WatchGuard Firebox System 4.6 User Guide
WatchGuard Firebox System 4.6 User Guide WatchGuard Firebox System 4.6 User Guide
introduction 37Routes 97network configuration 37RUVPN 147activating remote user PPTP 136adding a domain name for NT 144adding members to built-in user groups 134adding new domain for NT workstation 144adding remote access users 134configuration checklist 133configure remote host for remote user PPTP 145configuring a Firebox for IPSec 137configuring debugging options 140configuring shared servers for 134distributing software and config files 139entering license keys 138entering WINS and DNS addresses 40installing client for Microsoft Networks 143installing dial-up adapter #2 143preparing Windows 95/98 platform 142preparing Windows NT platform 143rules for PPTP addresses 137saving configuration to Firebox 139setting up for Windows 2000 144starting remote user PPTP 146system requirements 142with IPSec 133, 141with PPTP 133, 141RUVPN with IPSecadding a user 138end-user configuration file 138license 137modifying existing user 139RUVPN with PPTPadding users 134configuring services 135designating a server 40entering IP addresses 136setting up remote host 136SSavingconfiguration file 23configuration file to Firebox 24configuration to local hard drive 24SchedulingHistorical Reports 114in WebBlocker 61Searchingfor entries in LogViewer 104online help 15online help index 15Secondary network 38adding 38Sectionsconsolidated 111in reports 110Securitydisposition 128fundamentals 1Security attacksaddress space probes 43port space probes 43spoofing 43Security policychangin IPSec order 129creating with IPSec 128default packet handling 43opening configuration file 23Security Suitefeatures 2Security toolsopening 31Security Triangle display 22, 28Selectingcontent types 53MIME headers 53Serviceactivating LiveSecurity 8configure WatchGuard icon 60configuring for Static NAT 66customizing 76filtered HTTP 55HTTP 60logging 76proxied-HTTP 55, 60proxy 60Service-based NAT 63configuring 65enabling 65using 65Servicesadding addresses 50adding existing 47configuring 19configuring for authentication 51configuring for BOVPN 129configuring incoming to allow VPN 132configuring SMTP proxy for 52creating new 48debugging network 93deleting 51HTTP 48incoming properties 49IP 48modifying 51one direction filter 49outgoing properties 50precedence 56properties, defining 49RUVPN with PPTP 135TCP based 48UDP based 48Services Arena 47ServiceWatch 94SettingFirebox interfaces 35LogViewer preferences 103Setting up LiveSecurity 35Shared serversconfiguring for RUVPN 134Simple NAT 63using default 65Sitesblocked 19SMTP 94, 99configuring proxy service 52incoming proxy 52masquerading options 54outgoing proxy 54SMTP proxy reportsSMTP detail 116SMTP summary 116Softwarerequirements,LiveSecurity 3system requirements for RUVPN 142158
Software Update 7SOHOediting tunnel properties 123rebooting 124removing tunnel 124SpamScreen 18Security Parameter Indexsee alsoSPI (Security Parameter Index) 126Spoofing 43, 95, 124Star networkDVCP 122StartingControl Center 27LogViewer 103WatchGuard Online Help 15Static NATadding external IP addresses 66configuring a service 66configuring a service for 66described 63setting on a service 66StatusFirebox 28StatusReportactive FTP connections 95active TCP connections 95ARP table 98authentication host information 96authentication list 98blocked sites list 95, 98interfaces 97load average 96log and notification hosts 95logging options 96memory 96network configuration 95packet counts 95processes status 96routes 97spoofing 95uptime and version information 94version information 94Supportgetting technical via Internet 12telephone support 12WatchGuard technical support 5Windows 2000 4Support Flash 8SynchronizingEvent Processors 72System Areabooting from 26TTCP 48Technical Support 5, 11accessing frequently asked questions 11by telephone 12frequently asked questions 11Internet 12known issues 12telephone support 12Telephone Technical Support 12telnet 99Text fileexporting reports to 113Threat Response 7Time filters 111Time spanssetting in reports 111Time zone 25Timeout disconnects 81Topic search 15Traffic Monitorlimiting messages 30Traffice volume indicator 28TrainingFirebox System Basics 13instructor-led 14interactive training system 13Transparent proxies 52TrendMicro 8Trusted interface 35Trusted Networkdefinition 22Tunnel 126creation using DVCP Wizard 122editing to SOHO 123removing SOHO 124with dynamic security 127Tunnelscreated to dropped-in devices 128monitoring BOVPN 28tunnelsviewing status on Control Center 28UUDP 48Unconnected network addresses 44Uptime 94URL database 59User authentication, see also AuthenticationUsersadding for remote access 134Users group 14Usinghost aliases 85Using simple dynamic NAT 64VViewingblocked sites list 46hosts on HostWatch 100log files 103Viewschanging in Policy Manager 32Virus Alert 8VPN 1, 121allow globally 130allow selectively 130branch office 119changing remote network entries 131configuring 130configuring incoming services to allow 132configuring key negotiation type 125DVCP 122editing IPSec gateway 125User Guide 159
- Page 118 and 119: Working with log files108
- Page 120 and 121: Specifying report sectionsCreating
- Page 122 and 123: Exporting reports6 Enter the number
- Page 124 and 125: Scheduling and running reportsDelet
- Page 126 and 127: Report sections and consolidated se
- Page 128 and 129: Report sections and consolidated se
- Page 130 and 131: 120
- Page 132 and 133: Using DVCP to connect to devices•
- Page 134 and 135: Branch office VPN with IPSecFrom Po
- Page 136 and 137: Branch office VPN with IPSecdescrib
- Page 138 and 139: Branch office VPN with IPSecbe acce
- Page 140 and 141: Configuring WatchGuard VPNConfiguri
- Page 142 and 143: Configuring WatchGuard VPN• Watch
- Page 144 and 145: Configuring shared servers for RUVP
- Page 146 and 147: Configuring the Firebox for Remote
- Page 148 and 149: Configuring the Firebox for Mobile
- Page 150 and 151: Configuring debugging optionsA prom
- Page 152 and 153: Preparing the client computers• P
- Page 154 and 155: Preparing the client computers10 Cl
- Page 156 and 157: Using Remote User PPTPInstalling a
- Page 158 and 159: Configuring debugging options148
- Page 160 and 161: CChangingan interface IP address 39
- Page 162 and 163: monitors 2, 32, 93BandwidthMeter 94
- Page 164 and 165: for blocked sites 44global preferen
- Page 166 and 167: pull-down menus 32services arena 32
- Page 170: manager 17mobile user 18multiple-bo
Software Update 7SOHOediting tunnel properties 123rebooting 124removing tunnel 124SpamScreen 18Security Parameter Indexsee alsoSPI (Security Parameter Index) 126Spoofing 43, 95, 124Star networkDVCP 122StartingControl Center 27LogViewer 103<strong>WatchGuard</strong> Online Help 15Static NATadding external IP addresses 66configuring a service 66configuring a service for 66described 63setting on a service 66Status<strong>Firebox</strong> 28StatusReportactive FTP connections 95active TCP connections 95ARP table 98authentication host information 96authentication list 98blocked sites list 95, 98interfaces 97load average 96log and notification hosts 95logging options 96memory 96network configuration 95packet counts 95processes status 96routes 97spoofing 95uptime and version information 94version information 94Supportgetting technical via Internet 12telephone support 12<strong>WatchGuard</strong> technical support 5Windows 2000 4Support Flash 8SynchronizingEvent Processors 72<strong>System</strong> Areabooting from 26TTCP 48Technical Support 5, 11accessing frequently asked questions 11by telephone 12frequently asked questions 11Internet 12known issues 12telephone support 12Telephone Technical Support 12telnet 99Text fileexporting reports to 113Threat Response 7Time filters 111Time spanssetting in reports 111Time zone 25Timeout disconnects 81Topic search 15Traffic Monitorlimiting messages 30Traffice volume indicator 28Training<strong>Firebox</strong> <strong>System</strong> Basics 13instructor-led 14interactive training system 13Transparent proxies 52TrendMicro 8Trusted interface 35Trusted Networkdefinition 22Tunnel 126creation using DVCP Wizard 122editing to SOHO 123removing SOHO 124with dynamic security 127Tunnelscreated to dropped-in devices 128monitoring BOVPN 28tunnelsviewing status on Control Center 28UUDP 48Unconnected network addresses 44Uptime 94URL database 59<strong>User</strong> authentication, see also Authentication<strong>User</strong>sadding for remote access 134<strong>User</strong>s group 14Usinghost aliases 85Using simple dynamic NAT 64VViewingblocked sites list 46hosts on HostWatch 100log files 103Viewschanging in Policy Manager 32Virus Alert 8VPN 1, 121allow globally 130allow selectively 130branch office 119changing remote network entries 131configuring 130configuring incoming services to allow 132configuring key negotiation type 125DVCP 122editing IPSec gateway 125<strong>User</strong> <strong>Guide</strong> 159
Change language