WSM User Guide - WatchGuard Technologies
Share Embed Flag
Download ePaper

WSM User Guide - WatchGuard Technologies

WSM User Guide - WatchGuard Technologies WSM User Guide - WatchGuard Technologies

watchguard.com
from watchguard.com More from this publisher
12.07.2015 Views

Secondary Networks dialog box 107SecurID authentication 128SecurID policy 392security policycustomizing 19described 19See also configuration fileSecurity Policy dialog box 240Security Services tab (Firebox System Manager) 51Security Template dialog box 239, 241security templatesadding 239–240described 237, 239Select Device dialog box 273Select Firebox Model and Name dialog box 71Select the Time and Date page 260service properties, using to block sites 141Service Watch tabadding/removing lines in 47changing colors in 47changing policy names in 47changing scale of 47described 46showing connections by policy/rule 47Settings dialog box 38, 92Setup Firebox User dialog box 126, 283Setup Routes dialog box 110SHA-HMAC 227shared secrets 227Simple Mail Transfer Protocol 399Simple Network Management Protocol. See SNMPsites, blocked. See blocked sites.slash notation 22SMB policy 392SMTP packet filter policy 392SMTP proxyand Gateway AntiVirus 308, 310and intrusion prevention 171and Intrusion Prevention Service 314, 319and spamBlocker 302configuing proxy/antivirus alarms 171configuring 166–172configuring authentication rules 169configuring content filtering 170configuring ESMTP parameters 168configuring general settings 167defining antivirus responses 170defining content type rules 170defining file name rules 170described 166, 399examining HELO/EHLO responses 168hiding e-mail server data 168idle timeout for 167logging connection requests through 168restricting e-mail senders/recipients 170setting maximum e-mail recipients 167setting values for header filtering 170with static incoming NAT 384writing custom deny message 171SNMPconfiguring Firebox to accept polls from server 62described 62, 392enabling polling for 63management system 165policy for 392SNMP Settings dialog box 63SNMP trapsconfiguring for default packet handling 136enabling 63enabling for policies 153sending 165SNMP-Trap policy 393software upgradesand High Availability 348and LiveSecurity Service 19, 24and Quick Setup WIzard 14Fireware 20software version, viewing 48SOHOcreating tunnels for dynamic 240managing 253SOHO 5, managing 253SOHO 6adding a VPN resource 267adding a VPN tunnel 268adding to Management Server 257–259as managed client 212configuring management properties for 266preparing for management 256starting tools for 267updating device 266viewing management page for 265spam messagesand reverse lookup of source IP 154viewing number blocked 37spamBlockeractions (Deny, Tag, Allow) 299actions, selecting 302activating 301–302adding exceptions 304adding tags to e-mail subject line 300categories (Spam, Bulk, Suspect) 300configuring 303–304creating proxy policies for 302customizing using multiple proxies 306described 171, 299installing license for 300logging responses 304monitoring activity of 305reporting false positives/negatives 305selecting policies for 302viewing recent activity 53spamBlocker dialog box 303speed and duplex parameters, setting 111split tunnelingand security 232with PPTP, enabling 286spoofing attacks 136spyware sites, blocking 139spyware, blocking 318SQL*Net policy 393SQL-Server policy 393ssh policy 393SSL VPN 226star display, Firebox System Manager 35static NAT. See NAT, staticstatus passphraseas log encryption key 16changing 64–65described 18, 64setting 16Status Report tab (Firebox System Manager) 48–49Steel Belted RADIUS 128strip (proxy action) 162strong encryption. See encryption, strong412 WatchGuard System Manager

Sun RPC policy 393Support Logs dialog box 49support services, online 25SYN flood attacks 137syslogdescribed 394facility 85logging, enabling 84policy 394system files, location of 375TTACACS policy 394TACACS+ policy 394TCP connections 394TCP policy 394TCP proxyand Gateway AntiVirus 310and High Availability 348and intrusion prevention 183and Intrusion Prevention Service 314, 315, 317configuring 183configuring general settings for 183described 183, 400TCP segment adjustment, setting 77TCP SYN checking, enabling 76TCPmux service 142TCP-UDP policy 395Technical Supportassisted support 28Firebox Installation Services 29LiveSecurity Gold Program 29LiveSecurity Service 28users forum 26, 27VPN Installation Services 29telnet policy 395third-party authentication server. See authentication orname of third-party serverTimbuktu policy 395Time Exceeded setting (ICMP) 76Time Filters dialog box 187Time policy 395time zone for Firebox, setting 62timeout duration for Firebox 18toolbar. See WatchGuard toolbartraceroute command for source of messages 40traceroute policy 396trafficviewing Firebox 35volume indicator for 36Traffic Monitorblocking source/destination of message 40copying messages in 40issuing ping and traceroute command in 40limiting messages 38Traffic Monitor tab (Firebox System Manager) 38–40training and certification 26, 29Transmission Control Protocol (TCP) 183triangle display, Firebox System Manager 35trusted interfaceand WINS/DNS servers 107cabling and 66configuring 98–100described 10tunnel switching 231tunnelsmonitoring 6, 37protocols for 226See also VPN tunnelsviewing status of 36Type of Service (TOS) bits 76UUDP policy 395unhandled packets 137unlocking e-mail attachments 312Update Device dialog box 218, 238, 263, 266Update Firmware wizard 260upgradesand High Availability 348and LiveSecurity Service 19, 24and Quick Setup WIzard 14Fireware 20user authentication. See authenticationusersand Active Directory authentication 131and Firebox authentication 123and LDAP authentication 129and RADIUS server authentication 127and SecurID authentication 128assigning to authentication groups 123, 126authenticating remote 124configuring a policy for authentication of 132–133list of authenticated 49online forum for 26viewing in HostWatch 54users forum 26UUCP policy 396Vvirtual private networks. See VPNsvirusesdefending against. See Gateway AntiVirusinformation about new 24seeing number found 37VPN Installation Services 29VPN Manager Access page 257VPN Properties dialog box 241VPN Resource dialog box 238VPN resourcescreating new 238VPN tunnelsand gateways 243authentication/encryption types for 239configuring with manual security 246creating policies for 250creating with Add VPN Wizard 240creating with WatchGuard System Manager 237, 240drag-and-drop creation 240editing 241removing from WatchGuard System Manager 241without drag-and-drop 240–241VPNsaccess control for 229and Any policy 379and IP addressing 228and NAT 229Reference Guide 413

Sun RPC policy 393Support Logs dialog box 49support services, online 25SYN flood attacks 137syslogdescribed 394facility 85logging, enabling 84policy 394system files, location of 375TTACACS policy 394TACACS+ policy 394TCP connections 394TCP policy 394TCP proxyand Gateway AntiVirus 310and High Availability 348and intrusion prevention 183and Intrusion Prevention Service 314, 315, 317configuring 183configuring general settings for 183described 183, 400TCP segment adjustment, setting 77TCP SYN checking, enabling 76TCPmux service 142TCP-UDP policy 395Technical Supportassisted support 28Firebox Installation Services 29LiveSecurity Gold Program 29LiveSecurity Service 28users forum 26, 27VPN Installation Services 29telnet policy 395third-party authentication server. See authentication orname of third-party serverTimbuktu policy 395Time Exceeded setting (ICMP) 76Time Filters dialog box 187Time policy 395time zone for Firebox, setting 62timeout duration for Firebox 18toolbar. See <strong>WatchGuard</strong> toolbartraceroute command for source of messages 40traceroute policy 396trafficviewing Firebox 35volume indicator for 36Traffic Monitorblocking source/destination of message 40copying messages in 40issuing ping and traceroute command in 40limiting messages 38Traffic Monitor tab (Firebox System Manager) 38–40training and certification 26, 29Transmission Control Protocol (TCP) 183triangle display, Firebox System Manager 35trusted interfaceand WINS/DNS servers 107cabling and 66configuring 98–100described 10tunnel switching 231tunnelsmonitoring 6, 37protocols for 226See also VPN tunnelsviewing status of 36Type of Service (TOS) bits 76UUDP policy 395unhandled packets 137unlocking e-mail attachments 312Update Device dialog box 218, 238, 263, 266Update Firmware wizard 260upgradesand High Availability 348and LiveSecurity Service 19, 24and Quick Setup WIzard 14Fireware 20user authentication. See authenticationusersand Active Directory authentication 131and Firebox authentication 123and LDAP authentication 129and RADIUS server authentication 127and SecurID authentication 128assigning to authentication groups 123, 126authenticating remote 124configuring a policy for authentication of 132–133list of authenticated 49online forum for 26viewing in HostWatch 54users forum 26UUCP policy 396Vvirtual private networks. See VPNsvirusesdefending against. See Gateway AntiVirusinformation about new 24seeing number found 37VPN Installation Services 29VPN Manager Access page 257VPN Properties dialog box 241VPN Resource dialog box 238VPN resourcescreating new 238VPN tunnelsand gateways 243authentication/encryption types for 239configuring with manual security 246creating policies for 250creating with Add VPN Wizard 240creating with <strong>WatchGuard</strong> System Manager 237, 240drag-and-drop creation 240editing 241removing from <strong>WatchGuard</strong> System Manager 241without drag-and-drop 240–241VPNsaccess control for 229and Any policy 379and IP addressing 228and NAT 229Reference <strong>Guide</strong> 413

logo

products

Resources

Company

Terms of service
Privacy policy
Cookie policy
Cookie settings
Imprint
Change language
Made with love in Switzerland
© 2024 Yumpu.com all rights reserved

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!