WatchGuard Technologies SOHO 6.1 manual VPN Management

Page 132

Chapter 10: Support Resources

5Enter the protocol number to allow in the Protocol field.

6Click Submit.

7From the navigation bar on the left side, select

Firewall => Incoming.

The Firewall Incoming Traffic page appears.

8Near the bottom of the page, under the Custom Service header, locate the service you created and select Allow from the drop list.

9Under the header Service Host, enter the IP address of the computer to which this traffic is allowed.

10Click Submit.

VPN Management

Before setting up VPN, you must have:

•Two properly configured and working SOHO 6s or one SOHO 6 with the latest version of firmware and one Firebox II/III. Each SOHO 6 must have the VPN option activated.

•The static external IP address, the network address, and the subnet masks of both appliances. (The base trusted IP address of each SOHO 6 must be static and unique.)

•The DNS and WINS server IP address, if used.

•The shared key (passphrase) for the tunnel.

•The same encryption method for each end of the tunnel (DES or 3DES).

•The same authentication method for each end (MD-5 or SHA-1).

114	WatchGuard Firebox SOHO 6.1

Image 132

Contents WatchGuard Firebox Soho User Guide Using this Guide Following conventions are used in this guideCertifications and Notices FCC CertificationCE Notice Industry CanadaVcci Notice Class a ITE Declaration of Conformity Watchguard Soho Software END-USER License Agreement User Guide Vii Viii WatchGuard Firebox Soho Copyright, Trademark, and Patent Information WatchGuard Firebox Soho User Guide Xii WatchGuard Firebox Soho Contents Configure the Network Interfaces Configure the Firewall Settings VPN-Virtual Private Networking Index 117 Xviii WatchGuard Firebox Soho Introduction WelcomePackage Contents How Does a Firewall Work? How Does Information Travel on the Internet? IP addressesProtocol Services How Does the Soho 6 Process Information?Port numbers Network Address TranslationSoho 6 Hardware Description Soho 6 front and rear viewsFaster Processor Ethernet portsStatus Link100 ModeOPT port Reset button Power inputWAN port Numbered portsIntroduction WatchGuard Firebox Soho Installation Review and record your current TCP/IP settings Click Start = Programs = Accessories = Command PromptBefore You Begin Microsoft Windows 2000 and Windows XPMicrosoft Windows NT Microsoft Windows 95 or 98 or MEMacintosh Other operating systems Unix, LinuxDisable the Http proxy setting of your Web browser Exit the TCP/IP configuration screenNetscape Click Edit = PreferencesEnable your computer for Dhcp Click Start = Settings = Control PanelInternet Explorer 5.0, 5.5, Click Tools = Internet OptionsClick Properties Physically connect the Soho Cabling the Soho 6 for one to four appliances Cabling the Soho 6 for more than four computers Physically connect the Soho Soho 6 is now connected to the Internet and your hub Soho 6 Basics Soho 6 Home Page-System StatusSoho 6 Basics Default Factory Settings External NetworkTrusted Network Reset a Soho 6 to factory default Firewall SettingsUpgrade Options System SecurityRegister your Soho 6 and Activate the LiveSecurity Service Base model SohoReboot the Soho Reboot the Soho Soho 6 Basics WatchGuard Firebox Soho Configure Network Interfaces Configure Your External NetworkNetwork addressing Configure the Soho 6 External Network for dynamic addressing Configure the Soho 6 External Network for static addressing Manual ConfigurationNetwork = External Configure the Soho 6 External Network for PPPoE Click Automatically restore lost connections Configure the Trusted Network Configure Dhcp Server and Dhcp RelayTrusted Network Configuration page appears Configure additional computers on the Trusted Network Configure the Trusted Network with static addresses Network = TrustedConfigure Static Routes Click Add View Network Statistics Network = Network StatisticsConfigure the Dynamic DNS Service Select the Enable Dynamic DNS client checkboxNetwork = DynamicDNS Configure OPT Port Upgrades Configure Dual ISP PortConfigure OPT Port Upgrades Network = Dual ISP Configure VPNforce Port Network = Optional Configure OPT Port Upgrades Configure the Network Interfaces WatchGuard Firebox Soho Administrative Options System Security System managementAdministration = System Security Set up VPN Manager Access Soho Remote ManagementAdministration = VPN Manager Access Select Enable VPN Manager AccessUpdate Your Firmware Administration = UpdateRedeem your Soho 6 Upgrade Options Administration = Upgrade Upgrade optionsSeat Licenses LiveSecurity Service Subscription Renewals Dual ISP PortVPNforce Port IPSec Virtual Private Networking VPNView the Configuration File Administration = View Configuration FileConfigure Firewall Settings Firewall SettingsConfigure Incoming and Outgoing Services Pre-configured ServicesFirewall = Incoming or Outgoing Create a Custom Service Firewall = Custom Service Custom Service page refreshesBlock External Sites Blocked Sites page appears Firewall Options Firewall = Firewall OptionsDenying FTP access to the Trusted Network interface Select Do not allow FTP access to Trusted NetworkPing requests received on the External Network Socks implementation for the SohoConfiguring your Socks application Logging all allowed outbound traffic Disabling Socks on the SohoEnable override MAC address for the External Network Select Log All Allowed Outbound AccessSelect Enable override MAC address for the External Network Select Enable pass through address Create an Unrestricted Pass ThroughFirewall = Pass Through Create an Unrestricted Pass Through Configure the Firewall Settings WatchGuard Firebox Soho Configure Logging View Soho 6 Log Messages From the navigation bar on the left side, select LoggingTo have your log messages synchronize with your computer Select Enable WatchGuard Security Event Processor Logging Set up Logging to a Syslog Host Select Enable syslog outputLogging = Syslog Logging Set the System Time Select Include local time in syslog messageSelect Adjust for daylight savings time Select a time zone from the drop listConfigure Logging WatchGuard Firebox Soho Why Create a Virtual Private Network? VPN-Virtual Private NetworkingWhat You Need IP Address Table example Enable the VPN Upgrade Frequently Asked Questions Why do I need a static external address?Special Considerations How do I get a static external IP address?Why is ping not working? How do I obtain a VPN upgrade license key?How do I enable a VPN Tunnel? How do I troubleshoot the connection?Set Up Multiple SOHO-SOHO VPN Tunnels VPN = Manual VPNSoho 6 you want to set up a VPN tunnel Enter the Name, IPSec Gateway Address, and Shared Key forSet Up Multiple SOHO-SOHO VPN Tunnels Forward Secrecy Configure Split Tunneling Muvpn ClientsView the VPN Statistics StatisticsSoho 6 WebBlocker How WebBlocker WorksWeb site not in the WebBlocker database Web site in the WebBlocker databaseWatchGuard WebBlocker database unavailable Purchase and Activate Soho 6 WebBlocker WebBlocker users and groupsBypass the Soho 6 WebBlocker GroupsConfigure the Soho 6 WebBlocker WebBlocker = SettingsActivate WebBlocker Select Enable WebBlocking Create WebBlocker Groups and UsersClick New to create a group name and profile Click Submit To the right of the Users field, click New WebBlocker Categories Alcohol/tobaccoIllegal Gambling Militant/extremist Drug CultureSatanic/cult IntoleranceGross Depictions Violence/profanitySearch Engines Sports and LeisureSexual Acts Full NudityPartial/artistic Nudity Troubleshooting Tips Support ResourcesGeneral How do I register my Soho 6 with the LiveSecurity Service? How do I restart my Soho 6?What is a Soho 6 Feature Key? Cant get a certain Soho 6 feature to work with a DSL modemHow does the seat limitation on the Soho 6 work? 110 Configuration Where are the Soho 6 settings stored?How do I set up Dhcp on the trusted network of the Soho 6? Select Enable Dhcp Server and then click SubmitDisable Enable Dhcp Server and then click Submit How do I set up and disable Webblocker?How do I change to a static, trusted IP address? Firewall = Incoming VPN Management How do I set up my Soho 6 for VPN Manager Access? How do I set up VPN to a Soho 6s?Online Documentation and In-Depth FAQs Contact Technical supportIndex NumericsWAN Socks Redeeming 57 types Upgrade page 58 upgrading Processor WebBlocker 122

Related manuals

Manual 8 pages 29.02 Kb