Introduction

Welcome to WatchGuard

WatchGuard Firebox System Components

WatchGuard Firebox

WatchGuard Control Center

WatchGuard security applications

WatchGuard LiveSecurity Service

Minimum Requirements

Software requirements

Web browser requirements

Hardware requirements

WatchGuard Options

VPN Manager

High Availability

Mobile User VPN

SpamScreen

Obtaining WatchGuard Options

About this Guide

Service and Support

Benefits of LiveSecurity Service

LiveSecurity Broadcasts

Activating the LiveSecurity Service

LiveSecurity Self Help Tools

WatchGuard Users Forum

Online Help

Starting WatchGuard Online Help

Searching for topics

Copying the Help system to additional platforms

Online Help system requirements

Context-sensitive Help

Product Documentation

Assisted Support

LiveSecurity Program

LiveSecurity Gold Program

Firebox Installation Services

VPN Installation Services

Training and Certification

Getting Started

Gathering Network Information

Selecting a Firewall Configuration Mode

Routed configuration

Drop-in configuration

Choosing a Firebox configuration

Adding secondary networks to your configuration

Dynamic IP support on the External interface

Setting Up the Management Station

Software encryption levels

Cabling the Firebox

Using a serial cable

Using TCP／IP

Running the QuickSetup Wizard

Testing the connection

Entering IP addresses

Deploying the Firebox into Your Network

What Next

Customizing your security policy

What to expect from LiveSecurity Service

Firebox Basics

What is a Firebox？

Opening a Configuration File

Opening a configuration from the Firebox

Opening a configuration from a local hard disk

Saving a Configuration File

Saving a configuration to the Firebox

Saving a configuration to the Management Station local drive

Resetting Firebox Passphrases

Setting the Firebox Model

Setting the Time Zone

Setting a Firebox Friendly Name

Using Policy Manager to Configure Your Network

Starting a New Configuration File

Setting the Firebox Configuration Mode

Setting IP Addresses of Firebox Interfaces

Setting addresses in drop-in mode

Setting addresses in routed mode

Setting DHCP or PPPoE Support on the External Interface

Configuring DHCP or PPPoE support

Enabling static PPPoE

Configuring Drop-in Mode

Defining External IP Aliases

Adding Secondary Networks

Entering WINS and DNS Server Addresses

Configuring Out-of-Band Management

Defining a Firebox as a DHCP Server

Adding a new subnet

Modifying an existing subnet

Removing a subnet

Adding Basic Services to Policy Manager

Configuring Routes

Defining a Network Route

Defining a Host Route

Using the WatchGuard Control Center

Starting Control Center and Connecting to a Firebox

Control Center Components

QuickGuide

Front panel

Firebox and VPN tunnel status

Traffic Monitor

Working with Control Center

Running the QuickSetup Wizard

Opening Firebox System applications

Flushing the ARP cache

Connecting to a Firebox

Changing the polling rate

Setting the maximum number of log entries

Displaying Traffic Monitor entries in color

Viewing different components of Control Center

Specifying Always on Top

Getting Help on the Web

Manipulating Traffic Monitor

Using Control Center Applications

Launching Policy Manager

Launching Firebox Monitors

Launching LogViewer

Launching HostWatch

Launching Historical Reports

Opening the WSEP user interface

Configuring Network Address Translation

Dynamic NAT

Using Simple Dynamic NAT

Enabling simple dynamic NAT

Adding simple dynamic NAT entries

Reordering simple dynamic NAT entries

Specifying simple dynamic NAT exceptions

Using Service-Based Dynamic NAT

Enabling service-based dynamic NAT

Configuring service-based dynamic NAT

Configuring a Service for Incoming Static NAT

Adding external IP addresses

Setting static NAT for a service

Using 1-to-1 NAT

Proxies and NAT

Configuring Filtered Services

Selecting Services for your Security Policy Objectives

Incoming service guidelines

Outgoing service guidelines

Adding and Configuring Services

Configurable parameters for services

Adding a service

Creating a new service

Deleting a service

Defining Service Properties

Accessing a service Properties dialog box

Adding service properties

Adding addresses or users to service properties

Working with wg_icons

Customizing logging and notification

Service Precedence

Configuring Proxied Services

Configuring an SMTP Proxy Service

Configuring the Incoming SMTP Proxy

Configuring the Outgoing SMTP Proxy

Configuring an FTP Proxy Service

Selecting an HTTP Service

Adding a proxy service for HTTP

Configuring a caching proxy server

Configuring the DNS Proxy Service

Adding the DNS Proxy Service

Creating Aliases and Implementing Authentication

Using Aliases

Adding an alias

How User Authentication Works

Authentication Server Types

Defining Firebox Users and Groups for Authentication

Configuring Windows NT Server Authentication

Configuring RADIUS Server Authentication

Configuring CRYPTOCard Server Authentication

Configuring SecurID Authentication

Protecting Your Network From Attacks

Default Packet Handling

Blocking spoofing attacks

Blocking port space and address space attacks

Stopping IP options attacks

Stopping SYN Flood attacks

Changing SYN flood settings

Integrating Intrusion Detection

Using the fbidsmate command-line utility

Blocking Sites

Blocking a site permanently

Creating exceptions to the Blocked Sites list

Changing the auto-block duration

Logging and notification for blocked sites

Blocking Ports

Avoiding problems with legitimate users

Blocking a port permanently

Auto-blocking sites that try to use blocked ports

Setting logging and notification for blocked ports

Blocking Sites Temporarily with Service Settings

Configuring a service to temporarily block sites

Viewing the Blocked Sites list

Monitoring Firebox Activity

Firebox Monitors

Starting Firebox Monitors and connecting to a Firebox

Setting Firebox Monitors view properties

BandwidthMeter

ServiceWatch

Status Report

Authentication list

Blocked Site list

HostWatch

Connecting HostWatch to a Firebox

Replaying a log file in HostWatch

Controlling the HostWatch display

Modifying HostWatch view properties

Setting Up Logging and Notification

Developing Logging and Notification Policies

Logging policy

Notification policy

Failover Logging

WatchGuard Logging Architecture

Designating Log Hosts for a Firebox

Adding a log host

Enabling Syslog logging

Changing the log encryption key

Removing a log host

Reordering log hosts

Synchronizing log hosts

Setting up the WatchGuard Security Event Processor

Running the WSEP application on Windows NT, Windows 2000, or Windows XP

Viewing the WSEP application

Starting and stopping the WSEP

Setting the log encryption key

Setting Global Logging and Notification Preferences

Log file size and rollover frequency

Setting the interval for log rollover

Scheduling log reports

Controlling notification

Setting a Firebox friendly name for log files

Customizing Logging and Notification by Service or Option

Setting Launch Interval and Repeat Count

Setting logging and notification for a service

Setting logging and notification for default packethandling options

Setting logging and notification for blocked sites and ports

Reviewing and Working with Log Files

Log File Names and Locations

Viewing Files with LogViewer

Starting LogViewer and opening a log file

Setting LogViewer preferences

Searching for specific entries

Copying and exporting LogViewer data

Displaying and Hiding Fields

Working with Log Files

Consolidating logs from multiple locations

Copying log files

Forcing the rollover of log files

Saving log files to a new location

Setting log encryption keys

Sending logs to a log host at another location

Generating Reports of Network Activity

Creating and Editing Reports

Starting a new report

Editing an existing report

Deleting a report

Viewing the reports list

Specifying a Report Time Span

Specifying Report Sections

Consolidating Report Sections

Setting Report Properties

Exporting Reports

Exporting reports to HTML format

Exporting a report to WebTrends for Firewalls and VPNs

Exporting a report to a text file

Using Report Filters

Creating a new report filter

Editing a report filter

Deleting a report filter

Applying a report filter

Scheduling and Running Reports

Scheduling a report

Manually running a report

Report Sections and Consolidated Sections

Report sections

Consolidated sections

Controlling Web Site Access

Getting Started with WebBlocker

Installing the WebBlocker server

Downloading the database using WebBlocker Utility

Configuring the WatchGuard service icon

Add an HTTP service

Configuring logging

Configuring the WebBlocker Service

Activating WebBlocker

Allowing WebBlocker server bypass

Configuring the WebBlocker message

Scheduling operational and non-operational hours

Setting privileges

Creating WebBlocker exceptions

Managing the WebBlocker Server

Installing Multiple WebBlocker Servers

Automating WebBlocker Database Downloads

Installing Scheduled Tasks

Connecting with Out-of-Band Management

Connecting a Firebox with OOB Management

Enabling the Management Station

Preparing a Windows NT Management Station for OOB

Preparing a Windows 2000 Management Station for OOB

Preparing a Windows XP Management Station for OOB

Configuring the Firebox for OOB

Establishing an OOB Connection

APPENDIX A Troubleshooting Firebox Connectivity

Ethernet Dongle Method

The Flash Disk Management Utility

Using the Reset Button - Firebox Models 500, 700, 1000, 2500, 4500

Serial Dongle (Firebox II only)

Index

您可以这样找到本手册：

IT168首页>使用手册>防火墙使用手册>WatchGuard防火墙使用手册>WatchGuard Firebox X1000 使用手册

IT168首页>报价行情>防火墙>防火墙产品列表>WatchGuard防火墙>WatchGuard Firebox X1000>驱动和下载