Watchguard V10 - Page 340

477 pages

Save Page as PDF

To Next Page

To Next Page

To Previous Page

To Previous Page

Loading...

CHAPTER 11: Using Virtual Private Networks (VPN)

308 Vcontroller

2 Select an entry point from the list of policies and then

click

Insert.

The Insert IKE Policy dialog box appears.

Table of Contents

Default Chapter23
- Table of Contents23
CHAPTER 1 Introduction33
- Welcome to Watchguard33
- Watchguard Firebox Vclass Components34
- Minimum Requirements for the Watchguard Vcontroller35
- Software License Keys37
- Watchguard Firebox Vclass Appliance Options37
  - High Availability38
  - Mobile User VPN38
- About this Guide38
CHAPTER 2 Service and Support41
- Benefits of Livesecurity® Service41
- Livesecurity® Broadcasts42
  - Activating the Livesecurity® Service44
- Livesecurity® Self Help Tools46
- Interactive Support Forum47
- Product Documentation48
- Assisted Support48
- Training and Certification50
- Using the Online Help51
CHAPTER 3 Getting Started53
- Gathering Network Information54
- Setting up the Management Station55
- Cabling the Appliance59
- Start a Firebox Vclass Security Appliance59
  - If Problems Occur60
- Using Appliance Discovery61
- Running the Vcontroller Installation Wizard66
- Deploying the Firebox Vclass into Your Network89
CHAPTER 4 Firebox Vclass Basics91
- What Is a Firebox Vclass Appliance91
- Firebox Vclass Features92
- Where the Information Is Stored93
- Vcontroller94
CHAPTER 5 Router and Transparent Mode111
- Router Mode111
- Transparent Mode113
  - Unsupported Features in Transparent Mode114
- Setting a Vclass Appliance to Transparent Mode114
  - Setting an Appliance to Transparent Mode Using Device Discovery115
  - Setting an Appliance to Transparent Mode Using the Installation Wizard119
CHAPTER 6 System Configuration121
- General Configuration122
- Interface Configuration125
- Routing Configuration139
  - Configuring Static Routing139
  - Configuring Dynamic Routing141
- DNS Configuration144
- SNMP Configuration146
- Log Configuration148
- Certificate Configuration148
  - Importing a Certificate or CRL File155
- LDAP Server Configuration157
- NTP Server Configuration159
- Advanced Configuration161
- Hacker Prevention Configuration164
- CPM Management Configuration168
- License Configuration169
  - Add a Single License169
  - Install Licenses from a License Package172
- VLAN Forwarding Option174
- Blocked Sites Configuration177
- High Availability Configuration180
CHAPTER 7 Using Account Manager181
- Configuring Accounts181
  - End-User Accounts for Authentication184
  - Managing Accounts186
- External Access for Remote Management187
- Account Access Conflicts188
  - Resolving Login Conflicts188
CHAPTER 8 About Security Policies191
- About Security Policies191
  - Security Policy Components192
  - Types of Policies193
- Using Policy Manager196
- Defining a Security Policy210
- Using Tenants218
- Using the Firewall Options224
  - Defining the Firewall Action225
- Using Quality of Service (Qos)226
  - Defining a Qos Action228
  - Activating TOS Marking229
- About NAT230
  - Static NAT230
  - Dynamic NAT231
- About Load Balancing232
- Defining a NAT Action232
- Defining a Load-Balancing Action235
- Using Policy Schedules237
  - Defining a Schedule237
- Using the Advanced Settings239
CHAPTER 9 Security Policy Examples243
- Firewall Policy Examples243
- VLAN Policy Examples254
- Qos Policy Examples258
  - Example 1258
  - Example 2258
- Static NAT Policy Examples259
  - Example 1: Translating IP Addresses into Aliases259
  - Example 2: Preventing Conflicts between IP Addresses260
- Load Balancing Policy Examples263
  - Configuring Load Balancing for a Web Server263
  - Configuring Load Balancing for an E-Commerce Site264
CHAPTER 10 Using Proxies269
- In this Chapter270
- Proxy Description270
- General Proxy Configuration273
- Proxy Parameters Reference283
- Reference Sources329
CHAPTER 11 Using Virtual Private Networks (VPN)331
- Tunneling Protocols332
  - Ipsec333
- Authentication333
- Internet Key Exchange (IKE)334
  - NAT Traversal (UDP Encapsulation)335
- Firebox Vclass Appliance VPN Solutions336
  - Mobile User VPN336
  - VPN to Other Ipsec Compliant Devices337
- About VPN Policies337
  - VPN Policies and Ipsec Actions337
  - Using Authentication and Encryption338
- Defining an IKE Policy339
  - Defining an IKE Action342
- Defining a VPN Security Policy346
  - Defining an Ipsec Action347
- Using Tunnel Switching355
  - Enabling Tunnel Switching358
CHAPTER 12 Creating a Remote User VPN Policy359
- About Remote User VPN360
- Configuring the Remote Users Authentication Policy360
- Defining an IKE Policy and IKE Action371
  - Defining an IKE Action for RUVPN371
  - Defining an IKE Policy373
- Defining an RUVPN Security Policy and an Ipsec Action375
- Monitoring Remote User Activity380
CHAPTER 13 Using Alarm Manager383
- Alarm Definitions384
- Responding to an Alarm Notification392
CHAPTER 14 Monitoring the Firebox Vclass395
- Using the Real-Time Monitor395
  - Defining Probes397
  - Monitoring Configured Probes398
- A Catalog of Real-Time Monitor Probe Counters400
CHAPTER 15 Using Log Manager411
- Viewing the Logs412
  - Filtering a Current Log414
- Log Settings415
  - Activating the Remote Logging Feature417
- Log Archiving419
CHAPTER 16 System Information421
- General Information421
- VPN Tunnel Information422
  - Viewing Tunnel Details424
- Traffic Information425
- Route Information426
- RAS User Information427
  - Viewing RAS User Information and Tunnel Details428
- Interface 1 (Public) Information429
- DHCP Server Information430
- Runtime Blocked IP List431
CHAPTER 17 Backing up and Restoring Configurations435
- Create a Backup File436
- Restoring an Archived Configuration437
- Restoring to Factory Default439
- Resetting an Appliance Completely440
  - What You Need440
    - Restoring the Appliance440
- Exporting and Importing Configuration Files442
  - Importing a Configuration File Using Appliance Discovery443
  - Editing an Exported Configuration File444
CHAPTER 18 Using the Diagnostics/Cli Feature447
- Using Connectivity to Test Network Connections447
- Using the Support Features449
  - Configuring Debugging Support450
  - Saving a Policy to a Text File451
- Executing a CLI Script453
- Saving Diagnostic Information454
CHAPTER 19 Setting up a High Availability System457
- High Availability Modes457
- Prerequisites for a High Availability System459
- Connecting the Appliances460
- Configuring a Standby Appliance460
- Customizing HA System Parameters464
- Checking Your HA System Status467
  - Detailed System Status467
- Additional Preparation for Failover468
- Index469

Other manuals for Watchguard V10

Supplementary Guide28 pages

Hardware Guide20 pages

End User Guide8 pages

Related product manuals

Preview: Watchguard Firebox T55

Watchguard Firebox T55

Preview: Watchguard Firebox T35

Watchguard Firebox T35

Preview: Watchguard Firebox T30

Watchguard Firebox T30

Preview: Watchguard Firebox t10

Watchguard Firebox t10

Preview: Watchguard Firebox T40

Watchguard Firebox T40

Preview: Watchguard Firebox T45

Watchguard Firebox T45

Preview: Watchguard Firebox M200

Watchguard Firebox M200

Watchguard Firebox M300

Preview: Watchguard Firebox X55e

Watchguard Firebox X55e

Preview: Watchguard Firebox M400

Watchguard Firebox M400

Watchguard Firebox T35-W

Preview: Watchguard Firebox T35 Series

Watchguard Firebox T35 Series