WSM User Guide - WatchGuard Technologies

WSM User Guide - WatchGuard Technologies WSM User Guide - WatchGuard Technologies

watchguard.com
from watchguard.com More from this publisher
12.07.2015 Views

Quick Setup Wizardtion, you must have administrative privileges. After installation, you can operate with Windows XP orWindows 2003 Power User privileges.You can download the most current WatchGuard System Manager software at any time fromhttps://www.watchguard.com/archive/softwarecenter.asp. You must log in with your LiveSecurity username and password. If you are a new user, create a user profile and activate your product athttp://www.watchguard.com/activate before you try to download the WSM software.1 Download the latest WatchGuard System Manager software. You must also download and installthe latest Fireware® appliance software to your management station. You use this software with theWeb Quick Setup Wizard to create a basic configuration file for your Firebox.Make sure that you write down the name and the path of the files when you save them to your hard drive.2 Open the file and use the installation instructions.The Setup program includes a screen in which you select the components of the software or the upgrades to install. Adifferent license is necessary when you install some software components.NoteIf your management station is operating with a Windows toolbar, some users find it necessary to closeand restart the toolbar to see the new components installed for the WatchGuard Management System.Software encryption levelsThe management station software is available in two encryption levels.BaseSupports 40-bit encryption for PPTP RUVPN tunnels. You cannot create an IPSec VPN tunnelwith this level of encryption.StrongSupports 40-bit and 128-bit encryption for PPTP RUVPN. Also supports 56-bit and 168-bit DES,and 128-bit, 192-bit, and 256-bit AES.To use virtual private networking with IPSec you must download the strong encryption software.Strong export limits apply to the strong encryption software. It is possible that it is not available fordownload.Backing up your previous configurationIf you have a previous version of WatchGuard System Manager, make a backup of your security policyconfiguration before you install a new version. To create a backup of your configuration, see the Watch-Guard® WFS to Fireware Migration Guide.Quick Setup WizardYou can use a Quick Setup Wizard to create a basic configuration for your Firebox X. The Firebox usesthis basic configuration file when it starts for the first time. This enables the Firebox to operate as a basicfirewall. You can use this same procedure any time you want to reset the Firebox to a new basic configurationfor recovery or other reasons.14 WatchGuard System Manager

Quick Setup WizardFirebox X Core and Peak e-Series Web Quick Setup WizardWhen you purchase a Firebox X Core or Peak e-Series device, you can use the new Web Quick Setup Wizardto configure your Firebox. If you have configured a Firebox X Core or X Peak before, it is important foryou to understand that the Web Quick Setup Wizard operates differently than the Quick Setup Wizardthat shipped with earlier Firebox X hardware models. With earlier Firebox X Core and Peak devices, theQuick Setup Wizard used device discovery to find a Firebox on the network to configure. With the FireboxX Core and Peak e-Series and the Web Quick Setup Wizard, you must make a direct network connectionto the Firebox and use a web browser to start the wizard. The Firebox uses DHCP from its Eth1Ethernet interface to give a new IP address to your management station to use during configuration.Before you start the Web Quick Setup Wizard, make sure you have:• Registered your Firebox with LiveSecurity Service• Stored a copy of your Firebox feature key in a text file on your management station• Downloaded WSM and Fireware® software from the LiveSecurity Service web site to yourmanagement station• Installed the Fireware executable on your management station• Configured your management station to accept an IP address automatically (through DHCP)Using the Web Quick Setup Wizard1 Connect the red cross-over Ethernet cable that ships with your Firebox between the Ethernet porton your management station and the Eth1 port on your Firebox.2 Plug the power cord into the Firebox power input and into a power source.3 On the front of the Firebox X, press the up arrow button while you turn on the power to the Firebox.The Firebox X boots into Safe Mode. You can release the up arrow button when you see the message “InvokingRecovery”.4 Make sure your management station is configured to accept DHCP-assigned IP addresses.For example, if your management station uses Windows XP:From your Windows Start menu, select All Programs > Control Panel > Network Connections >Local Area Connections. Click Properties. Select Internet Protocol (TCP/IP) and click Properties.Make sure Obtain an IP Address Automatically is selected.5 Open a web browser and type: http://10.0.1.1:8080/This opens an HTTP connection between your management station and the Firebox X e-Series device. The Web QuickSetup Wizard starts automatically.After the Firebox is configured with this basic configuration, you can use Policy Manager to expand orchange the Firebox configuration.Using Web Quick Setup Wizard for recoveryYou can use the Web Quick Setup Wizard when you first configure your Firebox X e-Series device. Youcan also use the Web Quick Setup Wizard if you want to reset a Firebox with a new configurationbecause you forgot the password or because the Firebox is deploying in a new network.If you use the Web Quick Setup Wizard for recovery and you have purchased a Firebox hardware modelupgrade, you must make sure that the feature key you put in the wizard is the feature key that youreceived with the model upgrade.Troubleshooting problems with the Web Quick Setup WizardIf the Web Quick Setup Wizard is unable to install Fireware appliance software on the Firebox, the wizardtimes out after six minutes. Here are some things to check if you have problems with the wizard:User Guide 15

Quick Setup Wizardtion, you must have administrative privileges. After installation, you can operate with Windows XP orWindows 2003 Power <strong>User</strong> privileges.You can download the most current <strong>WatchGuard</strong> System Manager software at any time fromhttps://www.watchguard.com/archive/softwarecenter.asp. You must log in with your LiveSecurity username and password. If you are a new user, create a user profile and activate your product athttp://www.watchguard.com/activate before you try to download the <strong>WSM</strong> software.1 Download the latest <strong>WatchGuard</strong> System Manager software. You must also download and installthe latest Fireware® appliance software to your management station. You use this software with theWeb Quick Setup Wizard to create a basic configuration file for your Firebox.Make sure that you write down the name and the path of the files when you save them to your hard drive.2 Open the file and use the installation instructions.The Setup program includes a screen in which you select the components of the software or the upgrades to install. Adifferent license is necessary when you install some software components.NoteIf your management station is operating with a Windows toolbar, some users find it necessary to closeand restart the toolbar to see the new components installed for the <strong>WatchGuard</strong> Management System.Software encryption levelsThe management station software is available in two encryption levels.BaseSupports 40-bit encryption for PPTP RUVPN tunnels. You cannot create an IPSec VPN tunnelwith this level of encryption.StrongSupports 40-bit and 128-bit encryption for PPTP RUVPN. Also supports 56-bit and 168-bit DES,and 128-bit, 192-bit, and 256-bit AES.To use virtual private networking with IPSec you must download the strong encryption software.Strong export limits apply to the strong encryption software. It is possible that it is not available fordownload.Backing up your previous configurationIf you have a previous version of <strong>WatchGuard</strong> System Manager, make a backup of your security policyconfiguration before you install a new version. To create a backup of your configuration, see the Watch-Guard® WFS to Fireware Migration <strong>Guide</strong>.Quick Setup WizardYou can use a Quick Setup Wizard to create a basic configuration for your Firebox X. The Firebox usesthis basic configuration file when it starts for the first time. This enables the Firebox to operate as a basicfirewall. You can use this same procedure any time you want to reset the Firebox to a new basic configurationfor recovery or other reasons.14 <strong>WatchGuard</strong> System Manager

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!