Kerio Control — Administrator's Guide - Kerio Software Archive

Configuration Assistant
Other interfaces are considered as not used and added to the group Other Interfaces. For
these interfaces, it will be necessary to define corresponding traffic rules manually (e.g. DMZ
creation rule).
When using failover, only two Internet Connections may be applied, one for the
primary, and the other as a failover.
General notes
• A default gateway must not be set on any of the local interfaces.
• If the interface configuration does not correspond with the real network configuration,
edit it (e.g. if the firewall uses multiple interfaces for the local network, move
corresponding interfaces to the group Trusted/Local Interfaces).
Define traffic policy
The network rules wizard demands only the data that is essential for creating a basic set of
traffic rules:
1. In the Configuration Assistant dialog, click Define traffic policy.
2. Enable the Kerio Control Administration and VPN services, if you want to establish VPN
connections, or to remotely administer Kerio Control.
3. Click Next.
4. Select Kerio Control services to be available from the Internet:
• VPN Services — connection to the Kerio VPN server or IPsec VPN server. Enable
these services if you want to create VPN tunnels and/or connect remotely to the
local network by using Kerio VPN Client or IPsec VPN clients.
• Kerio Control Administration — enables remote administration of Kerio Control.
This option allows HTTPS traffic on port 4081 (port of the administration interface
cannot be changed).
5. Click Next.
6. Make any other services on the firewall or servers in the local network available from the
Internet (mapping).
7. Click Add.
In the Inbound policy dialog, you can configure the following parameters:
24