WatchGuard Firebox Soho User Guide
Following conventions are used in this guide
Using this Guide
Industry Canada
Certifications and Notices
FCC Certification
CE Notice
Vcci Notice Class a ITE
Declaration of Conformity
Watchguard Soho Software END-USER License Agreement
User Guide Vii
Viii WatchGuard Firebox Soho
Copyright, Trademark, and Patent Information
WatchGuard Firebox Soho
User Guide
Xii WatchGuard Firebox Soho
Contents
Configure the Network Interfaces
Configure the Firewall Settings
VPN-Virtual Private Networking
Index 117
Xviii WatchGuard Firebox Soho
Welcome
Introduction
Package Contents
How Does a Firewall Work?
Protocol
How Does Information Travel on the Internet?
IP addresses
Network Address Translation
Services
How Does the Soho 6 Process Information?
Port numbers
Ethernet ports
Soho 6 Hardware Description
Soho 6 front and rear views
Faster Processor
Mode
Status
Link
100
OPT port
Numbered ports
Reset button
Power input
WAN port
Introduction WatchGuard Firebox Soho
Installation
Microsoft Windows 2000 and Windows XP
Review and record your current TCP/IP settings
Click Start = Programs = Accessories = Command Prompt
Before You Begin
Other operating systems Unix, Linux
Microsoft Windows NT
Microsoft Windows 95 or 98 or ME
Macintosh
Exit the TCP/IP configuration screen
Disable the Http proxy setting of your Web browser
Click Edit = Preferences
Netscape
Click Tools = Internet Options
Enable your computer for Dhcp
Click Start = Settings = Control Panel
Internet Explorer 5.0, 5.5,
Click Properties
Physically connect the Soho
Cabling the Soho 6 for one to four appliances
Cabling the Soho 6 for more than four computers
Physically connect the Soho
Soho 6 is now connected to the Internet and your hub
Soho 6 Home Page-System Status
Soho 6 Basics
Soho 6 Basics
Trusted Network
Default Factory Settings
External Network
System Security
Reset a Soho 6 to factory default
Firewall Settings
Upgrade Options
Base model Soho
Register your Soho 6 and Activate the LiveSecurity Service
Reboot the Soho
Reboot the Soho
Soho 6 Basics WatchGuard Firebox Soho
Network addressing
Configure Network Interfaces
Configure Your External Network
Configure the Soho 6 External Network for dynamic addressing
Network = External
Configure the Soho 6 External Network for static addressing
Manual Configuration
Configure the Soho 6 External Network for PPPoE
Click Automatically restore lost connections
Configure Dhcp Server and Dhcp Relay
Configure the Trusted Network
Trusted Network Configuration page appears
Configure additional computers on the Trusted Network
Network = Trusted
Configure the Trusted Network with static addresses
Configure Static Routes
Click Add
Network = Network Statistics
View Network Statistics
Network = DynamicDNS
Configure the Dynamic DNS Service
Select the Enable Dynamic DNS client checkbox
Configure Dual ISP Port
Configure OPT Port Upgrades
Configure OPT Port Upgrades
Network = Dual ISP
Configure VPNforce Port
Network = Optional
Configure OPT Port Upgrades
Configure the Network Interfaces WatchGuard Firebox Soho
Administrative Options
System management
System Security
Administration = System Security
Soho Remote Management
Set up VPN Manager Access
Select Enable VPN Manager Access
Administration = VPN Manager Access
Administration = Update
Update Your Firmware
Redeem your Soho 6 Upgrade Options
Seat Licenses
Administration = Upgrade
Upgrade options
IPSec Virtual Private Networking VPN
LiveSecurity Service Subscription Renewals
Dual ISP Port
VPNforce Port
Administration = View Configuration File
View the Configuration File
Firewall Settings
Configure Firewall Settings
Firewall = Incoming or Outgoing
Configure Incoming and Outgoing Services
Pre-configured Services
Create a Custom Service
Custom Service page refreshes
Firewall = Custom Service
Block External Sites
Blocked Sites page appears
Firewall = Firewall Options
Firewall Options
Socks implementation for the Soho
Denying FTP access to the Trusted Network interface
Select Do not allow FTP access to Trusted Network
Ping requests received on the External Network
Configuring your Socks application
Disabling Socks on the Soho
Logging all allowed outbound traffic
Select Enable override MAC address for the External Network
Enable override MAC address for the External Network
Select Log All Allowed Outbound Access
Firewall = Pass Through
Select Enable pass through address
Create an Unrestricted Pass Through
Create an Unrestricted Pass Through
Configure the Firewall Settings WatchGuard Firebox Soho
Configure Logging
From the navigation bar on the left side, select Logging
View Soho 6 Log Messages
To have your log messages synchronize with your computer
Select Enable WatchGuard Security Event Processor Logging
Logging = Syslog Logging
Set up Logging to a Syslog Host
Select Enable syslog output
Select Include local time in syslog message
Set the System Time
Select a time zone from the drop list
Select Adjust for daylight savings time
Configure Logging WatchGuard Firebox Soho
VPN-Virtual Private Networking
Why Create a Virtual Private Network?
What You Need
IP Address Table example
Enable the VPN Upgrade
How do I get a static external IP address?
Frequently Asked Questions
Why do I need a static external address?
Special Considerations
How do I troubleshoot the connection?
Why is ping not working?
How do I obtain a VPN upgrade license key?
How do I enable a VPN Tunnel?
VPN = Manual VPN
Set Up Multiple SOHO-SOHO VPN Tunnels
Enter the Name, IPSec Gateway Address, and Shared Key for
Soho 6 you want to set up a VPN tunnel
Set Up Multiple SOHO-SOHO VPN Tunnels
Forward Secrecy
Muvpn Clients
Configure Split Tunneling
Statistics
View the VPN Statistics
How WebBlocker Works
Soho 6 WebBlocker
WatchGuard WebBlocker database unavailable
Web site not in the WebBlocker database
Web site in the WebBlocker database
Groups
Purchase and Activate Soho 6 WebBlocker
WebBlocker users and groups
Bypass the Soho 6 WebBlocker
Activate WebBlocker
Configure the Soho 6 WebBlocker
WebBlocker = Settings
Create WebBlocker Groups and Users
Select Enable WebBlocking
Click New to create a group name and profile
Click Submit
To the right of the Users field, click New
Illegal Gambling
WebBlocker Categories
Alcohol/tobacco
Intolerance
Militant/extremist
Drug Culture
Satanic/cult
Sports and Leisure
Gross Depictions
Violence/profanity
Search Engines
Partial/artistic Nudity
Sexual Acts
Full Nudity
General
Troubleshooting Tips
Support Resources
How do I restart my Soho 6?
How do I register my Soho 6 with the LiveSecurity Service?
How does the seat limitation on the Soho 6 work?
What is a Soho 6 Feature Key?
Cant get a certain Soho 6 feature to work with a DSL modem
110
Select Enable Dhcp Server and then click Submit
Configuration
Where are the Soho 6 settings stored?
How do I set up Dhcp on the trusted network of the Soho 6?
How do I change to a static, trusted IP address?
Disable Enable Dhcp Server and then click Submit
How do I set up and disable Webblocker?
Firewall = Incoming
VPN Management
How do I set up VPN to a Soho 6s?
How do I set up my Soho 6 for VPN Manager Access?
Contact Technical support
Online Documentation and In-Depth FAQs
Numerics
Index
WAN
Socks
Redeeming 57 types Upgrade page 58 upgrading
Processor WebBlocker
122