WatchGuard Firebox Soho User Guide
Using this Guide
Following conventions are used in this guide
Certifications and Notices
FCC Certification
CE Notice
Industry Canada
Vcci Notice Class a ITE
Declaration of Conformity
Watchguard Soho Software END-USER License Agreement
User Guide Vii
Viii WatchGuard Firebox Soho
Copyright, Trademark, and Patent Information
WatchGuard Firebox Soho
User Guide
Xii WatchGuard Firebox Soho
Contents
Configure the Network Interfaces
Configure the Firewall Settings
VPN-Virtual Private Networking
Index 117
Xviii WatchGuard Firebox Soho
Introduction
Welcome
Package Contents
How Does a Firewall Work?
IP addresses
How Does Information Travel on the Internet?
Protocol
Services
How Does the Soho 6 Process Information?
Port numbers
Network Address Translation
Soho 6 Hardware Description
Soho 6 front and rear views
Faster Processor
Ethernet ports
Status
Link
100
Mode
OPT port
Reset button
Power input
WAN port
Numbered ports
Introduction WatchGuard Firebox Soho
Installation
Review and record your current TCP/IP settings
Click Start = Programs = Accessories = Command Prompt
Before You Begin
Microsoft Windows 2000 and Windows XP
Microsoft Windows NT
Microsoft Windows 95 or 98 or ME
Macintosh
Other operating systems Unix, Linux
Disable the Http proxy setting of your Web browser
Exit the TCP/IP configuration screen
Netscape
Click Edit = Preferences
Enable your computer for Dhcp
Click Start = Settings = Control Panel
Internet Explorer 5.0, 5.5,
Click Tools = Internet Options
Click Properties
Physically connect the Soho
Cabling the Soho 6 for one to four appliances
Cabling the Soho 6 for more than four computers
Physically connect the Soho
Soho 6 is now connected to the Internet and your hub
Soho 6 Basics
Soho 6 Home Page-System Status
Soho 6 Basics
External Network
Default Factory Settings
Trusted Network
Reset a Soho 6 to factory default
Firewall Settings
Upgrade Options
System Security
Register your Soho 6 and Activate the LiveSecurity Service
Base model Soho
Reboot the Soho
Reboot the Soho
Soho 6 Basics WatchGuard Firebox Soho
Configure Your External Network
Configure Network Interfaces
Network addressing
Configure the Soho 6 External Network for dynamic addressing
Manual Configuration
Configure the Soho 6 External Network for static addressing
Network = External
Configure the Soho 6 External Network for PPPoE
Click Automatically restore lost connections
Configure the Trusted Network
Configure Dhcp Server and Dhcp Relay
Trusted Network Configuration page appears
Configure additional computers on the Trusted Network
Configure the Trusted Network with static addresses
Network = Trusted
Configure Static Routes
Click Add
View Network Statistics
Network = Network Statistics
Select the Enable Dynamic DNS client checkbox
Configure the Dynamic DNS Service
Network = DynamicDNS
Configure OPT Port Upgrades
Configure Dual ISP Port
Configure OPT Port Upgrades
Network = Dual ISP
Configure VPNforce Port
Network = Optional
Configure OPT Port Upgrades
Configure the Network Interfaces WatchGuard Firebox Soho
Administrative Options
System Security
System management
Administration = System Security
Set up VPN Manager Access
Soho Remote Management
Administration = VPN Manager Access
Select Enable VPN Manager Access
Update Your Firmware
Administration = Update
Redeem your Soho 6 Upgrade Options
Upgrade options
Administration = Upgrade
Seat Licenses
LiveSecurity Service Subscription Renewals
Dual ISP Port
VPNforce Port
IPSec Virtual Private Networking VPN
View the Configuration File
Administration = View Configuration File
Configure Firewall Settings
Firewall Settings
Pre-configured Services
Configure Incoming and Outgoing Services
Firewall = Incoming or Outgoing
Create a Custom Service
Firewall = Custom Service
Custom Service page refreshes
Block External Sites
Blocked Sites page appears
Firewall Options
Firewall = Firewall Options
Denying FTP access to the Trusted Network interface
Select Do not allow FTP access to Trusted Network
Ping requests received on the External Network
Socks implementation for the Soho
Configuring your Socks application
Logging all allowed outbound traffic
Disabling Socks on the Soho
Select Log All Allowed Outbound Access
Enable override MAC address for the External Network
Select Enable override MAC address for the External Network
Create an Unrestricted Pass Through
Select Enable pass through address
Firewall = Pass Through
Create an Unrestricted Pass Through
Configure the Firewall Settings WatchGuard Firebox Soho
Configure Logging
View Soho 6 Log Messages
From the navigation bar on the left side, select Logging
To have your log messages synchronize with your computer
Select Enable WatchGuard Security Event Processor Logging
Select Enable syslog output
Set up Logging to a Syslog Host
Logging = Syslog Logging
Set the System Time
Select Include local time in syslog message
Select Adjust for daylight savings time
Select a time zone from the drop list
Configure Logging WatchGuard Firebox Soho
Why Create a Virtual Private Network?
VPN-Virtual Private Networking
What You Need
IP Address Table example
Enable the VPN Upgrade
Frequently Asked Questions
Why do I need a static external address?
Special Considerations
How do I get a static external IP address?
Why is ping not working?
How do I obtain a VPN upgrade license key?
How do I enable a VPN Tunnel?
How do I troubleshoot the connection?
Set Up Multiple SOHO-SOHO VPN Tunnels
VPN = Manual VPN
Soho 6 you want to set up a VPN tunnel
Enter the Name, IPSec Gateway Address, and Shared Key for
Set Up Multiple SOHO-SOHO VPN Tunnels
Forward Secrecy
Configure Split Tunneling
Muvpn Clients
View the VPN Statistics
Statistics
Soho 6 WebBlocker
How WebBlocker Works
Web site in the WebBlocker database
Web site not in the WebBlocker database
WatchGuard WebBlocker database unavailable
Purchase and Activate Soho 6 WebBlocker
WebBlocker users and groups
Bypass the Soho 6 WebBlocker
Groups
WebBlocker = Settings
Configure the Soho 6 WebBlocker
Activate WebBlocker
Select Enable WebBlocking
Create WebBlocker Groups and Users
Click New to create a group name and profile
Click Submit
To the right of the Users field, click New
Alcohol/tobacco
WebBlocker Categories
Illegal Gambling
Militant/extremist
Drug Culture
Satanic/cult
Intolerance
Gross Depictions
Violence/profanity
Search Engines
Sports and Leisure
Full Nudity
Sexual Acts
Partial/artistic Nudity
Support Resources
Troubleshooting Tips
General
How do I register my Soho 6 with the LiveSecurity Service?
How do I restart my Soho 6?
Cant get a certain Soho 6 feature to work with a DSL modem
What is a Soho 6 Feature Key?
How does the seat limitation on the Soho 6 work?
110
Configuration
Where are the Soho 6 settings stored?
How do I set up Dhcp on the trusted network of the Soho 6?
Select Enable Dhcp Server and then click Submit
How do I set up and disable Webblocker?
Disable Enable Dhcp Server and then click Submit
How do I change to a static, trusted IP address?
Firewall = Incoming
VPN Management
How do I set up my Soho 6 for VPN Manager Access?
How do I set up VPN to a Soho 6s?
Online Documentation and In-Depth FAQs
Contact Technical support
Index
Numerics
WAN
Socks
Redeeming 57 types Upgrade page 58 upgrading
Processor WebBlocker
122