Firebox SSL VPN Gateway Administration Guide - WatchGuard ...

More documents

Recommendations

Info

Firebox SSL Overview• For computers running a JVM 1.4.2 or higher (such asMacintosh or Windows 95/98 computers), kiosk operation isavailable through a Java applet. For Macintosh, Safari is thesupported browser.During kiosk operation, the Firebox SSL sends images only (nodata) over the VPN connection. As a result, there is no risk ofleaving temporary files or cookies on the public computer. Bothtemporary files and cookies are maintained on the Firebox SSLfor the session.As shown in the following example, the Firebox SSL kiosk displaycan include a web browser, several applications, and networkshares.The browser defaults to a URL that is configured per groupthrough the Firebox SSL Administration Tool. The kiosk windowcan also include one-click access to Citrix ICA, Remote Desktop,14 Firebox SSL VPN Gateway Administration Guide
Kiosk OperationSSH, Telnet 3270 emulator, and VNC clients, through icons thatdisplay in the bottom-right corner of the window. You specifyfor each group the applications to be included.The kiosk window also provides one-click access to shared networkdrives, through icons such as the one labelled “ws” in thefollowing example. The Firebox SSL administrator configuresthe permissions granted (read-only or read/write) to each sharednetwork drive.The following example shows the result of opening a sharednetwork drive.VPN users can copy files from the network share to their computersimply by dragging the file onto the KioskFTP icon andselecting the destination in the File Download dialog box.Firebox SSL VPN Gateway Administration Guide 15
Page 1 and 2: WatchGuard ® Firebox SSL VPNGatewa
Page 5 and 6: Using the Telnet 3270 Emulator Clie
Page 7 and 8: CHAPTER 1Firebox SSL OverviewThe Wa
Page 9 and 10: OverviewAs shown in the following i
Page 11 and 12: OverviewEase of use anddeploymentEa
Page 13 and 14: OverviewNOTEThe portal page is cust
Page 15 and 16: Firebox SSL Operationthe packets an
Page 17 and 18: Firebox SSL OperationTarget servers
Page 19: Kiosk Operationthe second tunnel’
Page 23 and 24: CHAPTER 2Administering theFirebox S
Page 25 and 26: Using the Firebox SSL Remote Admin
Page 27 and 28: Using the Administration Toolpreced
Page 29 and 30: Using the Serial ConsoleUsing the S
Page 31 and 32: Supporting Secure Access UsersWhen
Page 33 and 34: Supporting Secure Access Users•
Page 35 and 36: Generating a Secure Certificate for
Page 41 and 42: Unencrypting the Private KeyTo unen
Page 43 and 44: Unencrypting the Private KeyTo comb
Page 45 and 46: Blocking External Access to the Adm
Page 47 and 48: Viewing and Changing the System Dat
Page 49 and 50: Saving and Restoring the Configurat
Page 51 and 52: Managing VPN ConnectionsTo save the
Page 53 and 54: Managing VPN Connectionstion to the
Page 55 and 56: Restarting the Firebox SSLThe user
Page 57 and 58: CHAPTER 3Working with a VPNConnecti
Page 59 and 60: Using the Access PortalIf you conne
Page 61 and 62: Using the Access PortalNOTEThe Linu
Page 63 and 64: Connecting from a Private ComputerN
Page 65 and 66: Connecting from a Private ComputerI
Page 67 and 68: Connecting from a Public Computer (
Page 69 and 70: Connecting from a Public Computer (
Page 71 and 72:
Connecting from a Public Computer (
Page 73 and 74:
Page 75 and 76:
Page 77 and 78:
CHAPTER 4Configuring FireboxSSL Net
Page 79 and 80:
Configuring Network InterfacesFor m
Page 81 and 82:
Configuring RoutesBy default, the F
Page 83 and 84:
Configuring Routes5 Click Submit.Dy
Page 85 and 86:
Configuring RoutesFigure 4: Buildin
Page 87 and 88:
CHAPTER 5Configuring FireboxSSL Ope
Page 89 and 90:
Configuring Authentication, Authori
Page 91 and 92:
Using a Local User List for Authent
Page 93 and 94:
Using a Local User List for Authent
Page 95 and 96:
Using RADIUS Servers for Authentica
Page 97 and 98:
Using LDAP Servers for Authenticati
Page 99 and 100:
Using LDAP Servers for Authenticati
Page 101 and 102:
Using RSA SecurID for Authenticatio
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Adding Local UsersTo create a user
Page 109 and 110:
Controlling Network AccessBy defaul
Page 111 and 112:
Controlling Network Access10.10.0.0
Page 113 and 114:
Controlling Network AccessDenying A
Page 115 and 116:
Customizing VPN Portal PagesThe oth
Page 117 and 118:
Customizing VPN Portal Pagesappropr
Page 119 and 120:
Customizing VPN Portal PagesAn imag
Page 121 and 122:
Customizing VPN Portal Pages2 Clear
Page 123 and 124:
Configuring Host Check Rules2 Speci
Page 125 and 126:
Configuring Network Shares for Kios
Page 127 and 128:
Adding and Configuring User GroupsN
Page 129 and 130:
Adding and Configuring User Groups3
Page 131 and 132:
Adding and Configuring User Groupst
Page 133 and 134:
Adding and Configuring User GroupsT
Page 135 and 136:
Adding and Configuring User GroupsV
Page 137 and 138:
Adding and Configuring User GroupsE
Page 139 and 140:
Adding and Configuring User Groupsp
Page 141 and 142:
Enabling Split DNSTo enable split t
Page 143 and 144:
Configuring Internal Failover2 Ente
Page 145 and 146:
Forcing VPN User Re-login2 Under Fo
Page 147 and 148:
Configuring Secure Access for Singl
Page 149 and 150:
APPENDIX ALogging, Monitoring,and T
Page 151 and 152:
Viewing and Downloading System Mess
Page 153 and 154:
Enabling and Viewing SNMP Logs2 Ent
Page 155 and 156:
Viewing System StatisticsViewing Sy
Page 157 and 158:
Monitoring Firebox SSL OperationsFi
Page 159 and 160:
Recovering from a Crash of the Fire
Page 161 and 162:
TroubleshootingThe Firebox SSL does
Page 163 and 164:
APPENDIX BLegal and CopyrightInform
Page 165 and 166:
it clear that any patent must be li
Page 167 and 168:
works. But when you distribute the
Page 169 and 170:
6. Each time you redistribute the P
Page 171 and 172:
11. BECAUSE THE PROGRAM IS LICENSED
Page 173 and 174:
This is free software, and you are
Page 175 and 176:
IndexAaccess control, see ACL and u
Page 177 and 178:
EEthereal Network Analyzer 151Ether
Page 179 and 180:
networks accessible to Gateway 103d
Page 181 and 182:
TTelnet 3270 Emulator client 67enab
show all

Firebox SSL VPN Gateway Administration Guide - WatchGuard ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?