HP Firewall manual Contents

Page 3

Contents

Overview ······································································································································································ 1

Introduction to HP A-IMC Firewall Manager··················································································································1 What HP A-IMC Firewall Manager can do ···················································································································1

Installation and uninstallation······································································································································ 2

Installing the firewall manager ········································································································································2

Registering the firewall manager·····································································································································2 Uninstalling the firewall manager ···································································································································3

System management···················································································································································· 4

Device management ·························································································································································4

Managing devices····················································································································································4 Managing batch import········································································································································ 18 Managing device groups ····································································································································· 18 Managing events··················································································································································· 20 Managing device access templates ···················································································································· 22 Managing the device software database··········································································································· 24 Managing deployment tasks································································································································ 26

Operator management·················································································································································· 27 Managing operators············································································································································· 27 Managing operation logs····································································································································· 29 Changing your login password ··························································································································· 30 System configuration······················································································································································ 31 Configuring system parameter····························································································································· 31 Configuring management ports ··························································································································· 31 Configuring the mail server·································································································································· 32 Managing filters ···················································································································································· 33 Managing LDAP servers ······································································································································· 35 Managing log retention time································································································································ 37 Monitoring the disk space···································································································································· 37 Managing subsystems··········································································································································· 39

Firewall management ················································································································································42

Attack events monitoring ··············································································································································· 42 Snapshot of events ················································································································································ 42 Recent events list···················································································································································· 44 Device monitoring ················································································································································· 45 Event analysis ································································································································································· 45 Event overview······················································································································································· 45 Event details ··························································································································································· 47 Report exporting management····························································································································· 49 Event auditing································································································································································· 51 Inter-zone access log auditing ····························································································································· 52 Abnormal traffic log auditing······························································································································· 52 Blacklist log auditing············································································································································· 53 Operation log auditing········································································································································· 53 Other log auditing················································································································································· 54 NAT log auditing··················································································································································· 55 MPLS log auditing ················································································································································· 55 Security policy management········································································································································· 56

i

Page 2 Page 4
Image 3
Page 2 Page 4
Contents HP A-IMC Firewall Manager Page Contents Page What HP A-IMC Firewall Manager can do Introduction to HP A-IMC Firewall ManagerRegistering the firewall manager Installing the firewall managerRegister your license Uninstalling the firewall managerDevice management Device management Operator management System configurationDevice management Managing devicesFields of the device list Function DescriptionDevice query option Option DescriptionReturn to Device management functions Add a device Device configuration itemsTelnet Password, Snmp Version, Community String for Reading, Device information Deploying software to devices Device software managementFields of the device software list Deploying software to devicesRequired Task Name Return to Device software management functions Software backup resultRestoring a configuration file Device config managementFields of the software backup result list Backing up configuration filesBacking up configuration files Fields of the device configuration management listDevice configuration information management interface Label Fields of the configuration label listRunning Config Tab DescriptionCompare two configuration files Draft list Fields of the draft list Fields of the running configuration listConfiguration guide Managing batch importManaging device groups Fields of the device group list Device group listAdding a device group Device group management functionsOption Managing eventsDevice event list Device event query optionsOptionDescription Device interface event listFields of the device event list Device interface event query optionsReturn to Template management functions Managing device access templatesTemplate list Fields of the template listAdding a template Add a template Template configuration itemsManaging the device software database Importing device software Importing device softwareDevice software database query option Fields of the device software database listManaging deployment tasks Deployment task query optionFields of the deployment task list User level Rights Operator managementManaging operators User levels and the rightsFields of the operator list Operator listAdding an operator Operator management functions Function DescriptionManaging operation logs Operator configuration itemsChanging your login password Fields of the operation log listItemDescription System configuration Configuring system parameterConfiguring management ports Configure the mail server Mail server configuration items Configuring the mail serverFilter list Managing filtersFilter list Fields of the filter listAdding a filter FieldDescriptionReturn to Filter management functions Adding an Ldap server Managing Ldap serversLdap server list Ldap server listAdding an Ldap server Fields of the Ldap server listReturn to Ldap server management functions Monitoring the disk space Managing log retention timeActual free disk space is lower than this value Free disk space monitoring Managing subsystemsSubsystem information Fields of the subsystem list Adding a subsystemPage Snapshot of events Attack events monitoringFields in the event snapshot lists Snapshot of events Event snapshot query optionsFields of the recent events list Recent events listEvent analysis Device monitoringEvent overview Are under your management will appear in the drop-down list Top 10 attack events contrast graph Event detailsAttack event details Event details query options Fields of the attack event details list Report exporting managementReport export file list Report export file listFields of the report export task list Report export task management functionsEvent auditing Adding a report export taskReturn to Report export task management functions Abnormal traffic log auditing Inter-zone access log auditingOperation log auditing Blacklist log auditingOperation log auditing Other log auditingMpls log auditing NAT log auditingSecurity policy management Security zonesSecurity zone list Return to Security zone management functions Security zone listAdding a security zone Fields of the security zone listTime range list Security zone configuration itemTime ranges Importing security zones from a deviceReturn to Time range management functions Time range listAdding a time range Fields of the time range listServices Predefined servicesFields of the predefined service list Return to Service management functions User-defined servicesType a name for the user-defined service Service group management Fields of the service group list Service groupsAdd a service group Service group configuration items IP addresses Host addressesFields of the host address list Add a host address Host address configuration items Address range management Fields of the address range list Address rangesSubnet addresses Address range configuration itemsAdd an subnet address Subnet address configuration items IP address groups Add an IP address group IP address group configuration items Interzone rule list Interzone rulesInterzone rule list Interzone rule query optionsReturn to Interzone rule management functions Adding an interzone ruleFields of the interzone rule list Filed DescriptionAdd an interzone rule Interzone rule configuration items Add source IP addresses for the interzone rule Adding an interzone policy Interzone policiesInterzone policy list Interzone policy listReturn to Interzone policy management functions Adding an interzone policyRule management Fields of the interzone policy listRule management Fields of the policy’s rule list Move rules Sorting interzone rulesFields of the interzone policy application list Interzone policy applicationsInterzone policy application list Interzone policy application query optionsApplying interzone policies Applied rules listReturn to Interzone policy application management functions Zone and destination zone pair is numbered Firewall device list Firewall device managementManaging firewall devices Firewall management functionsFields of the firewall device list Firewall device listAdding firewall devices Query options on the firewall device managementViewing device statistics Managing the device configuration databaseFields of the configuration segments list Configuration segment listReturn to Configuration segment management functions Adding a configuration segmentConfiguration segment configuration items Importing configuration segments from deviceDeploying a configuration segment Configure deployment task attributes Deployment task list Deployment task listFields of the deployment task list Comprehensive analysis Online usersComprehensive analysis SSL VPN log auditing Daily user statistics Online users trendsDaily user statistics User Count field shows the count of login times on that daySSL VPN log auditing User access records auditingAuthentication failure auditing Resource access auditingAuthentication failure auditing Configuration procedure Network requirementsAdding devices to the firewall manager Add a device to the firewall management component Configuring the firewall device Configuration proceduresConfiguring the Firewall Manager Configure Snmp on the FW deviceEnter the following commands in the CLI Add the FW device to the Firewall Manager Enable logging and send logs to Firewall ManagerConfigure a log host Userlog Configuring intrusion detectionScanning detection Blacklist Urpf check Verification Firewall logs and Firewall Manager analysisDisplaying log report on the firewall webpage Intrusion Policy Log User log Recent list Inter-zone access logs Blacklist logs Operation Logs Documents Subscription serviceContacting HP Related informationGUI conventions Command conventionsSymbols ConventionsPort numbering in examples Network topology iconsTime ranges,58 IndexViewing device statistics,85 User access records auditing,96
Related manuals
Manual 60 pages 30 Kb Manual 3 pages 40.21 Kb

Firewall specifications

HP Firewall, often positioned as a key component in enterprise network security, is designed to protect sensitive data and maintain secure communications across various environments. The primary role of a firewall is to monitor incoming and outgoing network traffic and make decisions based on a set of security rules. HP Firewalls utilize a combination of hardware and software to create a robust security framework that helps organizations manage their network perimeter effectively.

One of the main features of HP Firewall is its advanced security protocols that provide deep packet inspection. This technology scrutinizes packet contents beyond the header information, analyzing data flows for signs of malicious activity. By employing Stateful Inspection, HP Firewalls maintain a state table that logs active connections, allowing the firewall to evaluate packets in the context of established sessions. This helps optimize resource usage while delivering high-performance security.

Another characteristic of HP Firewall is its integration with HP's broader security ecosystem. By working seamlessly with other HP security products, such as HP Secure Access and HP Advanced Malware Protection, organizations can deploy a multi-layered security strategy. This integration enables centralized management, streamlining security policies and improving response times against threats.

HP Firewalls also feature next-generation capabilities. This includes intrusion prevention systems (IPS) that actively monitor network traffic for suspected threats and automatically take action to block potential breaches. Additionally, these firewalls come with application awareness features, allowing organizations to enforce policies based on specific applications rather than simply based on port or protocol. This granularity enhances control over minimal use of bandwidth while simultaneously mitigating risks from unwanted applications.

Furthermore, HP Firewall models are equipped with user identity management, allowing organizations to apply security policies based on user roles and the specific needs of the business. This significantly improves the overall security posture as it adds another layer of control.

Scalability is a notable characteristic of HP Firewalls, making them suitable for both small businesses and large enterprises. Organizations can expand their security infrastructure as needed while maintaining efficiency.

In summary, HP Firewalls deliver advanced security features, scalability, and seamless integration within the HP security ecosystem. Their emphasis on deep packet inspection, real-time monitoring, and user identity management make them a powerful asset in the defense against cyber threats, ensuring that organizations can protect their critical data and maintain the integrity of their network environments.
Top Page Image Contents