WatchGuard Technologies WatchGuard SOHO and SOHO | tc guide

Special considerations

other IPSec-compliant devices. To download these instructions, open your Web browser to:

http://www.watchguard.com/support/interopvpn.asp

Special considerations

Consider the following before configuring your WatchGuard SOHO VPN network:

•You can connect only two devices together: a WatchGuard SOHO and either another SOHO or another IPSec-compliant device. To set up multiple VPN tunnels, you will need to upgrade at least one SOHO to a WatchGuard Firebox configured with the WatchGuard VPN Manager.

•Each device must be able to send messages to the other. If either device has a dynamically assigned Internet (IP) address (see “Network addressing” on page 12 for an explanation of dynamic IP addresses), it will not be able to find its remote counterpart.

•Both devices must be set to use the same encryption method. The two choices are DES or 3DES. When connecting two Windows NT networks, the two networks must be in the same Microsoft Windows domain or be trusted domains. This is a Microsoft Networking design implementation and is not a limitation of the SOHO device.

User Guide 2.3

47

Image 59

WatchGuard Technologies WatchGuard SOHO and SOHO | tc manual Special considerations

Contents

WatchGuard Soho User Guide Copyright and patent information Registration and identification information User Guide Iii WatchGuard Soho End-User License AgreementPage User Guide WatchGuard Limited Hardware Warranty User Guide Vii Welcome Redeeming Soho upgrade certificates Following conventions are used throughout this guide Using this guidePage Table of Contents Additional Soho Features Before you begin InstallationPre-installation checklist Determine your current TCP/IP settings Performing manual installation Other operating systems Unix, Linux Microsoft Windows NT orMicrosoft Windows 95 or 98 or ME Macintosh Disable your browser’s Http proxy Internet Explorer Netscape 4.5 or Cabling the Soho for one to four devices Physically connecting your Soho This creates a connection between the Soho and the modem Cabling the Soho for more than four computers This creates a connection between the Soho and the modem Physically connecting your Soho How does a firewall work? Setting Up Your Soho Network Network addressing Configuring your public network Double-click the Network icon Configuring your public network Configuring the Soho public network for dynamic addressing Select the Obtain an IP address automatically option. Click Configuring the Soho public network for static addressingOn your computer Click Public Network On the Soho Configuring Soho public network for PPPoE Click Automatically restore lost connections Release and renew the IP configuration Configuring your private network Configure additional computers to the private network Select System Password Changing the Soho system name and passwordSelect System Administration Default factory settings Default factory settings Virtual Private Networking IPSec VPN is not installed Troubleshooting installation and network configuration How do I change to a Dhcp private IP address? What do the on and Mode lights signify on the SOHO?Where are the Soho settings stored? How do I register my SOHO? How do I change to a static private IP address? How do I allow any incoming service? How do I allow incoming IP protocols? How do I set up and disable Web blocking?Click Services and then click Allowed Incoming Services VPN Management How do I set up VPN between two SOHOs? How do I reset the Soho to factory defaults? How do I reboot my SOHO?How do I set up my Soho for remote configuration? How do I get to the Soho Knowledge Base? Set a password on my unit, but I forgot it. Can you help?How do I install a Soho using a Macintosh? How does the seat limitation on the Soho work? How can I see the MAC address of my SOHO? What is a Soho feature key?Cant get a certain Soho feature to work with a DSL modem How do I register for Live Security? IP addresses Configuring Services for a SohoHow does information travel on the internet? Port number ServicesWatchGuard Soho services Protocol Network address translation Allowing incoming services Click Add a Service Adding a pre-configured incoming serviceSelect Allowed Incoming Services Click Add Other TCP or UDP Service Creating a custom incoming serviceAdding an incoming TCP or UDP service Click Allowed Incoming Services. Click Add a Service Click Add Other Service Adding an incoming service with another type of protocolAdding the Any service Click Allowed Incoming Services Removing an incoming serviceClick Add Any Service Click Remove a Service Blocking outgoing servicesBlocking a TCP or UDP service Blocking an alternative protocol Select Blocked Outgoing ServicesClick Block TCP or UDP Service Click Blocked Outgoing Services Click Remove Blocked Service Removing a blocked outgoing service Why create a virtual private network? Configuring Virtual Private Networking One WatchGuard Soho with VPN and an IPSec-compliant Device What you will need IP Address Table example Step-by-step instructions for configuring a Soho VPN tunnel About Feature KeysObtaining a VPN Feature Key Enabling the VPN Feature Key Special considerations How do I connect three or four offices together? Frequently asked questionsWhy do I need a static public address? How do I get a static public IP address? OK, ping is not working How do I obtain a VPN Feature Key?How do I enable a VPN Tunnel? Frequently asked questions Socks for Soho Additional Soho Features Soho Socks implementation Configuring your Socks application on the Soho Disabling Socks on the Soho Select Service Options Click System Information Setting a remote log hostSoho logging Viewing Soho log messages Select Remote Logging Rebooting a WatchGuard SohoClick System Administration Rebooting a WatchGuard Soho How WebBlocker works WatchGuard Soho WebBlocker Bypassing the Soho WebBlocker Web site not in WebBlocker databaseWeb site in WebBlocker database WatchGuard WebBlocker database unavailable Select Web Blocking Configuring the Soho WebBlockerPurchasing and enabling Soho WebBlocker WebBlocker categories Enter the full access password Alcohol/Tobacco Satanic/Cult Search Engines Click Check if the URL is on the CyberNOT List Searching for blocked sites Index Primary IP address 44 secondary IP address TCP UDP