ............. .... C-4 IPsec Restart ......... ..
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual xvi v1.0, January 2010.
xvii v1.0, January 2010 About This Manual The NETGEAR ® Pr oSecur e™ Unified Thr eat Management (UTM) Appliance Refer ence Manual describes how to install, configure, and troubl eshoot a ProSecure Unif ied Threat Management (UTM) Appliance. The information in this manual is intended for readers with intermediate computer and networking skills.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual xviii v1.0, January 2010 • Scope . This manual is written for the UTM according to these specifications: For more information abou t network, Internet, firewall, and VP N technologies, c lick the links to the NETGEAR W ebsite in Appendix E, “Relate d Documents .
1-1 v1.0, January 2010 Chapter 1 Introduction This chapter provides an overvi ew of the features and capabilities of the ProSecure Unified Threat Management (UTM) Appliance . This ch apter contains the following sec tions: • “What Is the ProSecure Unified Th reat Management (UTM) Appliance? ” on this page .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 1-2 Introduction v1.0, January 2010 Key Features and Cap abilities The UTM provides the following key features and capabilities: • For the single-W AN port models, a single 10/100/1 000 Mbps Gigabit Ethernet W AN port.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Introduction 1-3 v1.0, January 2010 Dual-W AN Port Models for Increased Reliability or Outbound Load Balancing The UTM pr oduct line of fers mo dels with two b roadband W AN ports.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 1-4 Introduction v1.0, January 2010 A Powerful, T rue Firewall Unlike simple Internet sharing NA T routers, the UTM is a true firewall, using stateful packet inspection (SPI) to defend against hacker atta cks.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Introduction 1-5 v1.0, January 2010 • Objectionable traffic protection . The UTM preven ts objectionable content from reaching your computers. Y ou can control access to the In ternet content by screening for W eb services, W eb addresses, and keywords within W eb addresse s.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 1-6 Introduction v1.0, January 2010 Extensive Protocol Support The UTM supports the T ransmission Control Protocol/Internet Protocol (TCP/IP) and Routin g Information Protocol (RIP).
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Introduction 1-7 v1.0, January 2010 • SSL VPN W izard . The UTM includes the NETGEAR SSL VPN W izard to easily configure SSL co.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 1-8 Introduction v1.0, January 2010 Service Registration Card with License Keys Be sure to store the license key card that came wi th your UTM in a se cu re location. Y ou do need these keys to activate your product during the initial setup.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Introduction 1-9 v1.0, January 2010 Package Content s The UTM product package co ntains the following items: • ProSecure Unified Threat Managemen t (UTM) Appliance. • One AC power cable.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 1-10 Introduction v1.0, January 2010 Hardware Features The front panel ports and LEDs, rear pa nel ports, and bottom label of the UTM are des cribe d below .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Introduction 1-11 v1.0, January 2010 The function of each LED is described in Ta b l e 1 - 2 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 1-12 Introduction v1.0, January 2010 Rear Panel The rear panel of the UTM includes a cable lock receptacle, a console port, a reset button, and an AC power connection. V iewed from left to right, the rear pa nel contains the fo llowing components: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Introduction 1-13 v1.0, January 2010 Figure 1-4 shows the product label for the UTM5.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 1-14 Introduction v1.0, January 2010 Figure 1-6 shows the product label for the UTM25. Choosing a Location for the UTM The UTM is suitable for use in an of fice enviro nment where it can be free- standing (on its runner feet) or mounted into a standard 19-inch eq u ipment rack.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Introduction 1-15 v1.0, January 2010 • T emperature operating limits are not likely to be exceeded.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 1-16 Introduction v1.0, January 2010.
2-1 v1.0, January 2010 Chapter 2 Using the Setup Wizard to Provision the UTM in Y our Network Underst anding the Step s for Initial Connection T ypically , the UTM is installed as a network ga teway t.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-2 Using the Setup Wizard to Provision the UTM in You r Network v1.0, January 2010 Qualified W e b Browsers T o configure the UT.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2-3 v1.0, January 2010 3. In the User field, type admin . Use lower case letters. 4. In the Password field, type password .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-4 Using the Setup Wizard to Provision the UTM in You r Network v1.0, January 2010 5. Click Login. The W eb Management Interface appears, displaying the System Status screen. ( Figure 2-2 on page 2-4 shows the top part of a dual-W AN port model screen .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2-5 v1.0, January 2010 Underst anding the Web Ma nagement Interfa ce Menu Layout Figure 2-3 shows the menu at the top of a dual-W AN port mo del’ s W eb Manage ment Interface (in this example, the UTM25).
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-6 Using the Setup Wizard to Provision the UTM in You r Network v1.0, January 2010 The bottom of each screen provid es action buttons. The nature of the screen determines which action buttons are shown.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2-7 v1.0, January 2010 • Down . Move down the select ed entry in the table. • Apply . Apply the selected entry . Almost all screens and sections of screens have an accompanyning help scre en.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-8 Using the Setup Wizard to Provision the UTM in You r Network v1.0, January 2010 Setup Wizard S tep 1 of 10: LAN Settings Enter the settings as explained in T able 2 -1 o n page 2-9 , then click Next to go the following screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2-9 v1.0, January 2010 T able 2-1.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-10 Using the Setup Wizard to Pr ovision the UTM in Your Network v1.0, January 2010 Enable DHCP Server (continued) Primary DNS Server This is optional. If an IP addre ss is specified, the UTM provi des this address as th e primary DNS server IP address.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2 -11 v1.0, January 2010 Setup Wizard S tep 2 of 10: W AN Settings Enter the settings as explained in T able 2 -2 o n page 2-1 2 , then click Next to go t he following screen.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-12 Using the Setup Wizard to Pr ovision the UTM in Your Network v1.0, January 2010 Note: Click the Auto Detect action button at the bottom of the menu.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2 -13 v1.0, January 2010 Austria (PPTP) (continued) Idle T imeout Select the Keep Connected radio bu tton to keep the connection always on.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-14 Using the Setup Wizard to Pr ovision the UTM in Your Network v1.0, January 2010 Setup Wizard S tep 3 of 10: System Date and Time Enter the settings as explained in T able 2 -3 o n page 2-1 5 , then click Next to go t he following screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2 -15 v1.0, January 2010 T able 2-3.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-16 Using the Setup Wizard to Pr ovision the UTM in Your Network v1.0, January 2010 Setup Wizard S tep 4 of 10: Services Enter the settings as explained in T able 2 -4 o n page 2-1 7 , then click Next to go t he following screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2 -17 v1.0, January 2010 Ta b l e 2 - 4 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-18 Using the Setup Wizard to Pr ovision the UTM in Your Network v1.0, January 2010 Setup Wizard S tep 5 of 10: Email Security Enter the settings as explained in Ta b l e 2 - 5 , then click Next to go the following screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2 -19 v1.0, January 2010 Setup Wizard S tep 6 of 10: Web Security Enter the settings as explained in T able 2 -6 o n page 2-2 0 , then click Next to go t he following screen.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-20 Using the Setup Wizard to Pr ovision the UTM in Your Network v1.0, January 2010 Note: After you have completed the steps in th e Setup W izard, you can make changes to the W eb security settings by selecting Application Security > HTTP/HTTPS > Malware Scan .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2 -21 v1.0, January 2010 Setup Wizard S tep 7 of 10: Web Categories.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-22 Using the Setup Wizard to Pr ovision the UTM in Your Network v1.0, January 2010 Enter the settings as explained in Ta b l e 2 - 7 , then click Next to go the following screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2 -23 v1.0, January 2010 Setup Wizard S tep 8 of 10: Email Notification Enter the settings as explained in Ta b l e 2 - 8 , then click Next to go the following screen.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-24 Using the Setup Wizard to Pr ovision the UTM in Your Network v1.0, January 2010 Setup Wizard S tep 9 of 10: Signatures & Engine Enter the settings as explained in T able 2 -9 o n page 2-2 5 , then click Next to go t he following screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2 -25 v1.0, January 2010 Setup Wizard S tep 10 of 10 : Saving the Configuration Click Apply to save your settings and auto matically restart the system.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-26 Using the Setup Wizard to Pr ovision the UTM in Your Network v1.0, January 2010 V erifying Proper Inst allation T est the UTM before deploying it in a live pro duction environment.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Using the Setup Wizard to Prov is ion the UTM in Your Network 2 -27 v1.0, January 2010 If your UTM is connected to the Intern et, you can activate the service licenses: 1. Select Support > Registration .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 2-28 Using the Setup Wizard to Pr ovision the UTM in Your Network v1.0, January 2010 5. Repeat step 2 and step 4 for additional license keys. The UTM activates the licenses and registers th e unit with the NETGEAR registration server .
3-1 v1.0, January 2010 Chapter 3 Manually Configuring Internet and W AN Settings This chapter contains the following sections: • “Understanding the Internet and W AN Configuration T asks ” on this page. • “Configuring the Internet Connection s” on page 3-2 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-2 Manually Configuring Interne t and WAN Settings v1.0, January 2010 4. Configure dynamic DNS on the W AN ports (optional) . Co nfigure your fully qualified domain names during this phase (if required).
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Manually Configuring In ternet and WAN Settings 3-3 v1.0, January 2010 2. Click the Auto Detect action button at the b ottom of the menu. The auto-det ect process probes the W AN port for a range of conn ection methods and suggests one that your ISP is most likely to support.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-4 Manually Configuring Interne t and WAN Settings v1.0, January 2010 The auto-detect process will retu rn one of the following .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Manually Configuring In ternet and WAN Settings 3-5 v1.0, January 2010 The W AN Status window should show a valid IP address and gateway .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-6 Manually Configuring Interne t and WAN Settings v1.0, January 2010 T o manually configure the W AN1 ISP (dual-W AN port models) or W AN ISP (single-W AN port models) settings: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Manually Configuring In ternet and WAN Settings 3-7 v1.0, January 2010 5. If your connection is PPTP or PPPoE, your ISP requires an initial login. Enter the sett ings as explained in Ta b l e 3 - 2 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-8 Manually Configuring Interne t and WAN Settings v1.0, January 2010 6. Configure the Internet (IP) Ad dress settings as explained in Ta b l e 3 - 3 . Click the Current IP Address link to see the currently assigned IP address.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Manually Configuring In ternet and WAN Settings 3-9 v1.0, January 2010 8. Click T est to evaluate your entries. The UTM attempts to make a connection acco rding to the settings that you entered.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-10 Manually Configuring Interne t and WAN Settings v1.0, January 2010 If you want to use a redundant I SP link for backup purposes, select the W AN port that must act as the primary link for this mode.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Manually Configuring In ternet and WAN Settings 3-11 v1.0, January 2010 Classical Routing (All Models) In classical routing mode, the UTM performs rout ing, but without NA T . T o gain Internet ac cess, each PC on your LAN must have a va lid static Internet IP address.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-12 Manually Configuring Interne t and WAN Settings v1.0, January 2010 T o configure the dual-W AN ports for auto-rollover mode: 1. Select Network Config > W AN Settings from the menu, then click the WA N M o d e tab.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Manually Configuring In ternet and WAN Settings 3-13 v1.0, January 2010 W AN Failure Detection Method Select one of the following.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-14 Manually Configuring Interne t and WAN Settings v1.0, January 2010 3. Click Apply to save your settings.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Manually Configuring In ternet and WAN Settings 3-15 v1.0, January 2010 a. Figure 3-9 shows one example in the Prot ocol Binding table. Config ure the protocol binding settings as explained in Ta b l e 3 - 6 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-16 Manually Configuring Interne t and WAN Settings v1.0, January 2010 b. Click the Add table button in the rightmo st column to add the protocol binding rule to the Protocol Binding table.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Manually Configuring In ternet and WAN Settings 3-17 v1.0, January 2010 Configuring Secondary W AN Addresses A single W AN Ethernet port can be accessed through multiple IP addresses by adding aliases to the port.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-18 Manually Configuring Interne t and WAN Settings v1.0, January 2010 T o add a secondary W AN address to a W AN port: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Manually Configuring In ternet and WAN Settings 3-19 v1.0, January 2010 Configuring Dynamic DNS Dynamic DNS (DDNS) is an Internet servic e that allows devices with varying public IP addresse s to be located using Intern et domain names.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-20 Manually Configuring Interne t and WAN Settings v1.0, January 2010 The W AN Mode section on screen re ports the curr ently configured W AN mode. (For the dual- W AN port models, for example, Single Port W AN1, Load Balancing, or Au to Rollov er .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Manually Configuring In ternet and WAN Settings 3-21 v1.0, January 2010 4. Click the Information option arro w in the upper right corner of a DNS screen for registration information.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-22 Manually Configuring Interne t and WAN Settings v1.0, January 2010 7. Click Apply to save y our configuration.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Manually Configuring In ternet and WAN Settings 3-23 v1.0, January 2010 3. Enter the default informatio n settings as explained in Ta b l e 3 - 8 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 3-24 Manually Configuring Interne t and WAN Settings v1.0, January 2010 4. Click Apply to save your changes.
4-1 v1.0, January 2010 Chapter 4 LAN Configuration This chapter describes how to configure the adva nced LAN features of your UTM. This chapter contains the following sections: • “Managing V irtual LANs and DHCP Options ” on this page. • “Configuring Multi-Home LAN IPs on the Default VLAN” on page 4-1 1 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-2 LAN Configuration v1.0, January 2010 VLANs have a number of advantages: • It is easy to set up network segmentation. Users who communicate most frequently with each other can be grouped into common VLANs, rega rdless of physical location.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-3 v1.0, January 2010 When you create a VLAN profile, assign LAN ports to the VLAN, and enable the VLAN, the LAN ports that are member of the VLAN can send and receive both tagged and untagged packets.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-4 LAN Configuration v1.0, January 2010 For each VLAN profile, the following fields are displayed in the VLAN Profiles table: • Checkbox . Allows you to select the VLAN profile in the table.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-5 v1.0, January 2010 The UTM delivers the following settings to any LAN device that requests DHCP: • An IP .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-6 LAN Configuration v1.0, January 2010 LDAP Server A Lightweight Directory Access Protocol (LDAP) server allows a user to query and modify directory services that run over TCP/IP .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-7 v1.0, January 2010 2. Either select an entry from the VLAN Pr ofiles table by clicki ng the corresponding Edit table button or add a new VLAN profile by clicking the Add table button under the VLAN Profiles table.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-8 LAN Configuration v1.0, January 2010 3. Enter the settings as explained in Ta b l e 4 - 1 . T able 4-1. VLAN Profile Settings Setting Description (or Sub field and Description) VLAN Profile Profile Name Enter a unique name for the VLAN profile.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-9 v1.0, January 2010 Enable DHCP Server (continued) S tarting I P Address Enter the starting IP address. T his address specifies the first of the contiguous addresses in the IP address po ol.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-10 LAN Configuration v1.0, January 2010 4. Click Apply to save your settings. Enable LDAP information (continued) Search Base The search objects that sp e cify the location in the directory tree from which the LDAP sear ch begin.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-11 v1.0, January 2010 Configuring Multi-Home LA N IPs on the Default VLAN If you have computers usin g dif ferent IP networks in the LAN, (for examp le, 172.16.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-12 LAN Configuration v1.0, January 2010 3. In the Add Secondary LAN IPs section of the screen, enter the following settings: • IP Address . Enter the secondary address that yo u want to assign to t he LAN ports.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-13 v1.0, January 2010 Some advantages of the Network Database are: • Generally , you do not need to enter either IP address or MAC addresses. Instead, you can just select the name of the desired PC or device.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-14 LAN Configuration v1.0, January 2010 The Known PCs and Devices table lists the entries in the Network Database. For each PC or device, the following fields are display ed : • Checkbox .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-15 v1.0, January 2010 Adding PCs or Devices to the Network Dat abase T o add PCs or devices manua lly to the Network Database: 1.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-16 LAN Configuration v1.0, January 2010 Editing PCs or Devices in the Network Dat abase T o edit PCs or de vic es manua lly in the Network Database: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-17 v1.0, January 2010 3. Click the Edit Group Names opti on arrow at the right of th e LAN submenu tabs . The Network Database Group Names screen displays. ( Figure 4-7 shows some examples.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-18 LAN Configuration v1.0, January 2010 T o reserve an IP address, select Reserved (DHCP Client) from the IP Address T ype pull.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-19 v1.0, January 2010 T o enable and conf igure the DMZ port: 1. Select Network Config > DMZ Setup from the menu. The DMZ Setup screen displays. 2. Enter the settings as explained in T able 4 -3 o n page 4-2 0 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-20 LAN Configuration v1.0, January 2010 T able 4-3. DMZ Setup Settings Setting Description (or Sub field and Description) DMZ Port Setup Do you want to enable DMZ Port? Select one of the foll owing radio bu ttons: • Ye s .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-21 v1.0, January 2010 Enable DHCP Server (continued) Primary DNS Server This is optional. If an IP address is specified, the UTM provides this address as the primary DNS server IP address.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-22 LAN Configuration v1.0, January 2010 3. Click Apply to save your settings. T o define the DMZ W AN Rules and LAN DMZ Rules, see “Setting DMZ W AN Rules” on page 5-15 and “Setting LAN DMZ Rules” on page 5-19 , respectively .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-23 v1.0, January 2010 Configuring St atic Routes T o add a static route to the S tatic Route table: 1. Select Network Config > Routing from the menu. The Routing screen displays.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-24 LAN Configuration v1.0, January 2010 3. Enter the settings as explained in Ta b l e 4 - 4 . 4. Click Apply to save your settings. The new static rout e is added to the S tatic Route table.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-25 v1.0, January 2010 T o enable and configure RIP: 1. Select Network Configuration > Routing from the menu. 2. Click the RIP Configuration option arrow at the rig ht of the Routi ng submenu tab.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-26 LAN Configuration v1.0, January 2010 T able 4-5. RIP Configuration Settings Setting Description (or Subfie ld and Description) RIP RIP Directi on From the RIP Direction pull-down menu , select the direct ion in which the UTM sends and receives RIP packet s: • None .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual LAN Configuration 4-27 v1.0, January 2010 4. Click Apply to save your settings. S t atic Route Example In this example, we assume the following: • The UTM’ s primary Internet access is through a cable modem to a n ISP .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 4-28 LAN Configuration v1.0, January 2010.
5-1 v1.0, January 2010 Chapter 5 Firewall Protection This chapter describes how to use the firewall featur es of the UTM to protect your network. This chapter contains the following sections: • “About Firewall Protection ” on this page. • “Using Rules to Block or Allow Sp ecific Kinds of Traf fic ” on page 5-3 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-2 Firewall Pr otection v1.0, January 2010 Administrator T ip s Consider the following operational items: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-3 v1.0, January 2010 Using Rules to Block or Allo w S pecific Kinds of T raffic Firewall rules are used to block or allow specific traf fic passing thro ugh from one sid e to the other .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-4 Firewall Pr otection v1.0, January 2010 • Quality of Service (QoS) priorities . Each service has its own nativ e priority that impacts its quality of performance and tole rance for jitter or delays.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-5 v1.0, January 2010 T able 5-2. Outbound Rules Overview Setting Description (or Subfie ld and Description) Service The service or application to be covered by this rule.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-6 Firewall Pr otection v1.0, January 2010 Inbound Rules (Port Forwarding) If you have enabled Network Address T ranslation (NA T), your network presents only one IP address to the Internet and outside users cannot directly address any of your local computers.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-7 v1.0, January 2010 Whether or not DHCP is enable d, how the PCs accesse s the server ’ s LAN address impacts the inbound rules.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-8 Firewall Pr otection v1.0, January 2010 . T able 5-3. Inbound Rules Overview Setting Description (or Subfie ld and Description) Service The service or application to be covered by this rule.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-9 v1.0, January 2010 LAN Users The setti ngs that d etermine wh ich comput ers on your network ar e af fected by this rule. The options are: • Any . All PCs and devices on your LAN.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-10 Firewall Pr otection v1.0, January 2010 Log The settings that determines whether packe ts covered by this rule are logged. The options are: • Always. Always log traffic considered by this rule, whether it matches or not.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-11 v1.0, January 2010 Order of Precedence for Rules As you define new rules, they are added to the tabl es in the Rules screen as the last item in the list, as shown in the LAN W AN Rules screen example in Figure 5-1 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-12 Firewall Pr otection v1.0, January 2010 Setting LAN W AN Rules The default outbound policy is to allow all traffic to the Internet to pass th rough.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-13 v1.0, January 2010 T o make changes to an existing outbound or inbo und service rule, in the Action column to the right of to the rule, click on of the following table buttons: • Edit .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-14 Firewall Pr otection v1.0, January 2010 T o create a new outbound LAN W AN service rule: 1. In the LAN W AN Rules screen, click the Add table button u nder the Outbound Services table.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-15 v1.0, January 2010 T o create a new inbound LAN W AN service rule: 1. In the LAN W AN Rules screen, click the Add table button under the Inb ound Services tab le.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-16 Firewall Pr otection v1.0, January 2010 T o access the DMZ W AN Rules scree n: 1. Select Network Security > Firewall from the menu. The Firewall submenu tabs appear . 2. Click the DMZ W AN Rules submenu tab.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-17 v1.0, January 2010 2. Click one of the fo llowi ng table buttons: • Disable . Disables the rule or rules. The “!” stat us icon changes from a gree n circle to a grey circle, indicating that the rule is or ru les are disabled.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-18 Firewall Pr otection v1.0, January 2010 DMZ W AN Inbound Services Rules The Inbound Ser vic es tab le lis ts al l existing rules for inbound traf fi c. If you ha ve not defined any rules, no rules are listed.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-19 v1.0, January 2010 Setting LAN DMZ Rules The LAN DMZ Rules screen allows you to create rules that define the movement of traffic between the LAN and the DMZ.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-20 Firewall Pr otection v1.0, January 2010 • Up . Moves the rule up one position in the table rank. • Down . Moves the rule down one position in the table rank. T o delete or disable one or more rules: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-21 v1.0, January 2010 2. Enter the settings as explained in T able 5 -2 o n page 5-5 . 3. Click Apply . The new rule is now adde d to the Outbound Services table.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-22 Firewall Pr otection v1.0, January 2010 Inbound Rules Examples LAN W AN Inbound Rule: Hosting A Local Public W eb Server If .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-23 v1.0, January 2010 LAN W AN or DMZ W A N Inbound Rule: Setting Up One-to-One NA T Mapping In this example, we will configure multi-NA T to support multiple public IP addresses on one W AN interface.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-24 Firewall Pr otection v1.0, January 2010 T o configure the UTM for additional IP addresses: 1. Select Network Security > Firewall from the menu. The Firewall submenu tabs appear .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-25 v1.0, January 2010 6. In the Send to LAN Server field, enter the loca l IP address of your W eb serve r PC (192.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-26 Firewall Pr otection v1.0, January 2010 Outbound Rules Example Outbound rules let you prevent users from using applications such as Instant Messenger , Real Audio, or other non-essential sites.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-27 v1.0, January 2010 Configuring Other Firewall Features Y ou can configure attack checks, set session lim its, and manage the App lication Level Gateway (ALG) for SIP sessions.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-28 Firewall Pr otection v1.0, January 2010 2. Click the Attack Checks submenu tab. The Attack Checks screen displays. 3. Enter the settings as explained in Ta b l e 5 - 4 . Figure 5-16 T able 5-4.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-29 v1.0, January 2010 4. Click Apply to save your settings. LAN Security Checks. Block UDP flood Select the Block UDP flood checkbox to prevent the UTM from accepting more than 20 simultaneous, active UDP connections from a single d evice on the LAN.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-30 Firewall Pr otection v1.0, January 2010 Setting Session Limit s Session limits allows you to specify the total number of sessions that are allowed, per user , over an IP connection across the UTM.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-31 v1.0, January 2010 5. Click Apply to save your settings.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-32 Firewall Pr otection v1.0, January 2010 3. Select the Enable SIP checkbox. 4.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-33 v1.0, January 2010 For example, W eb servers serve W eb pages, time servers serve time and date information, and game hosts serve da ta about other play ers’ move s.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-34 Firewall Pr otection v1.0, January 2010 2. In the Add Customer Service section of the screen, enter the settings as explained in Ta b l e 5 - 6 . 3. Click Apply to save your settings.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-35 v1.0, January 2010 2. Modify the settings that you wish to change (see T able 5-6 on page 5-34 ). 3. Click Apply to save your changes. The modified servic e is displayed in th e Custom Services table.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-36 Firewall Pr otection v1.0, January 2010 T o create a QoS profile: 1. Select Network Security > Firewall Objects from the menu. The Firewall Objects submenu tabs appear , with the Services screen in view .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-37 v1.0, January 2010 5. Click Apply to save your settings.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-38 Firewall Pr otection v1.0, January 2010 3. Click Apply to save your changes. The modified QoS pr ofile is displayed in the List of QoS Profiles table. Creating Bandwid th Profiles Bandwidth profiles d etermine the way in which da ta is communicated with the hosts.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-39 v1.0, January 2010 The screen displays the List of Bandwidth Profiles table with the user -defined profiles. 3. Under the List of Bandwidth Profiles table, click the Add table button.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-40 Firewall Pr otection v1.0, January 2010 5. Click Apply to save your settings.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-41 v1.0, January 2010 Setting a Schedule to Block or Allow S pecific T raffic Schedules define the timeframe s under which fi rewall rule s may be applied.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-42 Firewall Pr otection v1.0, January 2010 • Specific Times . The schedule is active only on specific hours of the selecte d day or days.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-43 v1.0, January 2010 2. In the MAC Filtering Enab le section, select the Ye s radio button. 3. In the same section, select one of the followi ng options from the pull-down menu (next to Policy for MAC Addresses listed below): • Block .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-44 Firewall Pr otection v1.0, January 2010 Setting up IP/MAC Bindings IP/MAC Binding allows you to bind an IP addr ess to a MAC address and vice-versa. Some PCs or devices are configured with static addresses.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-45 v1.0, January 2010 3. Enter the settings as explained in Ta b l e 5 - 9 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-46 Firewall Pr otection v1.0, January 2010 4. Click the Add table button. The new IP/MAC rule is added to the IP/MAC Bindings table. 5. Click Apply to save your changes. T o edit an IP/MAC binding: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-47 v1.0, January 2010 Note these restrictions on port triggering: • Only one PC can use a port trig gering application at any time.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-48 Firewall Pr otection v1.0, January 2010 3. Click the Add table but ton . Th e new p ort trigg e ring rul e is added to the Port T riggering Rules table. T o edit a port triggering rule: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-49 v1.0, January 2010 Using the Intrusion Prevention System The Intrusion Prevention System (IPS) of the UTM monitors all network traf fic to detect, in real- time, network attacks and port scans and to protect your network from such intrusions.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-50 Firewall Pr otection v1.0, January 2010 When you en able the IPS, th e default IPS configuration goes into ef fect. The default IPS configuration is the configuratio n that the Advanced (IPS) scree n returns to when you click the Reset button.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Firewall Protection 5-51 v1.0, January 2010 . Figure 5-31.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 5-52 Firewall Pr otection v1.0, January 2010 T able 5-1 1. IPS: Less Familiar Att ack Names Attack Name Description (or Subfield and Description) Web web-misc Detects some specific Web att a ck tools, such as the fingerprinting tool and the password-cracking tool.
6-1 v1.0, January 2010 Chapter 6 Content Filtering and Optimizing Scans This chapter describes how to apply the content filtering features of the UTM and how to optimize scans to protect you r network. This chapter contains the following sections: • “About Content Filtering and Scans” on this page.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-2 Content Filtering and Optim izing Scans v1.0, January 2010 Default E-mail and W eb Scan Settings For most network environm en.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-3 v1.0, January 2010 Configuring E-mail Protection The UTM lets you configure the following settin gs to protect the network’ s e-mail communication: • The e-mail protocols that are scanned for malware threats.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-4 Content Filtering and Optim izing Scans v1.0, January 2010 Customizing E-mail Prot ocol Scan Settings T o configure the e-mail protocols and ports to scan: 1. Select Application Security > Services from the menu.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-5 v1.0, January 2010 Customizing E-mail Anti-V irus and Notification Settings Whether o.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-6 Content Filtering and Optim izing Scans v1.0, January 2010 2. Enter the settings as explained in Ta b l e 6 - 2 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-7 v1.0, January 2010 Append Safe S tamp (SMTP and POP3) For SMTP and POP3 e-mail messages, se lect this checkbox to insert a default safe stamp message at the end of an e-mail.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-8 Content Filtering and Optim izing Scans v1.0, January 2010 3. Click Apply to save your settings. E-mail Content Filtering The UTM provides several options to filter unwant ed co ntent from e-mails.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-9 v1.0, January 2010 T o configure e-mail content filtering: 1. Select Application Security > Email Filters from the menu. The Email Filters screen displays.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-10 Content Filtering and Optimizin g Scans v1.0, January 2010 2. Enter the settings as explained in Ta b l e 6 - 3 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-11 v1.0, January 2010 3. Click Apply to save your settings. Protecting Against E-mail S p am The UTM integrates multiple anti-sp am technologies to provide comprehensive p rotection against unwanted e-mail.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-12 Content Filtering and Optimizin g Scans v1.0, January 2010 3. Real-time blacklist . E-mails from known spam sources that are collected by blacklist providers are blocked. 4. Distributed Spam Analysis .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-13 v1.0, January 2010 T o configure the whitelist and blacklist: 1. Select Application Security > Anti-Spam from the menu. The Anti-Spam submenu tabs appear , with the Whitelist/Bla cklist screen in view .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-14 Content Filtering and Optimizin g Scans v1.0, January 2010 2. Enter the settings as explained in Ta b l e 6 - 3 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-15 v1.0, January 2010 blacklist providers and are made av ailable to the public in the form of real-time blacklists (RBLs). By accessing these RBLs, the UTM can block spam originating from known spam sources.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-16 Content Filtering and Optimizin g Scans v1.0, January 2010 2. Click the Add table button in the Add column. The new bl acklist provider is added to the real- time blacklist, and it is disabl ed by default.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-17 v1.0, January 2010 3. Enter the settings as explained in Ta b l e 6 - 5 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-18 Content Filtering and Optimizin g Scans v1.0, January 2010 4. Click Apply to save your settings.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-19 v1.0, January 2010 Configuring W eb and Services Protection The UTM lets you config .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-20 Content Filtering and Optimizin g Scans v1.0, January 2010 2. Enter the settings as explained in Ta b l e 6 - 5 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-21 v1.0, January 2010 3. Click Apply to save your settings Configuring Web Malware Scan.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-22 Content Filtering and Optimizin g Scans v1.0, January 2010 2. Enter the settings as explained in Ta b l e 6 - 2 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-23 v1.0, January 2010 3. Click Apply to save your settings.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-24 Content Filtering and Optimizin g Scans v1.0, January 2010 Several types of W eb content blocking are available: • File extension blocking . Y o u can block files bas ed on their extension.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-25 v1.0, January 2010 T o configure W eb content filtering: 1. Select Application Security > HTTP/HTTPS from the menu. Th e HT TP/HTTPS submenu tabs appear , with the Malware Sca n screen in view .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-26 Content Filtering and Optimizin g Scans v1.0, January 2010 . Figure 6-10 [Content Filtering, screen 2 of 3].
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-27 v1.0, January 2010 . 3. Enter the settings as explained in T able 6 -8 o n page 6-2 8 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-28 Content Filtering and Optimizin g Scans v1.0, January 2010 T able 6-8. Content Filtering Settings Setting Description (or Subfield an d Des c ripti on ) Content Filtering Log HTTP T raffic Select this checkbox to log HTTP traffic.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-29 v1.0, January 2010 Select the Web Categories Y ou Wish to Block Select the Enable Blocking checkbox to en able blocking of Web categories.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-30 Content Filtering and Optimizin g Scans v1.0, January 2010 4. Click Apply to save your settings. Configuring Web URL Filtering If you want to allow or block internal LAN user s from access to certain sites on the Internet, use the UTM’ s W eb URL filtering.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-31 v1.0, January 2010 T o configure W eb URL filtering: 1. Select Application Security > HTTP/HTTPS from the menu. Th e HT TP/HTTPS submenu tabs appear , with the Malware Sca n screen in view .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-32 Content Filtering and Optimizin g Scans v1.0, January 2010 3. Enter the settings as explained in Ta b l e 6 - 9 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-33 v1.0, January 2010 4. Click Apply to save your settings. URL This field contains the URLs that are blocked. T o add a URL to this field, use the Add URL field or the Import from File tool (see below).
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-34 Content Filtering and Optimizin g Scans v1.0, January 2010 HTTPS Scan Settings HTTPS traffic is encrypted traf fic that cannot be scanned otherwise the data stream would not be secure.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-35 v1.0, January 2010 If one of these is not satisfied, a security aler t message appears in the browser window (see Figure 6-14 ).
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-36 Content Filtering and Optimizin g Scans v1.0, January 2010 T o configure the HTTPS scan settings: 1. Select Application Security > HTTP/HTTPS from the menu. Th e HT TP/HTTPS submenu tabs appear , with the Malware Sca n screen in view .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-37 v1.0, January 2010 4. Click Apply to save your settings. S pecifying T rusted Host s Y ou can specify trusted hosts for which the UT M bypasses HTTPS traffic scanning and security certificate authentication.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-38 Content Filtering and Optimizin g Scans v1.0, January 2010 Note that c ertain sites contain el ements from d if f erent HTTPS hosts. As an example, assume that the https://example.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-39 v1.0, January 2010 3. Enter the settings as explained in Ta b l e 6 - 1 1 . 4. Click Apply to save your settings. Configuring FTP Scans Some malware threats are specific ally developed to spread through the FTP protocol.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-40 Content Filtering and Optimizin g Scans v1.0, January 2010 T o configure the FTP scan settings: 1. Select Application Security > FTP from the menu. The FTP screen displays.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-41 v1.0, January 2010 3. Click Apply to save your settings. Setting W eb Access Exception s and Scanning Exclusions After you have specified which content the UTM f ilters, you can set exception rules for users of certain LAN groups.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-42 Content Filtering and Optimizin g Scans v1.0, January 2010 T o set W eb access exception rules: 1. Select Application Security > Block/Accept Exceptions from the menu. The Block/Accept Exceptions screen displays.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-43 v1.0, January 2010 3. Enter the settings as explained in Ta b l e 6 - 1 3 . 4. Click Apply to save your settings. The new exception ru le is added to th e Exceptions table.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-44 Content Filtering and Optimizin g Scans v1.0, January 2010 2. Modify the settings that you wish to change (see T able 6 -1 3 on page 6-43 ). 3. Click Apply to save your changes.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Content Filtering and Optimi zing Scans 6-45 v1.0, January 2010 2. In the Add Scanning Exclusions section of the scr een, specify an exclusion rule as explained in Ta b l e 6 - 1 4 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 6-46 Content Filtering and Optimizin g Scans v1.0, January 2010.
7-1 v1.0, January 2010 Chapter 7 V irtual Private Networking Using IPsec Connections This chapter describes how to use the IP security (IPsec) virtual private networking (VPN) features of the UTM to provide secure, encrypted comm unications between your local network and a remote network or computer .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-2 Virtual Private Networking Using IPsec Connections v1.0, January 2010 See “V irtual Private Networks (VPNs)” on page B-9 for more information about the IP addressi ng requirements for VPNs in th e dual W AN mode s.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7- 3 v1.0, January 2010 Using the IPsec VPN Wizard for Client and Gateway Configurations Y ou can use the IPsec VPN W izard to configure mu ltiple gateway or client VPN tunnel policies.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-4 Virtual Private Networking Using IPsec Connections v1.0, January 2010 Creating Gateway-to-Gateway VPN T unnels w ith the Wizard T o set up a gateway-to-gateway VP N tunnel using the VPN W izard.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7- 5 v1.0, January 2010 T o view the wizard default settings, click the VPN Wizard Default V alues option arrow at the top right of the screen.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-6 Virtual Private Networking Using IPsec Connections v1.0, January 2010 3. Select the radio buttons and comple te the field s and as e xplained Ta b l e 7 - 2 . Figure 7-5 T able 7-2.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7- 7 v1.0, January 2010 . . This VPN tunnel will use following local W AN Inte.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-8 Virtual Private Networking Using IPsec Connections v1.0, January 2010 4. Click Apply to save your settings. The IPsec VPN polic y is now added to the List of VPN Policies table on the VPN Policies screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7- 9 v1.0, January 2010 Creating a Client to Gateway VPN T unnel Follow the st.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-10 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 T o display the wizard de fault settings, click the VPN W izard Default V alues option arrow at the top right of the screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-11 v1.0, January 2010 3. Select the radio buttons and comple te the field s and as e xplained Ta b l e 7 - 3 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-12 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 4. Click Apply to save your settings. The IPsec VPN polic y is now added to the List of VPN Policies table on the VPN Policies screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-13 v1.0, January 2010 2. In the upper left of the Policy Editor window , click the New Connection icon (the first icon on the left) to open a new connection.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-14 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 3. Enter the settings as explained in Ta b l e 7 - 4 . 4. Click on the disk icon to save the configuration, or select File > Save from the Security Policy Editor menu.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-15 v1.0, January 2010 5. In the left frame, click My Identity . The screen adjusts. 6. Enter the settings as explained in Ta b l e 7 - 5 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-16 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 7. Click on the disk icon to save the configuration, or select File > Save from the Security Policy Editor menu.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-17 v1.0, January 2010 9. Enter the settings as explained in Ta b l e 7 - 6 . 10. Click on the disk icon to save the configuration, or select File > Save from the Security Policy Editor menu 11 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-18 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 In the example that is shown in Figure 7-15 , you should receive the message “Successfully connected to My ConnectionsU TM_SJ” within 30 seconds.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-19 v1.0, January 2010 • Right-click the VPN Client icon in the system tray and select Connection Monitor .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-20 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 The VPN client system tray icon provides a vari ety of status indications, which are listed b elow . V iewing the UTM IPsec VPN Connection S t atus T o review the status of current IPsec VPN tunnels: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-21 v1.0, January 2010 The Active IPsec SAs table lists each active conn ection with the informa tion that is described in Ta b l e 7 - 8 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-22 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 Managing IPsec VPN Policies After you have used the VPN W izard to set up a VPN tunnel, a VPN policy and an IKE policy are stored in separate policy tables.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-23 v1.0, January 2010 Managing IKE Policies The Internet Key Exchange (IKE) protocol perfo rms negotiations between the two VPN gateways, and provides au tomatic managemen t of the keys that are used for IP sec connectio ns.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-24 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 . Each policy contains the data that are explained in Ta b l e 7 - 9 These fields are explained in more detail in T abl e 7-10 on page 7-27 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-25 v1.0, January 2010 T o add or edit an IKE policy , see “Manually Adding or Editing an IKE Policy on this page. Manually Adding or Editing an IKE Policy T o manually add an IKE policy: 1.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-26 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 . Figure 7-21.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-27 v1.0, January 2010 3. Complete the fields, select the radio buttons , and make your selections from the pu ll-down menus as explained Ta b l e 7 - 1 0 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-28 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 Local Select Local Gateway (dual-W A N port models only) For the dual-W AN port models only , select a radio button to specify the WAN1 or W AN2 interface.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-29 v1.0, January 2010 Authentication Algorithm From the pull-down menu, select one of the follo wing two algorith ms to use in the VPN header for the authentication process: • SHA-1 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-30 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 4. Click Apply to save your settings. The IKE policy is added to t he List of IKE Policies table. T o edit an IKE policy: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-31 v1.0, January 2010 4. Click Apply to save your changes. The modified IKE policy is displayed in the List of IKE Policies table.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-32 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 2. Click the VPN Policies submenu tab. The VPN Policies screen displays. ( Figure 7-22 shows some examples.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-33 v1.0, January 2010 T o delete one or more VPN polices: 1. Select the checkbox to the left of the polic y that you want to delete or click the Select All table button to select all VPN pol icies.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-34 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 Figure 7-23.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-35 v1.0, January 2010 4. Complete the fields, select the radio buttons an d checkbox es, and make your se le ctions from the pull-down men us as explained Ta b l e 7 - 1 2 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-36 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 T raffic Selection Local IP From the pull-down menu, select th e address or addre sses that are part of the VPN tunnel on the UTM: • Any .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-37 v1.0, January 2010 Integrity Algorithm From the pull-down menu, se le ct one of the following two algori thms to be used in the VPN header for the authentication process: • SHA-1 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-38 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 5. Click Apply to save your settings. The VPN policy is added to the List of VPN Policies table. T o edit a VPN policy: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-39 v1.0, January 2010 Y ou can enable XAUTH when you manually add or edit an IKE policy . T wo types of XAUTH are available: • Edge Device .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-40 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 4. Complete the fields, select the radio buttons , and make your selections from the pu ll-down menus as explained Ta b l e 7 - 1 3 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-41 v1.0, January 2010 server in the network when a user requests access to network resources. During the establishment of a VPN connection, the VPN gateway can interru pt the process with an XAUTH request.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-42 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 3. Complete the fields and select the radio buttons as explained Ta b l e 7 - 1 4 . 4. Click Apply to save your settings.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-43 v1.0, January 2010 Assigning IP Addresses to Re mote Users (Mode Config) .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-44 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 2. Click the Mode Config submenu tab.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-45 v1.0, January 2010 . 4. Complete the fields, selec t the checkbox, and ma ke your selections from the pull-down menus as explained Ta b l e 7 - 1 5 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-46 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 WINS Server If there is a WINS server on the local network, enter its IP address in the Primary field. Y ou can enter the IP ad dress of a second WINS server in the Secondary field.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-47 v1.0, January 2010 5. Click Apply to save your settings. The new Mode Config record is added to the List of Mode Config Records table.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-48 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 8. On the Add IKE Policy screen, complete the fi elds, select the radio buttons, and m ak e your selections from the pull-down menus as explained Ta b l e 7 - 1 6 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-49 v1.0, January 2010 Remote Identifier T ype From the pull-down menu, select FQ DN . Note : Mode Config requires that the remote end is defined by a FQDN.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-50 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 9. Click Apply to save your settings.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-51 v1.0, January 2010 2. In the upper left of the Policy Editor window , click the New Connection icon (the first icon on the left) to open a new connection.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-52 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 4. Click on the disk icon to save the configuration, or select File > Save from the Security Policy Editor menu.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-53 v1.0, January 2010 5. In the left frame, click My Identity . The screen adjusts. 6. Enter the settings as explained in Ta b l e 7 - 1 8 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-54 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 7. Click on the disk icon to save the configuration, or select File > Save from the Security Policy Editor menu.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-55 v1.0, January 2010 9. Enter the settings as explained in Ta b l e 7 - 1 9 . 10. Click on the disk icon to save the configuration, or select File > Save from the Security Policy Editor menu.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-56 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 Configuring Keep alives The Keepalive feature maintains the IPSec SA by sending periodic ping requests to a host across the tunnel and monito ring the re plies.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-57 v1.0, January 2010 4. Enter the settings as explained in Ta b l e 7 - 2 0 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-58 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010 3. In the IKE SA Parameters section of the screen, locate the DPD fields. 4. Select the radio button and complete the fields as explained Ta b l e 7 - 2 1 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using IPsec Connections 7-59 v1.0, January 2010 Configuring NetBIOS Br idging with IPsec VPN W indows networks use the Network Basic Inpu t/Output System (NetBIOS) for several basic network services such as naming and neig hborhood device discovery .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 7-60 Virtual Private Networking Us ing IPsec Con nections v1.0, January 2010.
8-1 v1.0, January 2010 Chapter 8 V irtual Private Networking Using SSL Connections The UTM provides a hardware-based SSL VPN solutio n designed specifically to provide remote access for mobile users to their corporate resources, bypassing the need for a pre-installed VPN client on their computers.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-2 Virtual Private Networking Using SSL Connections v1.0, January 2010 • SSL Port Forwarding . Like an SSL VPN tunnel , port forwar ding is a W eb-based client that installs transparently and then creates a virtua l, encrypted tunnel to the remote network.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL Connections 8-3 v1.0, January 2010 The following sections explain the five configuration screens of the SSL VPN W izard. On the sixth screen, you can save your SSL VPN policy .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-4 Virtual Private Networking Using SSL Connections v1.0, January 2010 Note: If you leave the Portal Layout Name fiel d blank, the SSL VPN W izard uses the default portal layout SSL-VPN.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL Connections 8-5 v1.0, January 2010 SSL VPN Wizard S tep 2 of 6: Domain Settings HTTP meta tags for cache control (recommended) Select this checkbox to apply HTTP meta tag cache control directives to this portal layout.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-6 Virtual Private Networking Using SSL Connections v1.0, January 2010 Note that Figure 8-3 contains some examples. Ente r the settings as explained in Ta b l e 8 - 2 , then click Next to go the following screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL Connections 8-7 v1.0, January 2010 SSL VPN Wizard S tep 3 of 6: User Settings Note that Figu re 8-4 contains some examples. Ente r the settings as explained in Ta b l e 8 - 3 o n page 8-8 , then click Next to go the following screen.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-8 Virtual Private Networking Using SSL Connections v1.0, January 2010 Note: After you have completed the steps in the SSL VPN Wizard, you can make changes to the user settings by selecting Users > Users .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL Connections 8-9 v1.0, January 2010 SSL VPN Wizard S tep 4 of 6: C lient IP Address Range and Routes Note that Figu re 8-5 contains some examples.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-10 Virtual Private Networking Using SSL Connections v1.0, January 2010 T able 8-4.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-11 v1.0, January 2010 SSL VPN Wizard S tep 5 of 6: Port Forwarding Note that Figu re 8-6 contains some examples. Ente r the settings as explained in Ta b l e 8 - 5 , then click Next to go the following screen.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-12 Virtual Private Networking Using SSL Connections v1.0, January 2010 TCP Port NumberAction The TCP port number of th e application th at is accessed through the SSL VPN tunnel.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-13 v1.0, January 2010 SSL VPN Wizard S tep 6 of 6: V erify and Save Y our Set.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-14 Virtual Private Networking Using SSL Connections v1.0, January 2010 V erify your settings; if you need to make any changes, click the Back action button (if needed several times) to return to the screen on which you want to make changes.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-15 v1.0, January 2010 4. Enter the user name and password that you ju st created with the help of the SSL VP N W izard 5. Click Login .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-16 Virtual Private Networking Using SSL Connections v1.0, January 2010 The default User Portal screen displays a simple menu that provides the SSL user with the following menu selections: • VPN T unnel .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-17 v1.0, January 2010 3. From the Log T ype pull-down menu, select SSL VPN .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-18 Virtual Private Networking Using SSL Connections v1.0, January 2010 When you define the SSL VPN policies that determine netw ork resource access for your SSL VPN users, you can define g lobal polici es, group policies, o r individual poli cies.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-19 v1.0, January 2010 Portal layouts are applied by selecting one from the available portal layouts in the configuratio n of a domain.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-20 Virtual Private Networking Using SSL Connections v1.0, January 2010 The List of Layou ts table displays the follo wing fields: • Layout Name . The descriptive name of the portal.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-21 v1.0, January 2010 4. Complete the fields and select the checkboxes as expl a ine d Ta b l e 8 - 6 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-22 Virtual Private Networking Using SSL Connections v1.0, January 2010 5. Click Ap ply to save your settings. The new portal layout is added to the List of Layouts table. T o display the new portal layout.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-23 v1.0, January 2010 Adding Servers and Port Numbers T o configure port forwa rding, you must define the IP addresses of the internal s ervers and the port number for TCP applications that are available to remote users.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-24 Virtual Private Networking Using SSL Connections v1.0, January 2010 4. Click the Add table button. The new application entry is added to the List of Configured Applications for Port Forwarding table.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-25 v1.0, January 2010 3. In the Add New Host Name for Port Forwarding section of the screen, specify information in the following fields: • Local Server IP Address .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-26 Virtual Private Networking Using SSL Connections v1.0, January 2010 • If you enable split tunnel support and you assign an.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-27 v1.0, January 2010 3. Select the checkbox and complete the fields as explained Ta b l e 8 - 8 . 4. Click Apply to save your settings.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-28 Virtual Private Networking Using SSL Connections v1.0, January 2010 T o add an SSL VPN tunnel client r oute: 1. Select VPN > SSL VPN from the menu. The SSL VPN s subm enu tabs appear , with the Policies screen in view .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-29 v1.0, January 2010 Adding New Network Resources T o define a netw ork resource: 1. Select VPN > SSL VPN from the menu. The SSL VPN s subm enu tabs appear , with the Policies screen in view .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-30 Virtual Private Networking Using SSL Connections v1.0, January 2010 Editing Network Resources to S pecify Addresses 1. Select VPN > SSL VPN from the menu. The SSL VPN s subm enu tabs appear , with the Policies screen in view .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-31 v1.0, January 2010 5. Click Apply to save your settings. The new configuration is added to the Defined Resource Addresses table.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-32 Virtual Private Networking Using SSL Connections v1.0, January 2010 For example, a policy that is configured for a si ngle IP address takes precedence over a po licy that is configured for a range of addresses.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-33 v1.0, January 2010 2. Make your selection from the follo win g Query options: • Click Glo bal to view all global policies.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-34 Virtual Private Networking Using SSL Connections v1.0, January 2010 . 3. Select the radio buttons, complete the fields , and make yo ur selection from the pull-down menus as explained Ta b l e 8 - 1 0 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-35 v1.0, January 2010 Add SSL VPN Policies Apply Policy For Select one of the following radio buttons to specify how the policy is applied: • Network Resource .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-36 Virtual Private Networking Using SSL Connections v1.0, January 2010 Apply Policy For (continued) IP Network Policy Name A descriptive name of the SSL VPN policy for identification and management purpose s.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Virtual Private Networking Using SSL C onnections 8-37 v1.0, January 2010 4. Click Apply to save your settings. The policy is adde d to the List of SSL VPN Policies table on the Policies screen.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 8-38 Virtual Private Networking Using SSL Connections v1.0, January 2010.
9-1 v1.0, January 2010 Chapter 9 Managing Users, Authenti cation, and Certificates This chapter describes how to manage users, auth entication, and security ce rtificates for IPsec VPN and SSL VPN. This chapter contains the following sections: • “Configuring VPN Authenticati on Domains, Groups, and Users ” on this page.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-2 Managing Users, Authen tication, and Certificates v1.0, January 2010 Configuring Domains The domain determines the authentication method to be us ed for associated users.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-3 v1.0, January 2010 T o create a domain: 1.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-4 Managing Users, Authen tication, and Certificates v1.0, January 2010 2. Under the List of Domains table, click the Add table button. The Add Domain screen displays. 3. Enter the settings as explained in Ta b l e 9 - 2 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-5 v1.0, January 2010 4. Click Apply to save your settings.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-6 Managing Users, Authen tication, and Certificates v1.0, January 2010 6. If you change local authentication, click Apply in the Domain screen to save your settings. T o delete one or more domains: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-7 v1.0, January 2010 Creating and Deleting Group s T o create a VPN group: 1. Select Users > Groups from the menu. The Groups screen displays.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-8 Managing Users, Authen tication, and Certificates v1.0, January 2010 3. Click the Add table button. The new group is added to the List of Groups table. T o delete one or more groups: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-9 v1.0, January 2010 3. Modify the idle timeout period in minutes in the Idle T i meout field.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-10 Managing Users, Authentication , and Certificates v1.0, January 2010 T o create an individual user account: 1. Select Users > Users from the menu. The Users screen displays.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-11 v1.0, January 2010 3. Enter the settings as explained in Ta b l e 9 - 4 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-12 Managing Users, Authentication , and Certificates v1.0, January 2010 4. Click Apply to save your settings. The user is added to the List of Users table. T o delete one or more users: 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-13 v1.0, January 2010 4. Click Apply to save your settings. Configuring Login Restrictions Bas ed on IP Address T o restrict logging in based on IP address: 1.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-14 Managing Users, Authentication , and Certificates v1.0, January 2010 4. In the Defined Addresses Status section of the screen, select one of the following radio buttons: • Deny Login fr om Defined Addr esses .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-15 v1.0, January 2010 3. Click the by Client Browser su bmenu tab. The by Client Browser s creen displays. Figure 9-9 shows a browser in the Defined Browsers table as an example.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-16 Managing Users, Authentication , and Certificates v1.0, January 2010 7. Click the Add table button. The browser is ad ded to the Defined Browsers table. 8. Repeat step 6 and step 7 for any ot her browsers that you want t o add to the Defined Browsers table.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-17 v1.0, January 2010 3. Enter the settings as explained in Ta b l e 9 - 6 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-18 Managing Users, Authentication , and Certificates v1.0, January 2010 On the UTM, the uploaded digital certificate is checked for validity and purpose. The digital certificate is accepted when it passes the validity te st and the purpose ma tches its use.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-19 v1.0, January 2010 The Certificates screen contains four tables that are explained in detail in the following sections: • T rusted Certificates (CA C ertificate) table .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-20 Managing Users, Authentication , and Certificates v1.0, January 2010 The T rusted Certificates (CA Certificates) table lis ts the digital certificates of CAs and contains the following fields: • CA Identity (Subject Name) .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-21 v1.0, January 2010 When a security alert is generated, the user can decide wh ether or not to trust the host.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-22 Managing Users, Authentication , and Certificates v1.0, January 2010 2. In the Generate Self Certificate Request section of the screen, enter the settings as explained in Ta b l e 9 - 7 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-23 v1.0, January 2010 3. Click the Generate table button. A new SCR is created and added to the Self Certificate Requests table.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-24 Managing Users, Authentication , and Certificates v1.0, January 2010 5. Copy the contents of the Data to supply to CA text box into a text file, including all of the data contained from “----BEGIN CER TIFICA TE REQUEST ---” to “---END CER TIFICA TE REQUEST ---”.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Managing Users, Authentica tion, and Certificates 9-25 v1.0, January 2010 10. Click Br owse and navigate to the digital certificate file from the CA that you just stored on your computer .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 9-26 Managing Users, Authentication , and Certificates v1.0, January 2010 T o view the currently-loaded CRLs and upload a new CRL: 1. Select VPN > Certificates from the menu. The Certificates sc reen displays.
10-1 v1.0, January 2010 Chapter 10 Network and System Management This chapter describes the tools fo r managing the network traffic to optimize its performance and the syst em manage ment featu res of the UTM. This chapter contains the following sections: • “Performance Management ” on this page .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-2 Network and System Management v1.0, January 2010 • Auto-rol lover mode (dual-W AN port models only): 1.5 Mbps (one active W AN port at 1.5 Mbps) • Single-W A N port mode (single-W AN port models an d dual-W AN port models ): 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Management 10- 3 v1.0, January 2010 • ALLOW by schedule, otherwise block The section below summarizes the various criteria that yo u can apply to outbound rules in order to reduce traffic.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-4 Network and System Management v1.0, January 2010 • QoS Profile . Y ou can define QoS profiles and then apply them to ou tbound rules to regulat e the priority of t raffic. T o define QoS profiles, see “Creating Quality of Service (QoS) Profiles” on page 5-35 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Management 10- 5 v1.0, January 2010 – URL blocking . Y ou can specify up to 200 URLs that are bloc ked by the UTM. For more information, see “Configuring W eb URL Filtering” on page 6-30 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-6 Network and System Management v1.0, January 2010 LAN W AN Inbound Rules and DMZ W AN Inbound Rules (Port Forwarding) The LAN W AN Rules sc reen and the DMZ W AN Rule s screen list all existi ng rules for inbound traffic (from W AN to LAN and from W AN to the DM Z).
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Management 10- 7 v1.0, January 2010 – Address range . The rule is applied to a range of addresses. – Groups . The rule is applied to a group of PCs. (Y ou can configure groups for LAN W AN outbound rules but n ot for DMZ W AN outbound rules.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-8 Network and System Management v1.0, January 2010 e-mail server) and provide public access to them.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Management 10- 9 v1.0, January 2010 For more information ab out QoS profiles, see “Creating Quality of Service (QoS) Profiles” on page 5-35 . Assigning Bandwid th Profiles By applying a Q oS profile, the W AN bandw idth does not chan ge.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-10 Network and System Management v1.0, January 2010 T o modify the administrator user acc ount settings, includ ing the password: 1. Select Users > Users from the menu. The Users screen displays.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Managem ent 10-11 v1.0, January 2010 3. Select the Check to Edit Password checkbox. The password fields become active. 4. Enter the old password, ent er the new password, and then co nfirm the new password.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-12 Network and System Management v1.0, January 2010 Configuring Remote Management Ac cess An administrator can configure, upgrade, and chec k the status of the UTM over the Internet via a Secure Sockets Layer (SSL) VPN connection.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Managem ent 10-13 v1.0, January 2010 4. Click Apply to save your changes. When remote management is en abled, you must use an SSL connection to access the UTM from the Internet.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-14 Network and System Management v1.0, January 2010 Using an SNMP Manager Simple Network Management Protocol (SNMP) fo rms part of the Internet Protocol Suite as defined by the Internet Engineerin g T ask Force (IETF).
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Managem ent 10-15 v1.0, January 2010 2. Enter the settings as explained in T able 10-1 . 3. Click Apply to save your settings. Managing the Configuration File The configuration settings of the UT M are stored in a configuration f ile on the UTM.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-16 Network and System Management v1.0, January 2010 The Backup & Restore Settings screen lets you: • back up and save a co py of the current settings • restore saved settings from the backed-up file • revert to the factory default settings.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Managem ent 10-17 v1.0, January 2010 2. Select Save file , and then click OK . 3. Open the folder where you have saved the backup file, and then verify that it has been saved successfully .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-18 Network and System Management v1.0, January 2010 Reverting to Factory Default Settin gs T o reset the UTM to the original f.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Managem ent 10-19 v1.0, January 2010 Vie wing the A vailable Firmware V ersions T o view the current version o f the firmware that y our UTM is running and the other available firmware versions: 1.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-20 Network and System Management v1.0, January 2010 3. T o see which other firmware versions are available, click Query under the Firmware Download section to allow the UT M to connect to the NE TGEAR update server .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Managem ent 10-21 v1.0, January 2010 Rebooting Without Changing the Firmware T o reboot the UTM without changing the firmware: 1.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-22 Network and System Management v1.0, January 2010 The Info section shows the following information fields for the scan engine firmware and patte rn file: • Current V e rsion .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Managem ent 10-23 v1.0, January 2010 Configuring Automatic Up date and Frequency Settings T o configure the update settings and frequency settings for auto matic downloading of the scan engine firmware and pattern file: 1.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-24 Network and System Management v1.0, January 2010 Configuring Date and T ime Service Configure date, time and NTP server designations on the System Date & T ime screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network and System Managem ent 10-25 v1.0, January 2010 3. Click Apply to save your settings. Automatically Adjust for Daylight Savings Time If daylight savings time is suppor ted in your region, select the Automatically Adjust for Daylight Savings T ime checkbox.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 10-26 Network and System Management v1.0, January 2010.
11-1 v1.0, January 2010 Chapter 1 1 Monitoring System Access and Performance This chapter describes the system monitoring features of the UTM. Y ou can be alerted to important events such as a W AN port rollover , W AN traffic limits reached, login failures , and attacks.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-2 Monitoring System Access and Performanc e v1.0, January 2010 The Internet T raffic S tatistics section in the lowe r part of the screen displays statistics on Internet traffic via the W AN port.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring System Access a nd Performance 11-3 v1.0, January 2010 T able 1 1-1. W AN T raffic Meter Settings Setting Description .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-4 Monitoring System Access and Performanc e v1.0, January 2010 3. Click Apply to save your settings. 4. For the dual-W AN port models only , click the W AN2 T raffic Meter submenu tab.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring System Access a nd Performance 11-5 v1.0, January 2010 Configuring Logging, Alert s , and Event Notifications By defau.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-6 Monitoring System Access and Performanc e v1.0, January 2010 2. Enter the settings as explained in Ta b l e 1 1 - 2 . 3. Click T est to ensure that the connection to the server and e-mail address succe eds.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring System Access a nd Performance 11-7 v1.0, January 2010 Figure 1 1-4.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-8 Monitoring System Access and Performanc e v1.0, January 2010 2. Enter the settings as explained in Ta b l e 1 1 - 2 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring System Access a nd Performance 11-9 v1.0, January 2010 Enable (continued) Select Logs to Send (continued) • IPS Logs . All IPS events. • SSL VPN Logs . All SSL VPN events.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-10 Monitoring System Access and Performanc e v1.0, January 2010 3. Click Apply to save your settings or click Clear Log Information to clear the selected logs.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-11 v1.0, January 2010 3. Enter the settings as explained in Ta b l e 1 1 - 4 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-12 Monitoring System Access and Performanc e v1.0, January 2010 4. Click Apply to save your settings. Enable Malware Alerts (continued) Subject Enter the subject line for the e-ma il alert.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-13 v1.0, January 2010 Configuring and Activating Firewall Logs Y ou can configure the logging options for each network segment.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-14 Monitoring System Access and Performanc e v1.0, January 2010 4. Click Apply to save your settings.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-15 v1.0, January 2010 Figure 1 1-7 [Dashboard, screen 1 of 3].
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-16 Monitoring System Access and Performanc e v1.0, January 2010 T o clear the statistics, click Clear S tatistics .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-17 v1.0, January 2010 Threat s (Count s ) This is a graphic that shows the relative number of th reats and access violations over the last week, using different colors for the various applications.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-18 Monitoring System Access and Performanc e v1.0, January 2010 T able 1 1-7 explains the fields of the Most Recent 5 and T op 5 sections of the Dashboard screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-19 v1.0, January 2010 T able 1 1-8 explains the fields of the Service Statistics section of the Dashboard screen. Figure 1 1-9 [Dashboard, screen 3 of 3] T able 1 1-8.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-20 Monitoring System Access and Performanc e v1.0, January 2010 V iewing S t atus Screens The UTM provides real-time informa tion in a variety of status screens that are described in the following sections: • “V iewing System Status ” on this page.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-21 v1.0, January 2010 T able 1 1-9 explains the fields of the Status and System Information sections of the System Status screen.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-22 Monitoring System Access and Performanc e v1.0, January 2010 T able 1 1-10 on page 1 1-23 explains the fields of the System Status screen of a dual-W AN port model with the W AN1 Configuration, W AN2 Co nfiguration, and LAN Port sections.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-23 v1.0, January 2010 T able 1 1-1 1 on page 1 1-24 explains the Interface S tatistics section of the System Status screen. T able 1 1-10.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-24 Monitoring System Access and Performanc e v1.0, January 2010 V iewing Active VPN Users The Active Users screen displays a list of admini strators , IPsec VPN, and SSL VPN users that are currently logged into the UTM.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-25 v1.0, January 2010 2. Click the IPSec VPN Connection S tatus submenu tab. The IPSec VPN Conn ec tio n S tatus screen displays.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-26 Monitoring System Access and Performanc e v1.0, January 2010 2. Click the SSL VPN Connection S tatus submen u tab.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-27 v1.0, January 2010 2. Click the St a t u s option arrow at the top right of the Port T rig gering screen.The Port T riggering Status screen appears in a popup window .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-28 Monitoring System Access and Performanc e v1.0, January 2010 2. Click the WA N St a t u s option arrow at the top right of the W AN1 ISP Settings screen (dual- W A N port models) or W AN1 ISP Settings screen (single-W AN port models).
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-29 v1.0, January 2010 The Connection Status screen displays the information that is described in T a ble 1 1-14 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-30 Monitoring System Access and Performanc e v1.0, January 2010 2. Click the LAN Groups submenu tab. The LAN Groups screen displays ( Figure 1 1-21 shows some examples in the Known PCs and Devices table).
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-31 v1.0, January 2010 The Known PCs and Devices table contains a list of all known PCs and network devices that are assigned dynamic IP addresses by the UTM, or have been discovered by other means.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-32 Monitoring System Access and Performanc e v1.0, January 2010 Querying Logs and Generating Report s The extensive logging an.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-33 v1.0, January 2010 • System Logs . The system event logs that you have specified on the Email and Syslog screen (see “Configuring and Activating Syst em, E-mail, and S yslog Logs” on page 11-6 ).
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-34 Monitoring System Access and Performanc e v1.0, January 2010 3. Enter the settings as explained in T able 1 1-15 .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-35 v1.0, January 2010 Log T yp e (continued) • Service Logs . All events that are related to th e status of scanning and filtering services that are part of the Applicat ion Security main navigation menu.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-36 Monitoring System Access and Performanc e v1.0, January 2010 Search Criteria (continued) Client IP T he client IP address that is queried.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-37 v1.0, January 2010 4. Click one of the fo llowi ng action buttons: • Search . Query the log according to the search crite ria that you specifie d and view the log through the W eb Mana gem ent Interface, that is, on screen.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-38 Monitoring System Access and Performanc e v1.0, January 2010 Example: Using Logs to Identify Infected Clie nt s Y ou can use the UTM logs to he lp identify potentially infected clients on the network.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-39 v1.0, January 2010 Scheduling and Generat ing Report s The UTM lets you sched ule and generate three types of reports: • Email Reports .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-40 Monitoring System Access and Performanc e v1.0, January 2010 – The following ap plication incident are sho wn per day , b.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-41 v1.0, January 2010 3. Enter the settings as explained in T able 1 1-16 . 4. Click Generate . After a few minutes, the report is ad ded to the Report List, which can conta in a maximum of fiv e saved reports.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-42 Monitoring System Access and Performanc e v1.0, January 2010 Scheduling Report s T o schedu le au tomatic genera tio n and e-mailing of re ports: 1. Select Monitoring > Logs & Reports from the menu.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-43 v1.0, January 2010 4. Click Apply to save your settings. Using Diagnostics Utilities The UTM provides diagn ostic tools that help you an alyze traf fic conditions and the status of the network.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-44 Monitoring System Access and Performanc e v1.0, January 2010 Using the Network Diagnostic T ools This section discusses the Network Diagnostics sec tion and the Perform a DNS Lookup section of the Diagno sti cs scree n .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-45 v1.0, January 2010 T racing a Route A traceroute lists all routers between the source (the UTM) an d the destination IP addre ss.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-46 Monitoring System Access and Performanc e v1.0, January 2010 Using the Realtime T r affic Diagnostics T ool This section discusses the Realtime T raffic Diag nostics section and the Perform a DNS L ookup section of the Diagnostics screen.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Monitoring Syst em Acce ss an d Per fo rma nc e 11-47 v1.0, January 2010 Gathering Import ant Log Information and Generating a Ne.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 11-48 Monitoring System Access and Performanc e v1.0, January 2010 T o generate the Network Statistic Report: 1. Locate the Network S tatistics Report section on the Diagnostics screen.
12-1 v1.0, January 2010 Chapter 12 T roubleshooting and Using Online Support This chapter provides troubleshooting tips and information for the UTM. After each problem description, instructions are prov ided to help you diagnose and solve the problem.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 12-2 Troubleshooting and Using Online Support v1.0, January 2010 Basic Functioning After you turn on power to the UTM, the following sequen ce of events should occur: 1. When power is first applied, ve rify that the PWR LED is on.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Troubleshooting and Using Online Su pport 12-3 v1.0, January 2010 LAN or W AN Port LEDs Not On If either the LAN LEDs or W AN LED.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 12-4 Troubleshooting and Using Online Support v1.0, January 2010 • If your UTM’ s IP address has been changed and you do not know the current IP address, clear the UTM’ s configuration to factory defa ults.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Troubleshooting and Using Online Su pport 12-5 v1.0, January 2010 • If the computer is configured correctly , but still not working, ensure that the UTM is connected and turned on.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 12-6 Troubleshooting and Using Online Support v1.0, January 2010 If your UTM is still unable to ob tain an IP addr ess from the ISP , the problem might be one of the following: • Y our ISP might require a login prog ram.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Troubleshooting and Using Online Su pport 12-7 v1.0, January 2010 T roubleshooting a TCP/IP Ne twork Using a Ping Utility Most TCP/IP terminal devices and firewalls contain a ping utility th at sends an echo request packet to the designated device.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 12-8 Troubleshooting and Using Online Support v1.0, January 2010 T esting th e Path from Y ou r PC to a Remote Device After verifying that the LAN path works correctly , test the path from your PC to a remote device.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Troubleshooting and Using Online Su pport 12-9 v1.0, January 2010 Restoring the Default Co nfiguration and Password T o reset the.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 12-10 Troubleshooting and Using Online Support v1.0, January 2010 Problems with Date and Ti me The System Date & T ime screen displays the current date and time of day (s ee “Configuring Date and T ime Service” on page 10-24 ).
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Troubleshooting and Using Online Su pport 12-11 v1.0, January 2010 T o initiate the support tunnel: 1. Select Support > Online Support from the menu The Online Support screen displays.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual 12-12 Troubleshooting and Using Online Support v1.0, January 2010 T o submit a file to NETGEAR for analysis: 1. Select Support > Malware Analysis from the menu The Onli ne Support screen displays .
Default Settings and Technical Specifications A-1 v1.0, January 2010 Appendix A Default Settings and T echnical Specifications Y ou can use the Reset button located on the rear panel to reset all se ttings to their factory defaults. This is called a hard reset (for more information, see “Reverting to Factory Default Settings” on page 10-18 ).
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual A-2 Default Settings and Technical Specifications v1.0, January 2010 Ta b l e A - 2 shows the physical and techni cal specifications for the UTM. (continued) DHCP server Enabled DHCP starting IP address 192.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Default Settings and Technical Specifications A-3 v1.0, January 2010 Ta b l e A - 3 shows the IPsec VPN specifications for the UTM.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual A-4 Default Settings and Technical Specifications v1.0, January 2010 Ta b l e A - 4 shows the SSL VPN specifications for the UTM.
Network Planning for Dual WAN Port s (Dual-WAN Port Models Only) B-1 v1.0, January 2010 Appendix B Network Planning for Dual W AN Port s (Dual-W AN Port Models Only) This appendix describes the factor s to consider when plannin g a network using a firewall that has dual W A N ports.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual B-2 Network Planning for Dual WAN Ports (Dual-WAN Por t Mo dels On ly) v1.0, January 2010 • Protocol binding – For auto-rollover mod e, protocol binding d oes not apply . – For load balancing mod e, decide which protocols shoul d be bound to a specific W AN port.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network Planning for Dual WAN Port s (Dual-WAN Port Models Only) B-3 v1.0, January 2010 • Y ou can choose a variety of W AN options if th e factory default settings are not suitable for your installation.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual B-4 Network Planning for Dual WAN Ports (Dual-WAN Por t Mo dels On ly) v1.0, January 2010 • ISP Domain Name Server (DNS) addres.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network Planning for Dual WAN Port s (Dual-WAN Port Models Only) B-5 v1.0, January 2010 Gateway IP Address: ______ .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual B-6 Network Planning for Dual WAN Ports (Dual-WAN Por t Mo dels On ly) v1.0, January 2010 These various types of traffic and auto-rollover or lo ad balancing all interact to make the planning process more challenging: • Inbound T raffic .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network Planning for Dual WAN Port s (Dual-WAN Port Models Only) B-7 v1.0, January 2010 • Dual W AN Ports in Load Balancing Mode . Load balancing for an UTM with dual W AN ports is similar to a single W AN gateway configur ation when you sp ecify the IP address.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual B-8 Network Planning for Dual WAN Ports (Dual-WAN Por t Mo dels On ly) v1.0, January 2010 In the single W AN case, the W A N’ s Internet address is either fixed IP or a FQDN if the IP address is dynamic.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network Planning for Dual WAN Port s (Dual-WAN Port Models Only) B-9 v1.0, January 2010 V irtual Private Networks (VPNs) When implementing virtual private network (VPN) tunnels, a mechanis m must be used for determining the IP addresses of the tunnel end po ints.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual B-10 Network Planning for Dual WAN Ports (Dual-WAN Por t Models Only) v1.0, January 2010 For a single W AN gateway configuration, use a FQDN when the IP address is dynamic and either an FQDN or the IP address itself when the IP addr ess is fixed.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network Planning for Dual WAN Port s (Dual-WAN Port Models Only) B-11 v1.0, January 2010 VPN Road W arrior (Client-to-Gateway) Th.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual B-12 Network Planning for Dual WAN Ports (Dual-WAN Por t Models Only) v1.0, January 2010 The IP addresses of the W AN ports can b.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network Planning for Dual WAN Port s (Dual-WAN Port Models Only) B-13 v1.0, January 2010 VPN Road W arrior: Dual Gateway W AN Por.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual B-14 Network Planning for Dual WAN Ports (Dual-WAN Por t Models Only) v1.0, January 2010 The IP address of the gateway W AN ports can be either fixed or dynamic. If an IP address is dynamic, you must use a FQDN.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network Planning for Dual WAN Port s (Dual-WAN Port Models Only) B-15 v1.0, January 2010 After a rollover of a gateway W AN po rt.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual B-16 Network Planning for Dual WAN Ports (Dual-WAN Por t Models Only) v1.0, January 2010 VPN T elecommuter (Client-to-Gat eway Th.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Network Planning for Dual WAN Port s (Dual-WAN Port Models Only) B-17 v1.0, January 2010 VPN T elecommuter: Dual Gateway W AN Por.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual B-18 Network Planning for Dual WAN Ports (Dual-WAN Por t Models Only) v1.0, January 2010 The purpose of the FQDN is to toggle the.
System Logs and Error Messa ges C-1 v1.0, January 2010 Appendix C System Logs and Error Messages This appendix explains pro vides examples and ex planations of system l ogs and error message. When applicab le, a recomm ended action is provided. This appendix contains the following sections: • “System Log Messages” on page C-2 .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual C-2 System Logs and Error Me ssages v1.0, January 2010 System Log Messages This section describes log messages that be long to one of the following categories: • Logs that are generated by traf fic that is meant for the UTM.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual System Logs and Error Message s C-3 v1.0, January 2010 Service Logs This section describes log messages generated duri ng firmware updates and other service-related events.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual C-4 System Logs and Error Me ssages v1.0, January 2010 Login/Logout This section describes logs that are generated by the administrative interfaces of the device. Firewall Rest art This section describes logs that are genera ted when the firewall restarts.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual System Logs and Error Message s C-5 v1.0, January 2010 W AN S t atus This section describes the logs that are genera ted by the W AN component.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual C-6 System Logs and Error Me ssages v1.0, January 2010 Load-Balancing Mode When the W AN mode is config ured for load balancing, bo th the W AN ports are active simultaneously and the traffic is balanced be tween them.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual System Logs and Error Message s C-7 v1.0, January 2010 PPP Logs This section describes the W A N PP P connection logs. The PPP type can be configured through the W eb Management Interface (see “Manually Configuring the Internet Connection” o n page 3-5 ).
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual C-8 System Logs and Error Me ssages v1.0, January 2010 • PPTP Idle-T imeout Logs • PPP Authentication Logs T able C-1 1.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual System Logs and Error Message s C-9 v1.0, January 2010 T raffic Metering Logs This section describes logs that are genera te d when the traffic meter has reached a limit. Unicast Logs This section describes logs that are genera ted when the UTM processes unicast packets.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual C-10 System Logs and Error Messages v1.0, January 2010 Multicast/Broadcast Logs This section describes logs that are generated when the UTM pr ocesses multicast and broadcast packets.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual System Logs and Error Message s C-11 v1.0, January 2010 Message 2007 Oct 1 00:44:17 [UTM] [kernel] [INV ALID][BAD_CHECKSUM] DROP] SRC= 192.168.20.10 DST=192.168.20.2 PROTO=TCP SPT=23 DPT=54899 Explanation Bad checksu m.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual C-12 System Logs and Error Messages v1.0, January 2010 Content Filtering and Security Logs This section describes the log messa ges that are generated by the content filtering and security mechanisms.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual System Logs and Error Message s C-13 v1.0, January 2010 S p am Logs This section describes logs that are generate d when the UTM filters spam e-mail messages. Message 20 09-0 8-01 00:00:01 HTT P 192.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual C-14 System Logs and Error Messages v1.0, January 2010 T raffic Logs This section describes logs that are genera te d when the UTM processes W eb and e-mail traffic. V irus Logs This section describes logs that are genera ted when the UTM detects viruses.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual System Logs and Error Message s C-15 v1.0, January 2010 IPS Logs This section describes logs that are ge nerated when traffic matches IPS rules. Port Scan Logs This section describes logs that ar e generated when ports are scanned.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual C-16 System Logs and Error Messages v1.0, January 2010 Routing Logs This section explains the logging messages for each network segment such as LAN to W AN for debugging purposes. These logs might gene rate a significant volume of messages.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual System Logs and Error Message s C-17 v1.0, January 2010 W AN to LAN Logs This section describes logs that are genera te d when the UTM processes W AN to LAN traffic. DMZ to LAN Logs This section describes logs that are genera te d when the UTM processes DMZ to LAN traffic.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual C-18 System Logs and Error Messages v1.0, January 2010.
Two Factor Authen tic at ion D-1 v1.0, January 2010 Appendix D T wo Factor Authentication This appendix provides an ov erview of T wo-Fa ctor Authen tication, and an example of how to implement the W iKID solution. This appendix contains the following sections: • “Why do I need T wo-Factor Authentication? ” on thi s page.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual D-2 Two Factor Authentication v1.0, January 2010 • Quick to deploy and manage . The W iKID solution integrates seamlessly with the NETGEAR SSL and VPN firewall products. • Proven r egulatory compliance .
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Two Factor Auth en tic at ion D-3 v1.0, January 2010 The request-response architecture is capable of self-service initialization by end-users, dramatically reducing implementa tion and maintenance costs.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual D-4 Two Factor Authentication v1.0, January 2010 3. The user then proceeds to the T wo-Factor Auth entication login page and enters the generated one-time passcode as the lo gin password.
Related Documents E-1 v1.0, January 2010 Appendix E Related Document s This appendix provides links to reference documents yo u c an use to gain a more complete understanding of the technolog ies used in your NETGEAR product. Document Link TCP/IP Networking Basics http://documentation.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual E-2 Related Documents v1.0, January 2010.
Index-1 v1.0, January 2010 Index Numerics 10BaseT , 100BaseT , and 1000BaseT 3-23 A AAA 7-40 AC input 1- 12 access, remote management 10-12 action buttons (W eb Management Interface) 2-6 activating, s.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual Index-2 v1.0, January 2010 B backing up, configuration file 10-16 bandwidth capacity auto-rollover mode 10-2 LAN 10-1 load balanc.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Index-3 v1.0, January 2010 managing 10-15 restoring 10-17 reverting to defaults 10-18 configuration menu (W eb Management Interfa.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual Index-4 v1.0, January 2010 DMZ DHCP address pool 4-20 DNS servers 4-21 domain name 4-20 LDAP server 4-21 lease time 4-21 relay 4-.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Index-5 v1.0, January 2010 F factory default settings reverting to 10-18 service license s, automatic retrieval 2-28 failover attempt s DNS lookup 3-13 pinging 3-13 failover protection.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual Index-6 v1.0, January 2010 HTTP action, infected W e b file or object 2-20 , 6-22 default port 2-17 , 6-20 enabling scanning 2-17.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Index-7 v1.0, January 2010 IP header 5-37 IP precedence 5-37 IP security . See IPsec.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual Index-8 v1.0, January 2010 configuring options 11 - 8 e-mail address for sending logs 2-23 , 11 - 6 firewall logs, configuring 11.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Index-9 v1.0, January 2010 planning, dual W AN ports (dual-W AN port models) B-1 protocols, supported 1-2 resources, SSL VPN 8-28 statistics report, diagnostics 11 - 4 7 traf fic statistic s 11 - 1 6 Network Access Server .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual Index-10 v1.0, January 2010 IPsec VPN automatically generated (auto) 7-31 groups, configuring 9-6 managing 7-22 manually generate.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Index-11 v1.0, January 2010 description 5-35 examples 5-35 shifting traf fic mix 10-8 value 5-37 quality of service.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual Index-12 v1.0, January 2010 scan engine firmware 10-21 scan exceptions e-mail message size 2-19 W eb file or object size 2-20 sca.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Index-13 v1.0, January 2010 spam blocked messages, recent 5 and top 5 11 - 1 8 Distributed Spam Analysis 6-16 logs 11 - 8 , 11 - .
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual Index-14 v1.0, January 2010 tabs, submenu (W eb Ma nagement Interface) 2-5 TCP flood, blocking 5-28 TCP time-out 5-31 TCP/IP netw.
ProSecure Unified Th reat Management (UTM) Applia nce Reference Manual Index-15 v1.0, January 2010 V videoconferencing DMZ port 4-18 from restricted address 5-22 virtual LAN. See VLAN. V irtual Private Network Consortium. See VPNC. virtual private network.
ProSecure Unified Threat Manage ment (UTM) Appliance Referen ce Manual Index-16 v1.0, January 2010 W WA N aliases 3-17 auto-rollover mode (dual-W AN port models) configuring 3-1 1 DDNS 3-19 descriptio.
Un point important après l'achat de l'appareil (ou même avant l'achat) est de lire le manuel d'utilisation. Nous devons le faire pour quelques raisons simples:
Si vous n'avez pas encore acheté NETGEAR UTM50-100NAS c'est un bon moment pour vous familiariser avec les données de base sur le produit. Consulter d'abord les pages initiales du manuel d'utilisation, que vous trouverez ci-dessus. Vous devriez y trouver les données techniques les plus importants du NETGEAR UTM50-100NAS - de cette manière, vous pouvez vérifier si l'équipement répond à vos besoins. Explorant les pages suivantes du manuel d'utilisation NETGEAR UTM50-100NAS, vous apprendrez toutes les caractéristiques du produit et des informations sur son fonctionnement. Les informations sur le NETGEAR UTM50-100NAS va certainement vous aider à prendre une décision concernant l'achat.
Dans une situation où vous avez déjà le NETGEAR UTM50-100NAS, mais vous avez pas encore lu le manuel d'utilisation, vous devez le faire pour les raisons décrites ci-dessus,. Vous saurez alors si vous avez correctement utilisé les fonctions disponibles, et si vous avez commis des erreurs qui peuvent réduire la durée de vie du NETGEAR UTM50-100NAS.
Cependant, l'un des rôles les plus importants pour l'utilisateur joués par les manuels d'utilisateur est d'aider à résoudre les problèmes concernant le NETGEAR UTM50-100NAS. Presque toujours, vous y trouverez Troubleshooting, soit les pannes et les défaillances les plus fréquentes de l'apparei NETGEAR UTM50-100NAS ainsi que les instructions sur la façon de les résoudre. Même si vous ne parvenez pas à résoudre le problème, le manuel d‘utilisation va vous montrer le chemin d'une nouvelle procédure – le contact avec le centre de service à la clientèle ou le service le plus proche.
