Multi-Tech Systems RF660 Handbücher

Benutzerhandbuch

Inhaltsverzeichnis

Chapter 1 – Product Description, Features, and Overview
7
Product Description
7
Features
7
Feature Highlights
8
Ship Kit Contents
9
License Keys
10
Additional RouteFinder Documentation
10
Safety Warnings
11
Safety Recommendations for Rack Installations
11
RouteFinder Front Panels
12
RF760/660VPN Front Panel
12
RF600VPN
13
RouteFinder Back Panels
14
RF760VPN Back Panel
14
RF660VPN Back Panel
14
RF600VPN Back Panel
14
Specifications
15
Overview of RouteFinder VPN Technology
17
Networks
17
The Firewall
17
Network Components That Work with the Firewall
17
Typical Applications
20
Chapter 2 – Installation
21
Pre-Installation Planning
21
Planning and Establishing the Corporate Security Policy
21
Planning the Network
22
Establishing an Address Table
22
System Administrator Required Planning
22
Installation Overview
23
Hardware Installation Procedure
23
Cabling Overview
23
Setting up a Workstation and Starting the RouteFinder VPN
24
Navigating Through the Screens
26
Menus and Sub-Menus
27
Chapter 3 – Configuration
28
Initial Configuration Step
28
Second Configuration Step
29
The Wizard Setup Screen
30
Chapter 4 – Configuration Examples
31
Example 1 – LAN-to-LAN VPN (Branch Office)
31
Example 2 – Remote Client-to-LAN VPN Configuration
36
Example 3 – Remote Client-to-LAN Configuration Using DNAT and Aliasing
37
Example 4 – Client-to-LAN Configuration Using PPTP Tunneling
38
Chapter 5 – URL Categorization
39
Chapter 6 – RouteFinder Software
42
Menu Bar
42
Administration
43
Administration > System Setup
43
Adminstration > SSH
45
Administration > SNTP Client
46
Administration > Administrative Access
47
Administration > Site Certificate
49
Administration > License Key
50
Administration > Intrusion Detection
51
Administration > Tools
52
Administration > System Scheduler
54
Administration > Factory Defaults
54
Administration > User Authentication > Local Users
55
Administration > User Authentication > RADIUS & SAM
56
Administration > Restart
58
Administration > Shutdown
58
Networks & Services
59
Networks & Services > Networks
59
Networks & Services > Services
61
Networks & Services > Network Groups
63
Networks & Services > Service Groups
64
Proxy
65
General Information About Proxies
65
Proxy > HTTP Proxy
66
Proxy > HTTP Proxy > Custom Filters
69
Proxy > SMTP Proxy
71
Proxy > SMTP Proxy > SMTP SPAM Filtering
74
Proxy > POP3 Proxy
77
Proxy > POP3 Proxy > POP3 SPAM Filtering
78
Proxy > SOCKS Proxy
80
Proxy > DNS Proxy
82
Network Setup
83
Network Setup > Interface
84
Network Setup > PPP
86
Change Your Country/Region Code
86
Network Setup > PPPoE
87
Network Setup > DHCP Client
88
Network Setup > Dynamic DNS
89
Network Setup > Routes
90
Network Setup > Masquerading
91
Network Setup > SNAT
92
Network Setup > DNAT
93
DHCP Server
94
DHCP Server > Subnet Settings
94
DHCP Server > Fixed Addresses
94
Tracking
95
Tracking > Accounting
95
Tracking > Update Services
96
Tracking > Backup
98
Tracking > Version Control
100
Packet Filters
101
Packet Filters > Packet Filter Rules
101
Packet Filters > ICMP
103
Packet Filters > Advanced
104
Packet Filters > Enable/Disable Log
105
VPN (Virtual Private Networks)
106
VPN > IPSec
106
Introduction to Virtual Private Networks
106
VPN > x.509 Certificates
111
VPN > IPSec Bridging
111
VPN > PPTP
112
Wizard Setup
114
Statistics & Logs
116
Statistics & Logs > Uptime
117
Statistics and Logs > Hardware
117
Statistics and Logs > Networks
118
Statistics & Logs > Interfaces
120
Statistics & Logs > SMTP Proxy
121
Statistics & Logs > Accounting
122
Statistics & Logs > Self Monitor
123
Statistics & Logs > IPSec
124
Statistics & Logs > PPTP
124
Statistics & Logs > Packet Filter
125
Statistics & Logs > Port Scans
126
Statistics & Logs > View Logs
126
Statistics & Logs > HTTP Access
127
Statistics & Logs > DHCP
128
Statistics & Logs > SMTP & POP3 Virus Quarantines
129
Statistics & Logs > SMTP SPAM Quarantines
129
Statistics & Logs > Administrative Authentication Log
129
Chapter 7 – User Authentication Methods
130
Proxy Services and Authentication Methods
130
Which Method Should You Choose?
130
Authentication Setup
131
Setting Up RADIUS Authentication
131
Setting Up A Microsoft IAS RADIUS Server
131
Setting Up NT/2000 SAM (SMB) Authentication
132
Chapter 8 – Frequently Asked Questions (FAQs)
133
Chapter 9 – Troubleshooting
139
Appendix A – Disposition of Events for the RouteFinder v3.2x
141
1. Abstract
142
II. Inbound Access Log
143
III. Outbound Access Log
145
IV. Access Requests through Firewall Dropped
146
V. Access Requests to Firewall Dropped
146
VI. Administrative Authentication Logs
147
VII. Admin Port Access Log
147
VIII. Startup History Log
147
IX. User Log
147
X. Fragmented Dropped Log
147
XI. ICMP Information
148
Appendix B – The RouteFinder Rescue Kernel
149
Method 1 – How to Perform the Install Using No External Server
150
Method 2 – How to Perform the Install Using an External FTP Server
151
Method 3 – How to Perform the Install If the Other Methods Fail or If the File Systems Are Corrupted
152
Replacement
153
Board Components
153
Hardware Upgrades and Add-ons
154
Software Add-ons
156
Overnight Replacement Service
156
Appendix D – CD-ROM Drive Adapter and Pin Out
157
CD-ROM Drive Adapter Pin Out
157
Appendix E – RouteFinder Maintenance
158
Appendix F – Ordering Accessories
160
SupplyNet Online Ordering Instructions
160
Appendix G – Technical Support
161
Technical Support Contacts
161
Recording RouteFinder Information
161
Appendix H – Multi-Tech Systems, Inc. Warranty and Repairs Policies
162
Appendix I – Regulatory Compliance
164
Appendix J – License Agreements
166
Multi-Tech Systems, Inc. End User License Agreement (EULA)
166
GNU GENERAL PUBLIC LICENSE
168
SurfControl URL Filtering End-User Terms
170
Kaspersky Standard End User License Agreement
173
Appendix K – Waste Electrical and Electronic Equipment Directive (WEEE)
175
Glossary
176
Index
186
1. Abstract
142
II. Inbound Access Log
143
III. Outbound Access Log
145
IV. Access Requests through Firewall Dropped
146
V. Access Requests to Firewall Dropped
146
VI. Administrative Authentication Logs
147
VII. Admin Port Access Log
147
VIII. Startup History Log
147
IX. User Log
147
X. Fragmented Dropped Log
147
XI. ICMP Information
148
CD-ROM Drive Adapter Dimensions
157
CD-ROM Drive Adapter Pin Out
157
3DES Encryption
15
Certificate of Authority Generation
111
3DES Throughput
15
Change the country/region code
86
Changing Passwords
30
Checking disk usage of quarantined emails
54
Firewalls
17
Client and site filtering
7
Interfaces
83
Client-to-LAN Configuration Using PPTP Tunneling
38
Accessories
160
content filtering
8
Accounting
95
Content filtering subscription
7
Accounting device
95
Continuous PING
52
Accounting Logs
122
Country/region code
86
Action on infected emails
72
CPU, RAM, and SWAP Utilization
117
Add a Network
59
Custom Filters
69
Add a VPN manual connection
109
CVS Server
100
Add an IKE connection
107
CVS Settings
100
Additional Documents
10
Address Table - Establishing
22
Data Encryption
7
Administration > Factory Defaults
54
Default Gateway
84
Administration > Intrusion Detection
51
default Service Group – default_outbound
102
Administration > License Key
50
default_outbound – default Service Group
102
Administration > Restart
58
Destination NAT
18
Administration > Shut Down
58
DHCP Client
88
Administration > Site Certificate
49
DHCP Logs
128
Administration > SNTP Client
46
DHCP server
94
Administration > SSH Client
45
DHCP Server
94
Administration > System Scheduler
54
DHCP server > Fixed Addresses
94
Administration > System Setup
43
DHCP Server > Subnet Settings
94
Administration > Tools
52
Differences Between SOCKS and NAT
80
Administrative Access
47
Diffie-Hellman
7
Dimensions
16
Advanced packet filter settings
104
Disconnect Automatically
48
AH - Authentication Header Protocol
109
Disposition of Events
142
AH Key
109
AntiVirus license key
50
DMZ eth2
85
AntiVirus License Key
10
DNAT
93
Application layer security
7
DNAT
93
DNAT and Aliasing
37
Authentication Header (AH)
7
DNS Proxy
82
Authentication Keys Maintenance
158
Domain Name Server
84
Authentication Setup
131
Download Backup
99
Automatic Dial Backup
8
Dynamic DNS
89
Automatic dial-backup
7
Email Anti-Virus Code
156
Back Panels
14
Email notification configuration
44
Backup
98
email virus protection
8
Basic configuration
29
Enable PPP Dial Backup
86
Blacklists
74
Board Components
153
Encapsulating Security Protocol (ESP)
7
Branch Office example
31
Encryption and Authentication Algorithms
109
Branch Office VPN example
20
ESP - Encapsulating Security Payload
109
Espauthkey
109
on whole Internet
102
Espenckey
109
Browser
24
Cabling
23
Aliasing and DNAT
37
Case-sensitive password
25
LAN-to-LAN setup
31
CD-ROM - Adding
155
PPTP Tunneling
38
Remote Client-to-LAN setup
36
Key exchanges
7
Keyboard Connection
155
Factory Defaults
54
Features
7
Filtering Rules
41
LAN
17
Finding license key numbers
10
LAN eth0
85
Firewall Certification
16
LEDs
12
Firewall Features
15
License Key
50
firewall security
8
License Key for AntiVirus software
10
Firewall Security example
20
License Key for System License
10
Firewalls and Networks
17
License Key for URL Categorization
10
Fragmented packets
104
License Keys
10
Frequently Asked Questions
133
Front Panel for RF600VPN
13
GNU General Public License
168
Front Panel for RF760/660VPN
12
SurfControl URL Filtering End-User Terms
170
Lithium battery
11
Glossary
176
Local Authentication
55
GNU General Public License
168
Local RouteFinder User Authentication
130
Local Users
55
H.323 packets
104
Login screen
25
Hard Disk Drive Upgrade
155
Logo on logon page
48
Hardware Installation
23
Logout
42
Hardware Logs
117
Hardware Upgrades & Add-ons
154
MAC address-based filtering
104
History of Calls
124
Maintenance
158
Host Name
84
Management Features
15
Accounts management
158
MD5 - Authentication Algorithm
109
Authentication Keys Maintenance
158
Memory Upgrade
155
Disk space management
158
Menu bar
42
Shared Secret Maintenance
158
Menu structure
26
System backups
158
HTTP Access Logs
127
Microsoft IAS
56
HTTP Access Port
48
Microsoft IAS RADIUS Server Setup
131
HTTP Proxy
66
Monitor Connection
155
HTTP User
55
Monitoring
158
https
24
HTTPS port
48
Navigating the screens
26
Network Address Translation (NAT)
7
ICMP
103
ICMP forwarding
103
DMZ (eth2)
85
ICMP on firewall
103
external (eth1)
85
ICSA Firewall Certified
16
LAN eth0
85
IKE Protocol
107
Network Card configuruation
85
Import Backup from Firewall/VPN
98
Network Groups
63
Import Backup from Remote Client
99
Network Logs
118
Installation
23
Network Setup > DHCP Client
88
Interfaces
83
Network Setup > DNAT
93
Interfaces Logs
120
Network Setup > Dynamic DNS
89
Internet PKIs (Public Key Infrastructure)
7
Network Setup > Interfaces
83
Intrusion Detection
51
Network Setup > Masquerading
91
Intrusion Detection Livelog
126
Network Setup > PPP
86
IP address mapping/port forwarding
7
Network Setup > PPPoE
87
IP Aliases
85
Network Setup > Routes
90
IP-Based Accounting
95
Network Setup > SNAT
92
IPSec
106
Network Setup Interfaces
84
IPSec and PPTP VPN tunneling
7
Networks
59
IPSec Bridging
111
Networks & Services > Network Groups
63
IPSec Logs
124
Networks & Services > Networks
59
IPSec VPN client software
8
Networks & Services > Serivces
61
ISO Image Directions
149
Networks & Services > Service Groups
64
ISO Layers and TCP/IP
19
Networks Entered Display on Other Screen
60
non-transparent mode
68
NT SAM (SMB) User Authentication
130
NT/2000 SAM Authentication Setup
132
Remote User
15
Remote User example
20
Removing the Top Cover
154
Open Web Browser
24
Reporting function
7
Operating Environment
16
Rescue Kernel
149
Overnight Replacement Service
156
Restart
58
RouteFinder Technology Overview
17
Packet Filter > ICMP
52
Routes
90
Packet Filter Logs
125
Routing table
118
Packet Filter Rules
101
RSA digital signatures
7
Packet Filters > Advanced
104
RSA Key
98
Packet Filters > Enable/Disable Logging
105
Rules for Using SMTP Proxy
71
Packet Filters > ICMP
103
Packet Filters > Packet Filter Rules
101
SAM
57
SAM Prerequisite
57
Passwords - Changing
30
Save Settings
42
Secure local or remote management
7
PING
52
PING to send packets continuously
52
Select encryption method
107
Planning by System Administrator
22
Self Monitor
123
Planning the Network
22
Serivces
61
Plug-and-Play Security Appliance
8
Service Groups
64
Policy for Corporate Security
21
Services entered display on other screens
62
POP3 Message Filtering
79
Services Update
97
POP3 Proxy
77
SHA1- Secure Hash Algorithm
109
POP3 SPAM filtering
78
Shared broadband
7
POP3 virus scanning
77
Shared Secret
35
Port Scan Logs
126
Shared secrets
7
Power
16
Ship Kit Contents
9
Power Up
24
Shut Down
58
PPP
86
PPPoE
87
Site Certificate
49
PPTP
112
SMTP
71
PPTP Logs
124
SMTP & POP3 Virus Quarantines
129
PPTP packet passthrough
104
SMTP Proxy Accepted Incoming Domains
72
PPTP users setup
112
SMTP Proxy Logs
121
Processor Upgrade
154
SMTP Proxy Rules
71
Product Description
7
SMTP Spam filtering
74
Protection mechanisms
18
SMTP Spam Quarantines
129
SMTP Virus Scanning
72
AH
62
ESP
62
SOCKS Proxy
80
ICMP
62
SOCKS User
55
TCP & UDP
62
Software
42
Protocols
15
Software Add-ons
156
Proxies
18
Proxies - General Information
65
Source NAT
18
Proxy > DNS
52
Source Port
61
Proxy > DNS Proxy
82
SPAM filtering
74
Proxy > SMTP
71
Specifications
15
Proxy > SMTP Proxy > Spam Filtering
74
SSH allowed networks
45
Proxy > SOCKS Proxy
80
SSH Sentinel IPSec VPN Client Software
156
Proxy >POP3 Proxy
77
SSH User
55
Proxy Services & Authentication Methods
130
Stateful Packet Inspection
7
Statistics & Logs
116
Rack Installation
11
Statistics & Logs > Accounting
122
Rack Mounting
155
RADIUS
56
Statistics & Logs > DHCP
128
RADIUS Authentication
131
Statistics & Logs > Hardware
117
RADIUS Prerequisite
56
Statistics & Logs > HTTP Access
127
RADIUS User Authentication
130
Statistics & Logs > Interfaces
120
Recording RouteFinder Information
161
Statistics & Logs > IPSec
124
Recovery CD
9
Statistics & Logs > Networks
118
Regulatory Information
164
Statistics & Logs > Packet Filters
125
Remote Client-to-LAN setup
36
Statistics & Logs > Port Scans
126
Remote Syslog Host
44
Statistics & Logs > PPTP
124
Statistics & Logs > Self Monitor
123
Update Service
96
Statistics & Logs > SMTP Proxy
121
Updating
159
Statistics & Logs > SMTP Spam Quarantines
129
Upgrade the Processor
154
Statistics & Logs > Uptime
117
Uptime Logs
117
Statistics & Logs > View Logs
126
URL Categories
67
Sub-menus
27
URL Categorization
39
Subnet Settings
94
URL Categorization Key
50
SurfControl URL Filtering End-User Terms
170
URL Categorization License Key
10
URL License Key
40
MS Explorer
65
URL License number
39
Netscape
65
user authentication
9
System License Key
10
User Authentication
55
System Scheduler
54
User Authentication > RADIUS
56
System Setup
43
User Authentication > SAM
57
User Authentication Methods
130
System Update Server
96
User Defined Packet Filter Rules
102
system updates
7
Version Control
100
TCP Connect
53
Version number on logon page
48
Technical Support
161
View Logs
126
Telecom warnings
11
Virus scanning for SMTP
72
Test Filtering
41
Virus Update Server
96
Test Web Sites for Blocking
41
VPN > IPSec
106
Time adjustment
44
VPN > IPSec Bridging
111
Tools
52
Top Cover - Removing
154
VPN-Based Accounting
95
Trace Route
53
Tracking > Accounting
95
Tracking > Backup
98
WAN
17
Tracking > Update
96
WAN eth1
85
Tracking > Version Control
100
Warranty
15
Tracking bounced emails
54
WINS Server
84
Tracking bounced RouteFinder emails
54
Wizard Setup
114
Tracking SMTP Report Logs
54
Wizard Setup Example
30
Traffic monitoring and reporting
7
Workstation Setup
24
Transparent mode
66
Troubleshooting
139
X.509 certificate
111
Tunnels
15
X.509 certificates
7
Typical applications
20

Größe:

2,57 MB
Seiten:

189
Language:

English

Handbuch öffnen

Benutzerhandbuch für Multi-Tech Systems RF660

Benutzerhandbuch

Inhaltsverzeichnis