User ManualTable of ContentsTable of Contents7PART I Introduction11Welcome to WatchGuard11WatchGuard Firebox System components11Minimum requirements13PART II WatchGuard® Services15CHAPTER 1 LiveSecurity Service17LiveSecurity broadcasts17CHAPTER 2 Technical Support21Accessing frequently asked questions (FAQ)21Getting Internet technical support22Getting telephone support22Training23WatchGuard users group24Online Help24CHAPTER 3 WatchGuard Options27Currently available options27Obtaining WatchGuard options28PART III Configuring a Security Policy29CHAPTER 4 Firebox Basics31What is a Firebox?31Opening a configuration file33Saving a configuration file33Resetting Firebox passphrases34Setting the time zone35Reinitializing a misconfigured Firebox35CHAPTER 5 Using the WatchGuard Control Center37Navigating the WatchGuard Control Center37Control Center components37Working with the Control Center40Policy Manager41Firebox Monitors42LogViewer42HostWatch43Historical Reports43LiveSecurity Event Processor43CHAPTER 6 Configuring a Network45Running the QuickSetup wizard45Setting up a drop-in network46Setting up a routed network47Adding a secondary network48Defining a network route48Defining a host route49Changing an interface IP address49Setting the default gateway49Entering WINS and DNS server addresses50Defining a Firebox as a DHCP server50CHAPTER 7 Blocking Sites and Ports53Configuring default packet handling53Blocking a site permanently54Blocking a port permanently55Blocking sites temporarily with service settings56CHAPTER 8 Configuring Services57Adding an existing service57Creating a new service58Defining service properties59Configuring services for authentication61Modifying a service61Deleting a service61Setting up proxy services62Service precedence66CHAPTER 9 Controlling Web Traffic69How WebBlocker works69Configuring the WebBlocker service70Manually downloading the WebBlocker database72CHAPTER 10 Setting Up Network Address Translation73What is dynamic NAT?73Using simple dynamic NAT74Using service-based NAT75Configuring a service for incoming static NAT76CHAPTER 11 Setting Up Logging and Notification79Ensure logging with failover logging79WatchGuard logging architecture80Designating Event Processors for a Firebox80Setting up the LiveSecurity Event Processor83Setting global logging and notification preferences85Customizing logging and notification by service or option86CHAPTER 12 Connect with Out-of-Band Management89Connecting a Firebox with OOB management89Enabling the Management Station89Configuring the Firebox for OOB91Establishing an OOB connection91PART IV Administering a Security Policy93CHAPTER 13 Creating Aliases and Implementing Authentication95Using host aliases95What is user authentication?97Configuring Firebox authentication98Configuring Windows NT Server authentication98Configuring RADIUS server authentication99Configuring CRYPTOCard server authentication100Configuring SecurID authentication101Using authentication to define remote user VPN access102CHAPTER 14 Monitoring Firebox Activity103Firebox Monitors103HostWatch108CHAPTER 15 Reviewing and Working with Log Files113Viewing files with LogViewer113Displaying and hiding fields115Working with log files116CHAPTER 16 Generating Reports of Network Activity119Starting Historical Reports119Creating and editing reports119Specifying report sections120Specifying a report time span121Consolidating report sections121Setting report properties121Exporting reports122Using report filters123Scheduling and running reports124Report sections and consolidated sections125PART V WatchGuard® Virtual Private Networking129CHAPTER 17 Configuring Branch Office Virtual Private Networking131Configuration checklist131Using DVCP to connect to devices132Branch office VPN with IPSec134Configuring WatchGuard VPN140CHAPTER 18 Configuring the Firebox for Remote User VPN143Configuration checklist143Configuring shared servers for RUVPN144Adding remote access users144Configuring services to allow incoming RUVPN145Configuring the Firebox for Remote User PPTP146Configuring the Firebox for Mobile User VPN147Configuring debugging options150CHAPTER 19 Preparing a Host for Remote User VPN151Preparing the client computers151Configuring the remote host for RUVPN with PPTP155Using Remote User PPTP156Configuring debugging options157Index159Size: 1.4 MBPages: 170Language: EnglishOpen manual
