Firebox SSL VPN Gateway Administration Guide - WatchGuard ...

More documents

Recommendations

Info

Administering the Firebox SSLFrom the Downloads page, you can launch or download theAdministration Tool and download documentation, portal pagetemplates, and a sample email that you can customize withinstructions for VPN users.NOTEBy default, if you configure the Firebox SSL to use both LANinterfaces, the Administration Portal can be accessed fromeither interface. To block administration access from theexternal-facing interface, see “Blocking External Access tothe Administration Portal” on page 39.4 Click either Launch Firebox SSL Administration Tool orDownload the Firebox SSL Administration Tool. (If you seea Security Warning dialog, click Yes to download therequired ActiveX Helper client.)- If you chose the launch link, skip to step 5.- If you chose the download link, click Save to save ashortcut to your desktop, enabling you to skip the20 Firebox SSL VPN Gateway Administration Guide
Using the Administration Toolpreceding steps the next time that you want to openthe Remote Admin Terminal window.5 In the Remote Admin Terminal login dialog, enter theFirebox SSL administrator credentials. Unless you havechanged the default administrative account as described in“Managing Administrative Users” on page 42, enter root inthe User Name field and rootadmin in the Password field,and then click Connect.The Remote Admin Terminal window opens.For information on the applications available from the RemoteAdmin Terminal window, see the following topics:• “Using the Administration Tool” on page 21• “Monitoring Firebox SSL Operations” on page 150Using the Administration ToolThe Administration Tool, accessed from the Remote Admin Terminalwindow, contains all Firebox SSL configuration controls,except for administrative user account management which isavailable only from the Administration Portal.NOTEThe Firebox SSL also has a command-line interface, the serialconsole, described in “Using the Serial Console” on page 23.Firebox SSL VPN Gateway Administration Guide 21
Page 1 and 2: WatchGuard ® Firebox SSL VPNGatewa
Page 5 and 6: Using the Telnet 3270 Emulator Clie
Page 7 and 8: CHAPTER 1Firebox SSL OverviewThe Wa
Page 9 and 10: OverviewAs shown in the following i
Page 11 and 12: OverviewEase of use anddeploymentEa
Page 13 and 14: OverviewNOTEThe portal page is cust
Page 15 and 16: Firebox SSL Operationthe packets an
Page 17 and 18: Firebox SSL OperationTarget servers
Page 19 and 20: Kiosk Operationthe second tunnel’
Page 21 and 22: Kiosk OperationSSH, Telnet 3270 emu
Page 23 and 24: CHAPTER 2Administering theFirebox S
Page 25: Using the Firebox SSL Remote Admin
Page 29 and 30: Using the Serial ConsoleUsing the S
Page 31 and 32: Supporting Secure Access UsersWhen
Page 33 and 34: Supporting Secure Access Users•
Page 35 and 36: Generating a Secure Certificate for
Page 41 and 42: Unencrypting the Private KeyTo unen
Page 43 and 44: Unencrypting the Private KeyTo comb
Page 45 and 46: Blocking External Access to the Adm
Page 47 and 48: Viewing and Changing the System Dat
Page 49 and 50: Saving and Restoring the Configurat
Page 51 and 52: Managing VPN ConnectionsTo save the
Page 53 and 54: Managing VPN Connectionstion to the
Page 55 and 56: Restarting the Firebox SSLThe user
Page 57 and 58: CHAPTER 3Working with a VPNConnecti
Page 59 and 60: Using the Access PortalIf you conne
Page 61 and 62: Using the Access PortalNOTEThe Linu
Page 63 and 64: Connecting from a Private ComputerN
Page 65 and 66: Connecting from a Private ComputerI
Page 67 and 68: Connecting from a Public Computer (
Page 77 and 78:
CHAPTER 4Configuring FireboxSSL Net
Page 79 and 80:
Configuring Network InterfacesFor m
Page 81 and 82:
Configuring RoutesBy default, the F
Page 83 and 84:
Configuring Routes5 Click Submit.Dy
Page 85 and 86:
Configuring RoutesFigure 4: Buildin
Page 87 and 88:
CHAPTER 5Configuring FireboxSSL Ope
Page 89 and 90:
Configuring Authentication, Authori
Page 91 and 92:
Using a Local User List for Authent
Page 93 and 94:
Using a Local User List for Authent
Page 95 and 96:
Using RADIUS Servers for Authentica
Page 97 and 98:
Using LDAP Servers for Authenticati
Page 99 and 100:
Using LDAP Servers for Authenticati
Page 101 and 102:
Using RSA SecurID for Authenticatio
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Adding Local UsersTo create a user
Page 109 and 110:
Controlling Network AccessBy defaul
Page 111 and 112:
Controlling Network Access10.10.0.0
Page 113 and 114:
Controlling Network AccessDenying A
Page 115 and 116:
Customizing VPN Portal PagesThe oth
Page 117 and 118:
Customizing VPN Portal Pagesappropr
Page 119 and 120:
Customizing VPN Portal PagesAn imag
Page 121 and 122:
Customizing VPN Portal Pages2 Clear
Page 123 and 124:
Configuring Host Check Rules2 Speci
Page 125 and 126:
Configuring Network Shares for Kios
Page 127 and 128:
Adding and Configuring User GroupsN
Page 129 and 130:
Adding and Configuring User Groups3
Page 131 and 132:
Adding and Configuring User Groupst
Page 133 and 134:
Adding and Configuring User GroupsT
Page 135 and 136:
Adding and Configuring User GroupsV
Page 137 and 138:
Adding and Configuring User GroupsE
Page 139 and 140:
Adding and Configuring User Groupsp
Page 141 and 142:
Enabling Split DNSTo enable split t
Page 143 and 144:
Configuring Internal Failover2 Ente
Page 145 and 146:
Forcing VPN User Re-login2 Under Fo
Page 147 and 148:
Configuring Secure Access for Singl
Page 149 and 150:
APPENDIX ALogging, Monitoring,and T
Page 151 and 152:
Viewing and Downloading System Mess
Page 153 and 154:
Enabling and Viewing SNMP Logs2 Ent
Page 155 and 156:
Viewing System StatisticsViewing Sy
Page 157 and 158:
Monitoring Firebox SSL OperationsFi
Page 159 and 160:
Recovering from a Crash of the Fire
Page 161 and 162:
TroubleshootingThe Firebox SSL does
Page 163 and 164:
APPENDIX BLegal and CopyrightInform
Page 165 and 166:
it clear that any patent must be li
Page 167 and 168:
works. But when you distribute the
Page 169 and 170:
6. Each time you redistribute the P
Page 171 and 172:
11. BECAUSE THE PROGRAM IS LICENSED
Page 173 and 174:
This is free software, and you are
Page 175 and 176:
IndexAaccess control, see ACL and u
Page 177 and 178:
EEthereal Network Analyzer 151Ether
Page 179 and 180:
networks accessible to Gateway 103d
Page 181 and 182:
TTelnet 3270 Emulator client 67enab
show all

Firebox SSL VPN Gateway Administration Guide - WatchGuard ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?