WatchGuard Technologies SSL VPN Benutzerhandbuch

Seite von 195
iv
WatchGuard SSL VPN Gateway
Disable kiosk mode 
............................................................................................................................ 12
Specify multiple ports and port ranges for network resources 
.................................................. 12
Voice over IP softphone support 
...................................................................................................... 12
Editable HOSTS file 
............................................................................................................................. 12
NTLM authentication and authorization support. 
...................................................................... 13
Added challenge-response to RADIUS user authentication 
....................................................... 13
SafeWord PremierAccess changed to support standards-based RADIUS token user 
authentication 
.............................................................................................................................. 13
Updated serial console menu 
........................................................................................................... 13
Features ..................................................................................................................................................... 13
Administration Tool 
............................................................................................................................ 13
Firebox SSL VPN Gateway Settings 
.................................................................................................. 14
Feature Summary 
............................................................................................................................... 16
The User Experience  ............................................................................................................................. 16
Deployment and Administration  ..................................................................................................... 17
Planning your deployment  ................................................................................................................ 18
Deploying the Firebox SSL VPN Gateway in the Network DMZ 
................................................. 18
Deploying the Firebox SSL VPN Gateway in a Secure Network 
................................................. 18
Planning for Security with the Firebox SSL VPN Gateway 
...................................................... 19
Configuring Secure Certificate Management 
............................................................................... 19
Authentication Support 
.................................................................................................................... 19
Deploying Additional Appliances for Load Balancing and Failover 
......................................... 20
Installing the Firebox SSL VPN Gateway for the First Time  ..................................................... 20
Getting Ready to Install the Firebox SSL VPN Gateway 
............................................................... 20
Setting Up the Firebox SSL VPN Gateway Hardware 
................................................................... 21
Configuring TCP/IP Settings for the Firebox SSL VPN Gateway 
................................................. 21
Redirecting Connections on Port 80 to a Secure Port 
.................................................................. 24
Using the Firebox SSL VPN Gateway 
.............................................................................................. 24
The Firebox SSL VPN Gateway operates as follows: 
..................................................................... 24
Starting the Secure Access Client 
..................................................................................................... 25
Enabling Single Sign-On Operation for the Secure Access Client 
............................................. 25
Establishing the Secure Tunnel 
........................................................................................................ 26
Tunneling Destination Private Address Traffic over SSL or TLS 
.................................................. 26
Operation through Firewalls and Proxies 
...................................................................................... 26
Terminating the Secure Tunnel and Returning Packets to the Client 
....................................... 27
Using Kiosk Mode 
............................................................................................................................... 28
Connecting to a Server Load Balancer 
........................................................................................... 28
CHAPTER 3  Configuring Basic Settings 
............................................................................................. 31
Firebox SSL VPN Gateway Administration Desktop  .................................................................. 32
To open the Administration Portal and Administrative Desktop 
.............................................. 32
Using the Administration Portal  ....................................................................................................... 32
Downloads Tab 
................................................................................................................................... 32
Admin Users Tab 
................................................................................................................................. 33
Logging Tab 
......................................................................................................................................... 33
Maintenance Tab 
................................................................................................................................ 33