WatchGuard Firebox System 4.6 User Guide
WatchGuard Firebox System 4.6 User Guide WatchGuard Firebox System 4.6 User Guide
monitors 2, 32, 93BandwidthMeter 94opening configuration file 23opening configuration file from 23PPP timeout disconnects 81reinitializing 25resetting pass phrase 24saving configuration file 23saving configuration file to 24saving RUVPN configuration to 139setting interfaces 35setting the time zone 25starting monitors 93status 28synchronizing to Event Processor 72users inside 49users outside 49using out-of-band 79Firebox IIrear view 22Firebox monitorsdescribed 32setting view properties 94StatusReport 95active FTP connections 95ARP table 98authentication host information 96authentication list 98blocked sites list 95, 98interfaces 97log and notification hosts 95logging options 96network configuration 95packet counts 95processes status 96routes 97spoofing 95uptime and version information 94Firebox statuscollapsing display 29red explamation point 29Firebox Systemcomponents 1hardware requirements 4interactive training system 13introduction 1known issues 12Online Help 14opening security tools 31requirements 3training 13Web Browser requirements 3WebBlocker 19, 59Windows ’98 requirements 3Windows 2000 requirements 3Windows 95 requirements 3Windows NT requirements 3Firebox System optionshigh availability 17mobile user VPN 18purchasing 18SpamScreen 18VPN manager 17WatchGuard SOHO 18Firebox User groups 134Fireboxmonitors 2Flash Disk management tool 26for Firebox Systemsoftware update 7Formscompleting Support Indicent form 12FTP 94, 99and Optional network 22Proxy 54proxy reports,FTP detail 116Full text search 15GGateway 125editing 125removing 126setting default 39Global preferenceslogging 75notification 75HHardwarebasic Firebox 19Firebox description 2Hardware requirementsFirebox System 4Headers 53Helpcontents search 15context sensitive 16full text search 15searching index 15starting online help 15topic search 15WatchGuardTechnical Support 5What’s This? 16High Availabilityhost 28High availability 17Historical Reports 2, 83applying a filter 114deleting a filter 114described 33editing a filter 114introduction 109manually running a report 115running 114scheduling a report 114starting 109time zone 25Host alias 85adding 86using 85Hostsdefining a route 39log and notification 95HostWatch 2, 83, 98connecting to a Firebox 99described 33display properties 100modifying view properties 101replaying a log file 99viewing authenticated users 100viewing hosts 100viewing ports 100HTML152
exporting reports as 112HTTP 48, 60, 94, 99protocol 55proxied 60proxy 59types of services 55HTTP proxy 112HTTP proxy reportsHTTP detail 116most popular domains 116IIconWatchGuard Service 60Iconsworking with wg_ Icons 50Implementing Authentication 83Index search, online help 15Infopackseditorial 8information alert 7news from WatchGuard 8software updates 7support flash 8threat response 7virus alert 8Information Alert 7InstallingEvent Processor on NT 74modem 80Quicksetup Wizard 35Interfacesexternal 35Firebox 35, 37, 97optional 35trusted 35Internet Explorer 3Internet Technical Support 12Intervalsetting for log roll over 75IP 48address range 122changing interface address 39IP addressentering for remote user sessions 136IP masquerading. See also Dynamic NATIP Spoofingpreventing with VPN 131IPSec 121AH 127and MUVPN 141branch office VPN 124changing policy order 129Configuringgateway with IPSec 125configuring a dynamic tunnel 127configuring a manual tunnel 126configuring BOVPN services 129creating a policy 128editing gateway 125ESP 126removing gateway 126security disposition 128IPSec with RUVPN 133, 141ipsec_users 88, 92, 134JJava 87KKey interval 123Key negotiation type, ISAKMP or manual 125Keyphrase 103searching LogViewer by 104Keyword search 15Known issues 12Firebox System 12LLaunch intervalsetting 77Licenseentering keys for MUVPN 138purchasing for mobile user VPN 137LiveSecurityand Firebox 1available options 17Broadcast Network 2, 5, 7Editorial 8Information Alert 7New from WatchGuard 8Rapid Response Team 7Support Flash 8Threat Response 7Virus Alert 8LiveSecurity Event Processordescribed 33opening 33, 106LiveSecurity Event Processor see also EventProcessorLiveSecurity Service 2activating 8Load average 96Local time 25Log and Notification hosts 95Log encryption keychanging on the Firebox 71setting 75Log filesworking with in LogViewer 106Log Hostlisting 95synchronizing for NT 72log host. See Event Processorlog messages in Traffic Monitorlimiting 30Log roll oversetting interval 75Logging 93architecture 70blocked ports 45, 78blocked sites 78customizing 76customizing by option 76default packet handling 78exporting 104failover 69User Guide 153
- Page 112 and 113: HostWatch102
- Page 114 and 115: Viewing files with LogViewer2 Confi
- Page 116 and 117: Working with log filesIP header len
- Page 118 and 119: Working with log files108
- Page 120 and 121: Specifying report sectionsCreating
- Page 122 and 123: Exporting reports6 Enter the number
- Page 124 and 125: Scheduling and running reportsDelet
- Page 126 and 127: Report sections and consolidated se
- Page 128 and 129: Report sections and consolidated se
- Page 130 and 131: 120
- Page 132 and 133: Using DVCP to connect to devices•
- Page 134 and 135: Branch office VPN with IPSecFrom Po
- Page 136 and 137: Branch office VPN with IPSecdescrib
- Page 138 and 139: Branch office VPN with IPSecbe acce
- Page 140 and 141: Configuring WatchGuard VPNConfiguri
- Page 142 and 143: Configuring WatchGuard VPN• Watch
- Page 144 and 145: Configuring shared servers for RUVP
- Page 146 and 147: Configuring the Firebox for Remote
- Page 148 and 149: Configuring the Firebox for Mobile
- Page 150 and 151: Configuring debugging optionsA prom
- Page 152 and 153: Preparing the client computers• P
- Page 154 and 155: Preparing the client computers10 Cl
- Page 156 and 157: Using Remote User PPTPInstalling a
- Page 158 and 159: Configuring debugging options148
- Page 160 and 161: CChangingan interface IP address 39
- Page 164 and 165: for blocked sites 44global preferen
- Page 166 and 167: pull-down menus 32services arena 32
- Page 168 and 169: introduction 37Routes 97network con
- Page 170: manager 17mobile user 18multiple-bo
exporting reports as 112HTTP 48, 60, 94, 99protocol 55proxied 60proxy 59types of services 55HTTP proxy 112HTTP proxy reportsHTTP detail 116most popular domains 116IIcon<strong>WatchGuard</strong> Service 60Iconsworking with wg_ Icons 50Implementing Authentication 83Index search, online help 15Infopackseditorial 8information alert 7news from <strong>WatchGuard</strong> 8software updates 7support flash 8threat response 7virus alert 8Information Alert 7InstallingEvent Processor on NT 74modem 80Quicksetup Wizard 35Interfacesexternal 35<strong>Firebox</strong> 35, 37, 97optional 35trusted 35Internet Explorer 3Internet Technical Support 12Intervalsetting for log roll over 75IP 48address range 122changing interface address 39IP addressentering for remote user sessions 136IP masquerading. See also Dynamic NATIP Spoofingpreventing with VPN 131IPSec 121AH 127and MUVPN 141branch office VPN 124changing policy order 129Configuringgateway with IPSec 125configuring a dynamic tunnel 127configuring a manual tunnel 126configuring BOVPN services 129creating a policy 128editing gateway 125ESP 126removing gateway 126security disposition 128IPSec with RUVPN 133, 141ipsec_users 88, 92, 134JJava 87KKey interval 123Key negotiation type, ISAKMP or manual 125Keyphrase 103searching LogViewer by 104Keyword search 15Known issues 12<strong>Firebox</strong> <strong>System</strong> 12LLaunch intervalsetting 77Licenseentering keys for MUVPN 138purchasing for mobile user VPN 137LiveSecurityand <strong>Firebox</strong> 1available options 17Broadcast Network 2, 5, 7Editorial 8Information Alert 7New from <strong>WatchGuard</strong> 8Rapid Response Team 7Support Flash 8Threat Response 7Virus Alert 8LiveSecurity Event Processordescribed 33opening 33, 106LiveSecurity Event Processor see also EventProcessorLiveSecurity Service 2activating 8Load average 96Local time 25Log and Notification hosts 95Log encryption keychanging on the <strong>Firebox</strong> 71setting 75Log filesworking with in LogViewer 106Log Hostlisting 95synchronizing for NT 72log host. See Event Processorlog messages in Traffic Monitorlimiting 30Log roll oversetting interval 75Logging 93architecture 70blocked ports 45, 78blocked sites 78customizing 76customizing by option 76default packet handling 78exporting 104failover 69<strong>User</strong> <strong>Guide</strong> 153
Change language