WSM User Guide - WatchGuard Technologies

Installing WatchGuard System ManagerThe public servers behind the Firebox can continue to use public IP addresses. The Firebox does not usenetwork address translation to route traffic from outside your network to your public servers.The properties of a drop-in configuration are:• You must have a static external IP address to assign to the Firebox.• You use one logical network for all interfaces.• Drop-in mode does not support multi-WAN in round robin or backup order. For more informationon these options, see the “Network Setup and Configuration” chapter.It is sometimes necessary to flush the ARP cache of each computer on the trusted network, but this isnot common.Selecting where to install server softwareDuring installation, you can install the management station and three WatchGuard System Managerserver components on the same computer. Or you can use the same installation procedure to install theLog Server and WebBlocker Server components on other computers to distribute server load or supplyredundancy. The Management Server does not operate correctly on a computer that does not also haveWSM software installed. To decide where to install server software, you must examine the capacity ofyour management station and select the installation method that matches your needs.If you install the Management Server, Log Server, or WebBlocker Server on a computer with an activedesktop firewall other than Windows Firewall, you must open the ports necessary for the servers to connectthrough the firewall. Windows Firewall users do not have to change their desktop firewall configurationbecause the installation program opens the necessary ports through Windows Firewallautomatically. See “Installing WatchGuard Servers on computers with desktop firewalls” on page 20 formore information.Setting up the management stationYou install WatchGuard System Manager (WSM) software on your management station. This softwareshows the traffic through the firewall. WatchGuard System Manager also shows connection and tunnelstatus. The WatchGuard Log Server records information it receives from the Firebox. You can get accessto this data using tools on the management station.Select one computer on your network as the management station and install the management software.To install the WatchGuard System Manager software on your Windows-based management sta-User Guide 13