VPN-Virtual Private Networking | WatchGuard Technologies SOHO 6.1

CHAPTER 8 VPN—Virtual Private

Networking

This chapter describes an optional feature of the WatchGuard SOHO 6, Virtual Private Networking (VPN) with IPSec.

Why Create a Virtual Private Network?

Virtual Private Networking (VPN) tunnels enable you to securely connect computers in two locations without requiring expensive, dedicated point-to-point data connections. With VPN, you use low cost connections to the Internet to create a virtual connection between two branch offices. Unlike a simple, unencrypted Internet connection, a VPN connection eliminates any significant risk of data being read or altered by outside users as it traverses the Internet.

User Guide

83

Image 101

WatchGuard Technologies SOHO 6.1 manual VPN-Virtual Private Networking, Why Create a Virtual Private Network?

Contents

WatchGuard Firebox Soho User Guide Following conventions are used in this guide Using this Guide FCC Certification Certifications and NoticesCE Notice Industry Canada Vcci Notice Class a ITE Declaration of Conformity Watchguard Soho Software END-USER License Agreement User Guide Vii Viii WatchGuard Firebox Soho Copyright, Trademark, and Patent Information WatchGuard Firebox Soho User Guide Xii WatchGuard Firebox Soho Contents Configure the Network Interfaces Configure the Firewall Settings VPN-Virtual Private Networking Index 117 Xviii WatchGuard Firebox Soho Welcome Introduction Package Contents How Does a Firewall Work? Protocol How Does Information Travel on the Internet?IP addresses How Does the Soho 6 Process Information? ServicesPort numbers Network Address Translation Soho 6 front and rear views Soho 6 Hardware DescriptionFaster Processor Ethernet ports Link Status100 Mode OPT port Power input Reset buttonWAN port Numbered ports Introduction WatchGuard Firebox Soho Installation Click Start = Programs = Accessories = Command Prompt Review and record your current TCP/IP settingsBefore You Begin Microsoft Windows 2000 and Windows XP Microsoft Windows 95 or 98 or ME Microsoft Windows NTMacintosh Other operating systems Unix, Linux Exit the TCP/IP configuration screen Disable the Http proxy setting of your Web browser Click Edit = Preferences Netscape Click Start = Settings = Control Panel Enable your computer for DhcpInternet Explorer 5.0, 5.5, Click Tools = Internet Options Click Properties Physically connect the Soho Cabling the Soho 6 for one to four appliances Cabling the Soho 6 for more than four computers Physically connect the Soho Soho 6 is now connected to the Internet and your hub Soho 6 Home Page-System Status Soho 6 Basics Soho 6 Basics Trusted Network Default Factory SettingsExternal Network Firewall Settings Reset a Soho 6 to factory defaultUpgrade Options System Security Base model Soho Register your Soho 6 and Activate the LiveSecurity Service Reboot the Soho Reboot the Soho Soho 6 Basics WatchGuard Firebox Soho Network addressing Configure Network InterfacesConfigure Your External Network Configure the Soho 6 External Network for dynamic addressing Network = External Configure the Soho 6 External Network for static addressingManual Configuration Configure the Soho 6 External Network for PPPoE Click Automatically restore lost connections Configure Dhcp Server and Dhcp Relay Configure the Trusted Network Trusted Network Configuration page appears Configure additional computers on the Trusted Network Network = Trusted Configure the Trusted Network with static addresses Configure Static Routes Click Add Network = Network Statistics View Network Statistics Network = DynamicDNS Configure the Dynamic DNS ServiceSelect the Enable Dynamic DNS client checkbox Configure Dual ISP Port Configure OPT Port Upgrades Configure OPT Port Upgrades Network = Dual ISP Configure VPNforce Port Network = Optional Configure OPT Port Upgrades Configure the Network Interfaces WatchGuard Firebox Soho Administrative Options System management System Security Administration = System Security Soho Remote Management Set up VPN Manager Access Select Enable VPN Manager Access Administration = VPN Manager Access Administration = Update Update Your Firmware Redeem your Soho 6 Upgrade Options Seat Licenses Administration = UpgradeUpgrade options Dual ISP Port LiveSecurity Service Subscription RenewalsVPNforce Port IPSec Virtual Private Networking VPN Administration = View Configuration File View the Configuration File Firewall Settings Configure Firewall Settings Firewall = Incoming or Outgoing Configure Incoming and Outgoing ServicesPre-configured Services Create a Custom Service Custom Service page refreshes Firewall = Custom Service Block External Sites Blocked Sites page appears Firewall = Firewall Options Firewall Options Select Do not allow FTP access to Trusted Network Denying FTP access to the Trusted Network interfacePing requests received on the External Network Socks implementation for the Soho Configuring your Socks application Disabling Socks on the Soho Logging all allowed outbound traffic Select Enable override MAC address for the External Network Enable override MAC address for the External NetworkSelect Log All Allowed Outbound Access Firewall = Pass Through Select Enable pass through addressCreate an Unrestricted Pass Through Create an Unrestricted Pass Through Configure the Firewall Settings WatchGuard Firebox Soho Configure Logging From the navigation bar on the left side, select Logging View Soho 6 Log Messages To have your log messages synchronize with your computer Select Enable WatchGuard Security Event Processor Logging Logging = Syslog Logging Set up Logging to a Syslog HostSelect Enable syslog output Select Include local time in syslog message Set the System Time Select a time zone from the drop list Select Adjust for daylight savings time Configure Logging WatchGuard Firebox Soho VPN-Virtual Private Networking Why Create a Virtual Private Network? What You Need IP Address Table example Enable the VPN Upgrade Why do I need a static external address? Frequently Asked QuestionsSpecial Considerations How do I get a static external IP address? How do I obtain a VPN upgrade license key? Why is ping not working?How do I enable a VPN Tunnel? How do I troubleshoot the connection? VPN = Manual VPN Set Up Multiple SOHO-SOHO VPN Tunnels Enter the Name, IPSec Gateway Address, and Shared Key for Soho 6 you want to set up a VPN tunnel Set Up Multiple SOHO-SOHO VPN Tunnels Forward Secrecy Muvpn Clients Configure Split Tunneling Statistics View the VPN Statistics How WebBlocker Works Soho 6 WebBlocker WatchGuard WebBlocker database unavailable Web site not in the WebBlocker databaseWeb site in the WebBlocker database WebBlocker users and groups Purchase and Activate Soho 6 WebBlockerBypass the Soho 6 WebBlocker Groups Activate WebBlocker Configure the Soho 6 WebBlockerWebBlocker = Settings Create WebBlocker Groups and Users Select Enable WebBlocking Click New to create a group name and profile Click Submit To the right of the Users field, click New Illegal Gambling WebBlocker CategoriesAlcohol/tobacco Drug Culture Militant/extremistSatanic/cult Intolerance Violence/profanity Gross DepictionsSearch Engines Sports and Leisure Partial/artistic Nudity Sexual ActsFull Nudity General Troubleshooting TipsSupport Resources How do I restart my Soho 6? How do I register my Soho 6 with the LiveSecurity Service? How does the seat limitation on the Soho 6 work? What is a Soho 6 Feature Key?Cant get a certain Soho 6 feature to work with a DSL modem 110 Where are the Soho 6 settings stored? ConfigurationHow do I set up Dhcp on the trusted network of the Soho 6? Select Enable Dhcp Server and then click Submit How do I change to a static, trusted IP address? Disable Enable Dhcp Server and then click SubmitHow do I set up and disable Webblocker? Firewall = Incoming VPN Management How do I set up VPN to a Soho 6s? How do I set up my Soho 6 for VPN Manager Access? Contact Technical support Online Documentation and In-Depth FAQs Numerics Index WAN Socks Redeeming 57 types Upgrade page 58 upgrading Processor WebBlocker 122