Watchguard Firebox SOHO 6 Uživatelská příručka

Procházejte online nebo si stáhněte Uživatelská příručka pro Hardwarové brány firewall Watchguard Firebox SOHO 6. Watchguard Firebox SOHO 6 User guide Uživatelská příručka

  • Stažení
  • Přidat do mých příruček
  • Tisk
  • Strana
    / 200
  • Tabulka s obsahem
  • ŘEŠENÍ PROBLÉMŮ
  • KNIHY
  • Hodnocené. / 5. Na základě hodnocení zákazníků

Shrnutí obsahu

Strany 1 - User Guide

WatchGuard®Firebox® SOHO 6User GuideSOHO 6 - firmware version 6.3

Strany 2 - Certifications and Notices

x WatchGuard Firebox SOHO 6 3. All advertising materials mentioning features or use of this software must display the following acknowledgment: "

Strany 3 - VCCI Notice Class A ITE

Chapter 7: Configure Logging78 WatchGuard Firebox SOHO 6NOTESyslog traffic is not encrypted. Syslog messages that are sent through the Internet decrea

Strany 4 - Declaration of Conformity

User Guide 79Setting the System Time3 Select a time zone from the drop-down list.4 Select the Adjust for daylight savings time checkbox.5 Click Submit

Strany 5 - User Guide v

Chapter 7: Configure Logging80 WatchGuard Firebox SOHO 6

Strany 6

User Guide 81CHAPTER 8 SOHO 6 WebBlockerWebBlocker is an option for the SOHO 6 that allows the system administrator to control which Web sites the u

Strany 7 - User Guide vii

Chapter 8: SOHO 6 WebBlocker82 WatchGuard Firebox SOHO 6Web site not in the WebBlocker databaseIf the Web site is not in the WatchGuard WebBlocker dat

Strany 8

User Guide 83Purchasing and Activating the SOHO 6 WebBlockerPurchasing and Activating the SOHO 6 WebBlockerTo use WatchGuard SOHO 6 WebBlocker, you mu

Strany 9 - User Guide ix

Chapter 8: SOHO 6 WebBlocker84 WatchGuard Firebox SOHO 63 Select the Enable WebBlocker checkbox.4 Type a passphrase in the Full Access Password field.

Strany 10

User Guide 85Configuring the SOHO 6 WebBlocker3 Click New to create a group name and profile.

Strany 11 - User Guide xi

Chapter 8: SOHO 6 WebBlocker86 WatchGuard Firebox SOHO 64Define a Group Name and select the types of content to filter for this group.5 Click Submit.A

Strany 12

User Guide 87WebBlocker Categories8Use the Group drop-down list to assign the new user to a given group.9 Click Submit.NOTETo remove a user or group,

Strany 13 - User Guide xiii

User Guide xi 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the

Strany 14

Chapter 8: SOHO 6 WebBlocker88 WatchGuard Firebox SOHO 6online sports, or financial betting, including non-monetary dares. Militant/extremistPictures

Strany 15 - Contents

User Guide 89WebBlocker CategoriesGross DepictionsPictures or text describing anyone or anything that is either crudely vulgar, grossly deficient in c

Strany 16

Chapter 8: SOHO 6 WebBlocker90 WatchGuard Firebox SOHO 6Sexual ActsPictures or text exposing anyone or anything involved in explicit sexual acts and/o

Strany 17 - User Guide xvii

User Guide 91CHAPTER 9 VPN—Virtual Private NetworkingThis chapter explains how to use the Branch Office VPN upgrade option for the SOHO 6.Why Create

Strany 18

Chapter 9: VPN—Virtual Private Networking92 WatchGuard Firebox SOHO 6NOTEIPSec-compatible appliances include the Firebox SOHO 6, the Firebox II/III, a

Strany 19 - User Guide xix

User Guide 93What You NeedIP Address Table (example):Item DescriptionAssigned ByExternal IP AddressThe IP address that identifies the IPSec-compatible

Strany 20

Chapter 9: VPN—Virtual Private Networking94 WatchGuard Firebox SOHO 6Enabling the VPN upgradeTo activate an upgrade option, you must enter a license k

Strany 21 - User Guide xxi

User Guide 95Setting Up Multiple SOHO 6 to SOHO 6 VPN TunnelsSetting Up Multiple SOHO 6 to SOHO 6VPN TunnelsAn administrator of a SOHO 6 can configure

Strany 22

Chapter 9: VPN—Virtual Private Networking96 WatchGuard Firebox SOHO 64 Type the Name and Shared Secret for the VPN tunnel.The shared secret is a passp

Strany 23 - Introduction

User Guide 97Setting Up Multiple SOHO 6 to SOHO 6 VPN Tunnelsexternal IP address is dynamic, select Aggressive Mode. If the external IP address is sta

Strany 24 - .wgl and .idx files

xii WatchGuard Firebox SOHO 65. Products derived from this software may not be called "mod_ssl" nor may "mod_ssl" appear in their

Strany 25 - How a Firewall Works

Chapter 9: VPN—Virtual Private Networking98 WatchGuard Firebox SOHO 6intervals to maintain the connection. If the tunnel connection closes, the SOHO 6

Strany 26 - 4 WatchGuard Firebox SOHO 6

User Guide 99Creating a VPN Tunnel to a SOHO 6 with an IPSec-Compliant ApplianceCreating a VPN Tunnel to a SOHO 6 with an IPSec-Compliant ApplianceIns

Strany 27 - Port numbers

Chapter 9: VPN—Virtual Private Networking100 WatchGuard Firebox SOHO 6Configuring Split TunnelingThe split tunneling feature allows the system adminis

Strany 28 - SOHO 6 Hardware Description

User Guide 101Viewing the VPN Statisticsallows users on the trusted network to access the networks connected by VPN tunnels to the local SOHO 6. If yo

Strany 29 - SOHO 6 front and rear views

Chapter 9: VPN—Virtual Private Networking102 WatchGuard Firebox SOHO 6How do I get a static external IP address?The external IP address for your compu

Strany 30 - 8 WatchGuard Firebox SOHO 6

User Guide 103Frequently Asked QuestionsHow do I obtain a VPN upgrade license key?You can purchase a license key for an upgrade from the WatchGuard We

Strany 31 - Storage humidity 5% to 90%

Chapter 9: VPN—Virtual Private Networking104 WatchGuard Firebox SOHO 6

Strany 32 - 10 WatchGuard Firebox SOHO 6

User Guide 105CHAPTER 10 MUVPN ClientsThe MUVPN client is a software application that is installed on a remote computer. This application makes a se

Strany 33 - Installation

Chapter 10: MUVPN Clients106 WatchGuard Firebox SOHO 6provides additional security for the remote users of your network by acting as a software firewa

Strany 34 - Before you Begin

User Guide 107Configuring the SOHO 6 for MUVPN Clients4 Type a user name and a shared key in the applicable fields.The user name is used as the e-mail

Strany 35 - User Guide 13

User Guide xiiiTHIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRA

Strany 36 - 14 WatchGuard Firebox SOHO 6

Chapter 10: MUVPN Clients108 WatchGuard Firebox SOHO 6Preparing the Remote Computers to Use the MUVPN ClientThe MUVPN client is only compatible with W

Strany 37 - User Guide 15

User Guide 109Preparing the Remote Computers to Use the MUVPN ClientNOTEYou cannot use the MUVPN virtual adapter. Make sure this is disabled.Windows 9

Strany 38 - 16 WatchGuard Firebox SOHO 6

Chapter 10: MUVPN Clients110 WatchGuard Firebox SOHO 68 Click OK to close the Network window.Click Cancel if you do not want to save the changes.9 Reb

Strany 39 - 4 Click Properties

User Guide 111Preparing the Remote Computers to Use the MUVPN Client3 Click the Windows Setup tab.The Windows Setup dialog box appears. The operating

Strany 40 - 18 WatchGuard Firebox SOHO 6

Chapter 10: MUVPN Clients112 WatchGuard Firebox SOHO 6NOTEThe DNS server on the private network behind the SOHO 6 must be the first server in the list

Strany 41 - User Guide 19

User Guide 113Preparing the Remote Computers to Use the MUVPN Client2 Double-click the Network icon.The Network window appears.3 Click the Services ta

Strany 42 - 20 WatchGuard Firebox SOHO 6

Chapter 10: MUVPN Clients114 WatchGuard Firebox SOHO 63 Click the Protocols tab and then select the TCP/IP protocol.4 Click Properties.The Microsoft T

Strany 43 - User Guide 21

User Guide 115Preparing the Remote Computers to Use the MUVPN Client - File and Printer Sharing for Microsoft Networks - Client for Microsoft Networks

Strany 44 - 22 WatchGuard Firebox SOHO 6

Chapter 10: MUVPN Clients116 WatchGuard Firebox SOHO 6Configuring the WINS and DNS settingsThe remote computer must be able to communicate with the WI

Strany 45 - SOHO 6 Basics

User Guide 117Preparing the Remote Computers to Use the MUVPN Client9 Click OK to close the Advanced TCP/IP Settings window, click OK to close the Int

Strany 46 - 24 WatchGuard Firebox SOHO 6

xiv WatchGuard Firebox SOHO 6Abbreviations Used in this Guide3DES Triple Data Encryption StandardDES Data Encryption StandardDNS Domain Name ServiceDH

Strany 47 - Factory Default Settings

Chapter 10: MUVPN Clients118 WatchGuard Firebox SOHO 63 Select the Internet Protocol (TCP/IP) network protocol and then click OK.Installing the File a

Strany 48 - 26 WatchGuard Firebox SOHO 6

User Guide 119Preparing the Remote Computers to Use the MUVPN Client3 Click Advanced.The Advanced TCP/IP Settings window appears.4 Click the DNS tab a

Strany 49 - LiveSecurity Service

Chapter 10: MUVPN Clients120 WatchGuard Firebox SOHO 6Installing and Configuring the MUVPN ClientThe MUVPN installation files are available at the Wat

Strany 50 - Rebootting the SOHO 6

User Guide 121Installing and Configuring the MUVPN Client8 Do not change the default selections. Click Next.The Start Copying Files window appears.9 C

Strany 51 - User Guide 29

Chapter 10: MUVPN Clients122 WatchGuard Firebox SOHO 62 Double-click the MUVPN client icon.The Security Policy Editor window appears.NOTEThe ZoneAlarm

Strany 52 - 30 WatchGuard Firebox SOHO 6

User Guide 123Installing and Configuring the MUVPN Client8 When you set the Subnet and Mask addresses, you define whether or not an MUVPN user can acc

Strany 53 - Network Interfaces

Chapter 10: MUVPN Clients124 WatchGuard Firebox SOHO 6Defining the My Identity settingsTo define the My Identity settings, follow these steps.1Expand

Strany 54 - 32 WatchGuard Firebox SOHO 6

User Guide 125Installing and Configuring the MUVPN Client 6 Select Options => Global Policy Settings.The Global Policy Settings window appears.7 Se

Strany 55 - The page refreshes

Chapter 10: MUVPN Clients126 WatchGuard Firebox SOHO 6 8 Select None from the Select Certificate drop-down list.9 Select E-mail Address from the ID Ty

Strany 56 - 34 WatchGuard Firebox SOHO 6

User Guide 127Installing and Configuring the MUVPN Client 15 Type the exact text of the MUVPN client passphrase entered on the SOHO 6 and then click O

Strany 57 - User Guide 35

User Guide xvContentsCHAPTER 1 Introduction ...1Package Contents ...

Strany 58 - 36 WatchGuard Firebox SOHO 6

Chapter 10: MUVPN Clients128 WatchGuard Firebox SOHO 64 Select Pre-Shared Key from the Authentication Method drop-down list.NOTEPhase 1 values must be

Strany 59 - User Guide 37

User Guide 129Installing and Configuring the MUVPN Client 10 Select Both from the SA Life drop-down list.11 Type 86400 in the Seconds field and 8192 i

Strany 60 - 38 WatchGuard Firebox SOHO 6

Chapter 10: MUVPN Clients130 WatchGuard Firebox SOHO 6Uninstalling the MUVPN clientFollow these directions to uninstall the MUVPN client. WatchGuard r

Strany 61 - Configuring Static Routes

User Guide 131Configuring the SOHO 6 for MUVPN Clients Using Pocket PCNOTEThe ZoneAlarm personal firewall settings are stored in the following directo

Strany 62 - The Add Route page opens

Chapter 10: MUVPN Clients132 WatchGuard Firebox SOHO 65 Type the virtual IP address in the applicable field.The virual IP address is the same as the I

Strany 63 - Viewing Network Statistics

User Guide 133Connecting and Disconnecting the MUVPN Client2 If the MUVPN client is not active, right-click the icon and select Activate Security Poli

Strany 64 - 42 WatchGuard Firebox SOHO 6

Chapter 10: MUVPN Clients134 WatchGuard Firebox SOHO 6The MUVPN client is ready to establish a secure, MUVPN tunnel connection. The red bar on the rig

Strany 65 - Configuring the Dual ISP Port

User Guide 135Connecting and Disconnecting the MUVPN ClientActivated and ConnectedThe MUVPN client has established at least one secure, MUVPN tunnel c

Strany 66 - 44 WatchGuard Firebox SOHO 6

Chapter 10: MUVPN Clients136 WatchGuard Firebox SOHO 6Allowing the MUVPN client through the personal firewallThe following programs are associated wit

Strany 67 - User Guide 45

User Guide 137Connecting and Disconnecting the MUVPN ClientFrom the New Program alert window:1 Select the Remember this answer the next time I use thi

Strany 68 - 46 WatchGuard Firebox SOHO 6

xvi WatchGuard Firebox SOHO 6Examining and recording the current TCP/IP settings...12Dis

Strany 69 - User Guide 47

Chapter 10: MUVPN Clients138 WatchGuard Firebox SOHO 6Monitoring the MUVPN Client ConnectionThe Log Viewer and the Connection Monitor are installed wi

Strany 70 - 7 Click Submit

User Guide 139The ZoneAlarm Personal Firewall - when a phase 2 SA connection has not yet been made - when a phase 2 SA connection cannot be made• A ke

Strany 71 - Administrative

Chapter 10: MUVPN Clients140 WatchGuard Firebox SOHO 6This alert appears whenever one of your programs attempts to access the Internet or your local n

Strany 72 - System security

User Guide 141The ZoneAlarm Personal FirewallIn the example above, the Internet Explorer Web browser application has been launched. The application at

Strany 73 - SOHO 6 Remote Management

Chapter 10: MUVPN Clients142 WatchGuard Firebox SOHO 6Shutting down ZoneAlarmFrom the Windows desktop system tray:1 Right-click the ZoneAlarm icon sho

Strany 74 - 52 WatchGuard Firebox SOHO 6

User Guide 143Troubleshooting Tips3 Click Yes.The Select Uninstall Method window appears.4Make sure Automatic is selected and then click Next.5 Click

Strany 75 - Setting up VPN Manager Access

Chapter 10: MUVPN Clients144 WatchGuard Firebox SOHO 6When the MUVPN client is not in use, both ZoneAlarm and the MUVPN client should be deactivated.F

Strany 76 - These passphrases

User Guide 145Troubleshooting Tipstransmission of the login information. Make sure you deactivate ZoneAlarm each time you disconnect the MUVPN connect

Strany 77 - Updating the Firmware

Chapter 10: MUVPN Clients146 WatchGuard Firebox SOHO 6The mapped drive appears in the My Computer window. Even if you select the Reconnect at Logon ch

Strany 78 - 56 WatchGuard Firebox SOHO 6

User Guide 147CHAPTER 11 Using VPNforceThe VPNforcetm upgrade activates the SOHO 6 optional interface. The optional interface is labeled OPT on the

Strany 79 - The Upgrade page opens

User Guide xviiConfiguring additional computers on the trusted network...38Configuring the tr

Strany 80 - 58 WatchGuard Firebox SOHO 6

Chapter 11: Using VPNforce148 WatchGuard Firebox SOHO 6NOTETo use this upgrade option, you must access your corporate network through a VPN tunnel fro

Strany 81 - User Guide 59

User Guide 149Using VPNforce to Connect to your Corporate Network3 Select the Enable Optional Network checkbox.4 Type the IP address and the subnet ma

Strany 82 - 60 WatchGuard Firebox SOHO 6

Chapter 11: Using VPNforce150 WatchGuard Firebox SOHO 68 To configure the DHCP relay server, select the Enable DHCP Relay checkbox.9 Type the IP addre

Strany 83 - Firewall Settings

User Guide 151Using VPNforce and the MUVPN Client Upgrades to Enforce Your CorporateUsing VPNforce and the MUVPN Client Upgrades to Enforce Your Corpo

Strany 84 - Common services

Chapter 11: Using VPNforce152 WatchGuard Firebox SOHO 63 Click the Add button.The Edit MUVPN Client page appears.4 Type a user name and a passphrase i

Strany 85 - Creating a custom service

User Guide 153Using VPNforce and the MUVPN Client Upgrades to Enforce Your Corporate5 Type an unused IP address from the trusted network, which will b

Strany 86 - 64 WatchGuard Firebox SOHO 6

Chapter 11: Using VPNforce154 WatchGuard Firebox SOHO 63 Type a unique name for the new connection.If this will be a unique policy for a specific user

Strany 87 - Blocking External Sites

User Guide 155Using VPNforce and the MUVPN Client Upgrades to Enforce Your Corporate10 Select IP Address from the ID Type drop list and then type the

Strany 88 - The Blocked Sites page opens

Chapter 11: Using VPNforce156 WatchGuard Firebox SOHO 62 Select My Identity.The My Identity and Internet Interface settings appear to the right. 3 Sel

Strany 89 - Firewall Options

User Guide 157Using VPNforce and the MUVPN Client Upgrades to Enforce Your Corporate4 Select the Allow to Specify Internal Network Address checkbox an

Strany 90 - 68 WatchGuard Firebox SOHO 6

xviii WatchGuard Firebox SOHO 6Denying FTP access to the trusted network interface...68SOCKS i

Strany 91 - User Guide 69

Chapter 11: Using VPNforce158 WatchGuard Firebox SOHO 6 12 Type the exact text of the MUVPN client passphrase entered on the Firebox SOHO 6 appliance

Strany 92 - External Network

User Guide 159Using VPNforce and the MUVPN Client Upgrades to Enforce Your Corporate4 Select Pre-Shared Key from the Authentication Method drop list.N

Strany 93 - User Guide 71

Chapter 11: Using VPNforce160 WatchGuard Firebox SOHO 6 10 Select Both from the SA Life drop list and then type 86400 in the Seconds field and 8192 in

Strany 94 - 5 Click Submit

User Guide 161Using the MUVPN client to Secure a Wireless NetworkUsing the MUVPN client to Secure a Wireless NetworkThe VPNforce upgrade and the MUVPN

Strany 95 - Configure Logging

Chapter 11: Using VPNforce162 WatchGuard Firebox SOHO 6

Strany 96 - Viewing SOHO 6 Log Messages

User Guide 163CHAPTER 12 Support ResourcesTroubleshooting TipsIf you have problems during the installation and the configuration of your SOHO 6, ref

Strany 97 - Event Processor Log Host

Chapter 12: Support Resources164 WatchGuard Firebox SOHO 6If the Mode light is blinks:The SOHO 6 cannot connect to the external network. Possible caus

Strany 98 - 76 WatchGuard Firebox SOHO 6

User Guide 165Troubleshooting TipsI can't get a certain SOHO 6 feature to work with a DSL modem.Some DSL routers implement NAT firewalls. An exte

Strany 99 - User Guide 77

Chapter 12: Support Resources166 WatchGuard Firebox SOHO 6I can connect to the System Status page; why can’t I browse the Internet?If you can access t

Strany 100 - Setting the System Time

User Guide 167Troubleshooting Tips2 Type the IP address of the trusted network in your browser window to connect to the System Status page of the SOHO

Strany 101 - Submit

User Guide xixCreating a VPN Tunnel to a SOHO 6 with an IPSec-Compliant Appliance ...99Special considerations ...

Strany 102 - 80 WatchGuard Firebox SOHO 6

Chapter 12: Support Resources168 WatchGuard Firebox SOHO 66 Click Submit.How do I set up and disable WebBlocker?1 Type the IP address of the trusted n

Strany 103 - SOHO 6 WebBlocker

User Guide 169Troubleshooting TipsHow do I allow incoming IP, or uncommon TCP and UDP protocols?Record the IP address of the computer that is to recei

Strany 104 - Chapter 8: SOHO 6 WebBlocker

Chapter 12: Support Resources170 WatchGuard Firebox SOHO 6SOHO 6 configuration file. These steps apply to using a command prompt with Windows 2000 or

Strany 105 - WebBlocker

User Guide 171Troubleshooting TipsMake sure that the two appliances use the same encryption and authentication method.How do I set up my SOHO 6 for VP

Strany 106 - 84 WatchGuard Firebox SOHO 6

Chapter 12: Support Resources172 WatchGuard Firebox SOHO 6Contacting Technical SupportOnline documentation and FAQsDocumentation in PDF format, tutori

Strany 107 - User Guide 85

User Guide 173Index100 indicator 8AAdd Gateway page 95, 100Add MUVPN Client page 106Add Route page 40Automatically restore lost connections checkbox35

Strany 108 - The New User page opens

174 WatchGuard Firebox SOHO 6 FFAQs 172File and Printer Sharing for Microsoft Networksand Windows XP118File and Printer Sharing for Microsoft Networks

Strany 109 - WebBlocker Categories

User Guide 175MMAC address of SOHO 6 166MAC address override 70Macintosh operating system 165Manual VPN page 95, 100Mode indicator 8MODE light 163MUVP

Strany 110 - 88 WatchGuard Firebox SOHO 6

176 WatchGuard Firebox SOHO 6 Optional Network Configuration148Routes 40, 46SOHO 6 Administration 49Syslog Logging 77System Security 49, 50System Stat

Strany 111 - User Guide 89

User Guide 177configuring access to 49configuring for dynamic addresses32configuring for PPPoE 34configuring for static addressing32configuring VPN tu

Strany 112 - 90 WatchGuard Firebox SOHO 6

ii WatchGuard Firebox SOHO 6Certifications and NoticesFCC CertificationThis appliance has been tested and found to comply with limits for a Class A di

Strany 113 - Networking

xx WatchGuard Firebox SOHO 6Connecting and Disconnecting the MUVPN Client ...132Connecting the MUVPN client ...132The MUVP

Strany 114 - 92 WatchGuard Firebox SOHO 6

178 WatchGuard Firebox SOHO 6 purchasing 171setting up access to 53–54setting up SOHO 6 for 171VPN Manager Accessviewing status of24VPN Manager Access

Strany 115 - IP Address Table (example):

User Guide xxiCHAPTER 11 Using VPNforce ...147Using VPNforce to Connect to your Corporate Network ...

Strany 116 - Enabling the VPN upgrade

xxii WatchGuard Firebox SOHO 6

Strany 117 - VPN Tunnels

User Guide 1CHAPTER 1 IntroductionThe purpose of this guide is to help users of the WatchGuard® Firebox® SOHO 6 and Firebox® SOHO 6tc set up and con

Strany 118 - 96 WatchGuard Firebox SOHO 6

Chapter 1: Introduction2 WatchGuard Firebox SOHO 6In this guide, the name SOHO 6 refers to both the SOHO 6 as well as the SOHO 6tc. The only differenc

Strany 119 - User Guide 97

User Guide 3Package ContentsPackage ContentsMake sure that the package contains all of these items:• SOHO 6 QuickStart Guide•User Guide• LiveSecurity

Strany 120 - 98 WatchGuard Firebox SOHO 6

Chapter 1: Introduction4 WatchGuard Firebox SOHO 6The SOHO 6 controls all traffic between the external network (the Internet) and the trusted network

Strany 121 - IPSec-Compliant Appliance

User Guide 5How Information Travels on the Internetand reassembles the data; for example, data that may consist of an email message or a program file.

Strany 122 - Using MUVPN Clients

Chapter 1: Introduction6 WatchGuard Firebox SOHO 6How the SOHO 6 Processes InformationServicesA service is the group of protocols and port numbers for

Strany 123 - Frequently Asked Questions

User Guide 7SOHO 6 Hardware DescriptionFaster ProcessorThe SOHO 6 has a new network processor that runs at a speed of 150 MHz. Ethernet and encryption

Strany 124 - Why is ping not working?

User Guide iiiVCCI Notice Class A ITE

Strany 125 - How do I enable a VPN tunnel?

Chapter 1: Introduction8 WatchGuard Firebox SOHO 6100The 100 indicator is lit when a port is in use at 100 Mb. The 100 indicator is not lit when a por

Strany 126 - 104 WatchGuard Firebox SOHO 6

User Guide 9SOHO 6 Hardware DescriptionRESET buttonPush the reset button to reset the SOHO 6 to the factory default configuration. See “Resetting the

Strany 127 - MUVPN Clients

Chapter 1: Introduction10 WatchGuard Firebox SOHO 6

Strany 128 - 106 WatchGuard Firebox SOHO 6

User Guide 11CHAPTER 2 InstallationThe SOHO 6 protects computers that are connected to it by Ethernet cable. Follow the procedures in this chapter t

Strany 129 - User Guide 107

Chapter 2: Installation12 WatchGuard Firebox SOHO 6Before you BeginBefore you install the SOHO 6, you must have the following:• A computer with a 10/1

Strany 130 - MUVPN Client

User Guide 13Before you BeginMicrosoft Windows 2000 and Windows XP1 Select Start => Programs => Accessories => Command Prompt.2 At the prompt

Strany 131 - User Guide 109

Chapter 2: Installation14 WatchGuard Firebox SOHO 62 Record the TCP/IP settings in the table provided.3 Exit the TCP/IP configuration screen.NOTEIf yo

Strany 132 - 110 WatchGuard Firebox SOHO 6

User Guide 15Before you BeginThe following instructions show how to disable the HTTP proxy setting in three browser applications. If a different brows

Strany 133 - User Guide 111

Chapter 2: Installation16 WatchGuard Firebox SOHO 6Internet Explorer 5.0, 5.5, and 6.01 Open Internet Explorer.2 Select Tools => Internet Options.

Strany 134 - 112 WatchGuard Firebox SOHO 6

User Guide 17Before you Begin4 Click Properties.The network connection properties dialog box appears.5 Double-click the Internet Protocol (TCP/IP) com

Strany 135 - User Guide 113

iv WatchGuard Firebox SOHO 6Declaration of Conformity

Strany 136 - 114 WatchGuard Firebox SOHO 6

Chapter 2: Installation18 WatchGuard Firebox SOHO 66 Select the Obtain an IP address automatically and the Obtain DNS server address automatically che

Strany 137 - User Guide 115

User Guide 19Physically Connecting to the SOHO 6Cabling the SOHO 6 for one to four appliancesA maximum of four computers, printers, scanners, or other

Strany 138 - 116 WatchGuard Firebox SOHO 6

Chapter 2: Installation20 WatchGuard Firebox SOHO 65 If you connect to the Internet through a DSL modem or cable modem, reconnect the power supply to

Strany 139 - User Guide 117

User Guide 21Physically Connecting to the SOHO 6The base model SOHO 6 includes a ten-seat license. This license allows a maximum of ten appliances on

Strany 140 - 118 WatchGuard Firebox SOHO 6

Chapter 2: Installation22 WatchGuard Firebox SOHO 64 Connect an Ethernet cable between each of the computers and an uplink port on the Ethernet hub.5

Strany 141 - User Guide 119

User Guide 23CHAPTER 3 SOHO 6 BasicsThe configuration of the SOHO 6 is made through Web pages contained in the software of the SOHO 6. You can conne

Strany 142 - Installing the MUVPN client

Chapter 3: SOHO 6 Basics24 WatchGuard Firebox SOHO 6The System Status page is the main configuration page of the SOHO 6. A display of information abou

Strany 143 - Configuring the MUVPN client

User Guide 25Factory Default Settings• The status of the upgrade options• Configuration information for the trusted network and the external network•

Strany 144 - 122 WatchGuard Firebox SOHO 6

Chapter 3: SOHO 6 Basics26 WatchGuard Firebox SOHO 6System SecurityThe System Security is disabled. The system administrator name and system administr

Strany 145 - This is the default setting

User Guide 27Registering Your SOHO 6 and Activating the LiveSecurity Service6 Connect the power supply.The PWR indicator is on and the reset is comple

Strany 146 - 124 WatchGuard Firebox SOHO 6

User Guide vWATCHGUARD SOHO SOFTWARE END-USER LICENSE AGREEMENTWATCHGUARD SOHO SOFTWAREEND-USER LICENSE AGREEMENTIMPORTANT - READ CAREFULLY BEFORE ACC

Strany 147 - User Guide 125

Chapter 3: SOHO 6 Basics28 WatchGuard Firebox SOHO 6NOTETo activate the LiveSecurity Service, your browser must have JavaScript enabled.If you have a

Strany 148 - The text field is enabled

User Guide 29Rebootting the SOHO 62 Click Reboot.OR1 Disconnect and reconnect the power supply.To reboot a SOHO 6 located on a remote system, use one

Strany 149 - User Guide 127

Chapter 3: SOHO 6 Basics30 WatchGuard Firebox SOHO 6

Strany 150 - A Proposal entry appears

User Guide 31CHAPTER 4 Configure the Network InterfacesExternal Network ConfigurationWhen you configure the external network, you select the method

Strany 151

Chapter 4: Configure the Network Interfaces32 WatchGuard Firebox SOHO 6• If the assignment is static, all computers on the network have a permanently

Strany 152 - Uninstalling the MUVPN client

User Guide 33External Network Configurationconfiguration causes the ISP to communicate with the SOHO 6 and not your computer.1 Type the IP address of

Strany 153 - Using Pocket PC

Chapter 4: Configure the Network Interfaces34 WatchGuard Firebox SOHO 6Configuring the SOHO 6 external network for PPPoEIf your ISP assigns IP address

Strany 154 - Connecting the MUVPN client

User Guide 35External Network Configuration5 Type the PPPoE login name and domain as well as the PPPoE password supplied by your ISP in the applicable

Strany 155 - The MUVPN client icon

Chapter 4: Configure the Network Interfaces36 WatchGuard Firebox SOHO 6To set the external network link speed:1 Type the IP address of the trusted net

Strany 156 - 134 WatchGuard Firebox SOHO 6

User Guide 37Configuring the Trusted Network3 Type the IP address and the subnet mask in the applicable fields.4 Select the Enable DHCP Server on the

Strany 157 - User Guide 135

vi WatchGuard Firebox SOHO 6If you are accessing the SOFTWARE PRODUCT via a Web based installer program, you are granted the following additional righ

Strany 158 - 136 WatchGuard Firebox SOHO 6

Chapter 4: Configure the Network Interfaces38 WatchGuard Firebox SOHO 610 Reboot the SOHO 6.The SOHO 6 will send all DHCP requests to the specified, r

Strany 159 - User Guide 137

User Guide 39Configuring Static RoutesConfiguring the trusted network with static addressesTo disable the SOHO 6 DHCP server and make static address a

Strany 160 - Using the Connection Monitor

Chapter 4: Configure the Network Interfaces40 WatchGuard Firebox SOHO 62 From the navigation bar at left, selectNetwork => Routes.The Routes page o

Strany 161 - User Guide 139

User Guide 41Viewing Network Statistics6 Click Submit.To remove a route, select the route and click Remove.Viewing Network StatisticsThe Network Stati

Strany 162 - 140 WatchGuard Firebox SOHO 6

Chapter 4: Configure the Network Interfaces42 WatchGuard Firebox SOHO 6Configuring the Dynamic DNS ServiceThis feature allows you to register the exte

Strany 163 - User Guide 141

User Guide 43Configuring the OPT Port UpgradesNOTEThe SOHO 6 receives the IP address of members.dyndns.org when it connects to the time server.5 Click

Strany 164 - Uninstalling ZoneAlarm

Chapter 4: Configure the Network Interfaces44 WatchGuard Firebox SOHO 6The SOHO 6 uses two methods to determine if the external interface connection i

Strany 165 - Troubleshooting Tips

User Guide 45Configuring the OPT Port UpgradesAfter you upgrade the SOHO 6 to activate this upgrade option, follow these instructions to complete the

Strany 166 - 144 WatchGuard Firebox SOHO 6

Chapter 4: Configure the Network Interfaces46 WatchGuard Firebox SOHO 68 Click Submit.Configuring the VPNforce™ PortThe VPNforce Port upgrade activate

Strany 167 - How do I map a network drive?

User Guide 47Configuring the OPT Port Upgrades3 To enable VPNforce, select the Enable Optional Network checkbox.4 Type the IP address, DHCP Server, an

Strany 168 - 146 WatchGuard Firebox SOHO 6

User Guide vii election.Disclaimer and Release. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD, AND YOUR REMEDIES, SET FORTH IN PARAGRAPH

Strany 169 - Using VPNforce

Chapter 4: Configure the Network Interfaces48 WatchGuard Firebox SOHO 67 Click Submit.

Strany 170 - 148 WatchGuard Firebox SOHO 6

User Guide 49CHAPTER 5 Administrative OptionsUse the SOHO 6 Administration page to configure access to the SOHO 6. The System Security, SOHO 6 Remot

Strany 171 - These fields are optional

Chapter 5: Administrative Options50 WatchGuard Firebox SOHO 6System securityA passphrase prevents access to the configuration of the SOHO 6 by an unau

Strany 172 - 150 WatchGuard Firebox SOHO 6

User Guide 51The System Security Page3Verify that the HTTP Server Port is set to 80.4 Select the Enable System Security checkbox.5 Type a system admin

Strany 173 - Configuring the SOHO 6

Chapter 5: Administrative Options52 WatchGuard Firebox SOHO 6Here is an example of how the Remote Management feature can be used. First, the remote co

Strany 174 - 3 Click the Add button

User Guide 53Setting up VPN Manager Access9 After you have installed and configured the MUVPN client, connect to the Internet using Dial-Up Networking

Strany 175

Chapter 5: Administrative Options54 WatchGuard Firebox SOHO 62 From the navigation bar at left, selectAdministration => VPN Manager Access.The VPN

Strany 176 - 154 WatchGuard Firebox SOHO 6

User Guide 55Updating the FirmwareUpdating the Firmware Check regularly for SOHO 6 firmware updates on the WatchGuard Web site:http://www.watchguard.c

Strany 177 - User Guide 155

Chapter 5: Administrative Options56 WatchGuard Firebox SOHO 64 Type the location of the firmware files on your computer or click Browse and locate the

Strany 178 - 2 Select My Identity

User Guide 57Activating the SOHO 6 Upgrade Options7 From the navigation bar at left, selectAdministration => Upgrade.The Upgrade page opens.8 Paste

Strany 179 - User Guide 157

viii WatchGuard Firebox SOHO 6Restricted Rights. Use, duplication or disclosure by the U.S Government or any agency or instrumentality thereof is sub

Strany 180

Chapter 5: Administrative Options58 WatchGuard Firebox SOHO 6firewall to include a telecommuter or a network in a remote office.IPSec Virtual Private

Strany 181

User Guide 59Viewing the Configuration File2 From the navigation bar at left, selectAdministration => View Configuration File.The View Configuratio

Strany 182

Chapter 5: Administrative Options60 WatchGuard Firebox SOHO 6

Strany 183 - User Guide 161

User Guide 61CHAPTER 6 Configure the Firewall SettingsFirewall SettingsThe configuration settings of the SOHO 6 control the flow of traffic between

Strany 184 - 162 WatchGuard Firebox SOHO 6

Chapter 6: Configure the Firewall Settings62 WatchGuard Firebox SOHO 6Configuring Incoming and Outgoing ServicesThe default configuration of the SOHO

Strany 185 - Support Resources

User Guide 63Configuring Incoming and Outgoing Services3 Locate a pre-configured service, such as FTP, Web, or Telnet. Then select either Allow or Den

Strany 186 - 164 WatchGuard Firebox SOHO 6

Chapter 6: Configure the Firewall Settings64 WatchGuard Firebox SOHO 6Follow these steps to configure a custom service:1 Type the IP address of the tr

Strany 187 - User Guide 165

User Guide 65Blocking External SitesNOTEFor a TCP port or a UDP port, specify a port number. For a protocol, specify a protocol number. You cannot spe

Strany 188 - Configuration

Chapter 6: Configure the Firewall Settings66 WatchGuard Firebox SOHO 6You can change the configuration to prevent access to specified Internet sites.

Strany 189 - User Guide 167

User Guide 67Firewall OptionsFirewall OptionsThe previous sections described how to allow or deny complete classes of services. The Firewall Options p

Strany 190 - 168 WatchGuard Firebox SOHO 6

User Guide ixtransmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of WatchGuard

Strany 191 - User Guide 169

Chapter 6: Configure the Firewall Settings68 WatchGuard Firebox SOHO 62 Click Submit.Denying FTP access to the trusted network interfaceYou can config

Strany 192 - VPN Management

User Guide 69Firewall OptionsNOTEWhen a computer in the trusted network uses a SOCKS-compatible application, other users on the trusted network have f

Strany 193 - User Guide 171

Chapter 6: Configure the Firewall Settings70 WatchGuard Firebox SOHO 6When the SOCKS-compatible application is not in use:1 Select the Disable SOCKS p

Strany 194 - Special notices

User Guide 71Creating an Unrestricted Pass ThroughFollow these steps to enable this option:1 Select the Enable override MAC address for the External N

Strany 195

Chapter 6: Configure the Firewall Settings72 WatchGuard Firebox SOHO 63 Select the Enable pass through address checkbox.4 Type the IP address of the c

Strany 196

User Guide 73CHAPTER 7 Configure LoggingThe SOHO 6 logging feature records a log of the events related to the security of the trusted, external, and

Strany 197

Chapter 7: Configure Logging74 WatchGuard Firebox SOHO 6Viewing SOHO 6 Log MessagesThe SOHO 6 event log records a maximum of 150 log messages. If a ne

Strany 198

User Guide 75Setting up Logging to a WatchGuard Security Event Processor Log HostThis option synchronizes the clock of the SOHO 6 to your computer:• C

Strany 199

Chapter 7: Configure Logging76 WatchGuard Firebox SOHO 63 Select the Enable WatchGuard Security Event Processor Logging checkbox.4 Type the IP address

Strany 200

User Guide 77Setting up Logging to a Syslog HostSetting up Logging to a Syslog HostThis option sends the SOHO 6 log entries to a Syslog host.Follow th

Komentáře k této Příručce

Žádné komentáře