Symantec Gateway Security Appliance 5461 (10097527) Firewall
Contents
1. 9 symantec Symantec Gateway Security 5400 Series Installing and setting up models 5440 5441 5460 and 5461 The following instructions describe configuring the appliance for managing from an internal location Before you begin the appliance installation and setup you need to know the inside static IP and netmask addresses See the Symantec Gateway Security 5400 Series Installation Guide for instructions on configuring the outside interface for management from an outside network Note To turn off the appliance without beginning setup press the down arrow on the front panel until you see SGS 2 0 Shutdown on the LCD screen Press the e button to confirm shutdown This ensures the appliance is shut down properly Do not turn off the appliance using the power switch Turn it off by using the front panel buttons or the Security Gateway Management Interface SGMI To set up models 5440 and 5460 1 Mount the appliance in the appropriate rack or place it on a stable level surface Refer to this back panel graphic for the location of various features in the instructions that follow Part Number 10097566 1 Plug the power cord into the power socket 1 and then plug it into a power supply An uninterruptible power supply UPS is recommended Do not use an extension cord Plug the Ethernet cable from the LAN segment through which you will connect to the Symantec Gateway Security 5400 Series in to eth0 2 For the2. e SGMI select System gt Features tab to turn features on or off If you run the System Setup Wizard the appliance reboots 16 Click Next 17 On the Network Interfaces dialog box select the interfaces that you want to configure and make any necessary edits Name Type the logical network interface name NIC The physical NIC location is grayed out You cannot edit this text box IP address Edit the IP address DHCP check To enable DHCP on the outside box interface check DHCP You cannot use DHCP for anything other than eth If HA LB is enabled you cannot select this If you enable DHCP on the outside interface there must be a DHCP server running on the outside network When you enable DHCP the IP address of eth changes to 0 0 0 0 Netmask Edit the netmask address Interface type Inside eth0 and outside eth1 are grayed out You cannot edit this text box for ethO or eth1 You can designate additional interfaces as inside or outside as needed Heartbeat If HA LB is enabled you must define interface this You should have a dedicated private network for heartbeat communications Description Displays the MAC address This is an editable field Enable If you want external administrators to external ping issue a ping command on your security check box gateway check Enable external ping Note By default ping on the external interface is disabled as a security measure The security gateway does not resp
3. e following OK The configuration will be saved and the new password will display when you press e This is the administrator and root password A new password is generated each time you save this setup from the front panel Use this password to log in to the SGMI and for the root password You can also change the passwords in the SGML if you are logged in as the administrator Note To use the SRL utility provided on the CD ROM you must first configure a shared secret in the SGMI For more information about SRL see Symantec Gateway Security 5400 Series Administrator s Guide Cancel The configuration is not saved the system restarts and all your information is lost The default selection is Cancel If you select Cancel you will exit setup when you press e Press e The password displays Record it and store in a secure location Passwords are case sensitive Press e The following message displays on the LCD Setting Password Press any key to reboot system Press any button on the front panel to reboot the appliance Rebooting takes a few minutes The following messages display on the LCD screen Rebooting System Symantec Diagnostics Symantec Gateway Starting Once the system is rebooted the normal system items display on the LCD screen percent CPU usage percent log time and throughput rate You can now configure the appliance using the SGMI Connecting to Symantec Gateway Security 5400 Ser
4. he security gateway If you chose not to configure the SMTP HTTP and FTP traffic options you can either use the Policy Wizard or configure it manually from the SGMI Policy gt Rules tab For more detailed instructions about how to configure these policies see the Symantec Gateway Security 5400 Administrator s Guide
5. ies After you complete the initial setup and reboot you are ready to configure the appliance For optimal screen resolution set your display settings to a minimum of 1024 x 768 You must have Java Runtime Environment JRE v1 3 1_04 installed on your client computer before connecting to the appliance Note The System Setup Wizard detects if you do not have JRE v1 3 1_04 installed The Security Warning screen appears and installs the Java plug in on your client computer You cannot continue without the Java plug in This release supports the following browsers Table 1 1 Browser support Microsoft Windows 6 or later JRE 1 31_04 Internet Explorer Windows Netscape 7 or later JRE 1 31_04 Solaris Netscape 7 or later JRE 1 42 When you connect to the SGMI for the first time the System Setup Wizard starts automatically It prompts you for required Symantec Gateway Security 5400 Series configuration setup information Note If you cancel out of this wizard without completing it at least once you will have to run it again Once you have completed the Symantec Gateway Security 5400 Series System Setup Wizard you can use the System Setup Wizard to edit system information at any time To connect to the Symantec Gateway Security 5400 Series 1 Browse to the IP address of appliance you want to configure The path is https lt IP address of the Symantec Gateway Security 5400 Series gt 2456 In
6. initial setup this must be a directly connected LAN Use the master power switch 3 to turn on the power Wait a few moments for the power to turn on and the boot process to finish When prompted by the Press any key to run setup LCD screen message press any button on the front panel to start the initial setup This setup is for the inside interface For the outside interface procedure see the Symantec Gateway Security 5400 Series Installation Guide Note If you pause after turning on the power and displays on the LCD screen then press e to re start the initial setup Under eth0 IP Address enter the inside IP address Each octet of the IP address is a separate field in the display Use the left and right buttons to move between the fields of the IP address The selected field is surrounded by brackets Use the up and down buttons to change the number in the field that is selected Once the desired IP address displays on the LCD press e Under Netmask enter the netmask address for the IP address you just entered Each octet of the netmask address is a separate field in the display Use the left and right buttons to move between the fields of the IP address The selected field is surrounded by brackets Use the up and down buttons to change the number in the field that is selected Press e 10 11 12 13 Under Save Setup use the left or right buttons to select one of th
7. nd time Next to Time zone 10 11 12 13 14 15 from the drop down list select the time zone and then click the icon to the right of Date and Time On the Calendar dialog box do the following a Under Date select the current month day and year a Under Time use the drop down list to select current time Note You must set the date and time Failing to set the date and time could impact your product license and other product features Click OK To lock the front panel control buttons click Lock LCD Panel You can unlock the LCD panel and associated navigation buttons with your root password but it relocks again after 60 seconds of inactivity For instructions on how to permanently unlock the LCD panel see the Symantec Gateway Security 5400 Series Installation Guide Click Next In the Install License Files dialog box to use the 30 day evaluation and upload your license files later click Next You must use the 30 day evaluation initially to obtain your Symantec System ID which is required when you apply for your license files For directions on running the System Setup Wizard to upload your license files see the Symantec Gateway Security 5400 Series Installation Guide On the System Features dialog box verify that each of the features you want are enabled Uncheck any features you do not want to use You can run the System Setup Wizard at a later time to enable any feature or from th
8. ond to PING commands issued to the outside interface To enable the PING command on the external interface use the System Setup Wizard Enable or disable the PING command after the initial configuration on the ping proxy properties window 18 Click Next 19 To configure mail Web and FTP services in the Security Gateway Configuration dialog box select the following SMTP Mail services HTTP amp FTP services Note This option only displays the first time you run the System Setup Wizard If you choose not to configure these options now you can configured them later with the Policy Wizard or manually by way of the SGMI Policy gt Rules tab If you do not select SMTP and Mail services now and then click Next you skip to step 26 If you choose not to configure both of these options now then click Next you skip to step 26 20 Click Next 21 Inthe Mail Server dialog box in the Enter IP or Host name text box type the IP address or DNS resolvable host name 22 Click Next 23 In the Confirmation dialog box review the summary of your configuration 24 Click Finish When you complete the System Setup Wizard the appliance reboots Once you have completed the Symantec Gateway Security 5400 Series System Setup Wizard the first time you can access it again from the SGMI Action menu and edit any system information If you created rules for SMTP HTTP and FTP this traffic is now being passed through t
9. the Security Alert dialog box do one of the following a To accept the certificate click Yes Accepting a certificate when accessing your appliance by way of an inside trusted network does not present any danger You can trust it You should notate the certificate thumbprint and use it to verify the certificate thumbprint when you access your appliance through an outside connection To view the certificate click View Certificate a To reject the certificate and exit the wizard click No In the Log on dialog box do the following a Inthe user name box type admin a Inthe password box type the password you received and wrote down during the appliance setup In the License and Warranty Agreement dialog box read the agreement and then do one of the following a To accept the license and warranty agreement and to proceed with the System Setup Wizard click Accept a To decline the agreement and return to the log on screen click Do Not Accept On the Welcome to Symantec Gateway Security System dialog box click Next On the System Information dialog box do the following a Inthe Host name text box type the host name a Inthe Domain name text box type the domain name of the appliance a Inthe Default gateway router text box type the default gateway IP address Click Next To edit the system s date and time in the Hardware Settings dialog box you must select the time zone before setting the date a
Download Pdf Manuals
Related Search