Finjan Vital Security NG-1000 Instructions de montage

Vital Security

™

Appliance Series

NG-1000/NG-5000/NG-6000/NG-8000

Installation

and

Setup Guide

Installation and Setup Guide

Vital Security™ Appliance Series NG-1000/NG-5000/NG-6000/NG-8000 Installation and Setup

Guide

reserved.

All text and figures included in this publication are the exclusive property of Finjan and are for your

personal and non-commercial use. You may not modify, copy, distribute, transmit, display, perform,

reproduce, publish, license, create derivative works from, transfer, use or sell any part of its content

in any way without the express permission in writing from Finjan. Information in this document is

subject to change without notice and does not present a commitment or representation on the part of

Finjan.

The Finjan technology and/or products and/or software described and/or referenced to in this

material are protected by registered and/or pending patents including U.S. Patents No. 6092194,

6154844, 6167520, 6480962, 6209103, 6298446, 6353892, 6804780, 6922693, 6944822, 6993662,

6965968, 7058822, 7076469, 7155743, 7155744 and may be protected by other U.S. Patents,

foreign patents, or pending applications.

Finjan, Finjan logo, Vital Security, Vulnerability Anti.dote and Window-of-Vulnerability are

trademarks or registered trademarks of Finjan. Sophos is a registered trademark of Sophos plc.

McAfee is a registered trademark of McAfee Inc. Kaspersky is a registered trademark of Kaspersky

Lab. SurfControl is a registered trademark of SurfControl plc. Microsoft and Microsoft Office are

registered trademarks of Microsoft Corporation. All other trademarks are the trademarks of their

respective owners. Q1 2007

For additional information, please visit www.finjan.com or contact one of our regional offices:

Catalog number: VSNG_IASG 8.4.3

Email:[email protected]

Internet:www.finjan.com

USA: San Jose

2025 Gateway Place Suite 180 San Jose,

CA 95110, USA

Toll Free: 1 888 FINJAN 8

Tel: +1 408 452 9700 Fax: +1 408 452 9701

[email protected]

Europe: UK

4th Floor, Westmead House,

Westmead,

Farnborough, GU14 7LP, UK

Tel: +44 (0)1252 511118

Fax: +44 (0)1252 510888

[email protected]

USA: New York

Chrysler Building

405 Lexington Avenue, 35th Floor

New York, NY 10174, USA

Tel: +1 212 681 4410 Fax: +1 212 681 4411

[email protected]

Europe: Germany

Alte Landstrasse 27, 85521

Ottobrun, Germany

Tel: +49 (0)89 673 5970

Fax: +49 (0)89 673 597 50

[email protected]

Israel/Asia Pacific

Hamachshev St. 1,

New Industrial Area Netanya, Israel 42504

Tel: +972 (0)9 864 8200

Fax: +972 (0)9 865 9441

[email protected]

Europe: Netherlands

Printerweg 56

3821 AD Amersfoort

Netherlands

Tel: +31 318 693 272

Fax: +31 318 693 274

[email protected]

Contents i

CONTENTS

1 About this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1

2 Finjan Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Appliance Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3

3 Getting Started . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Management Console System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Operating Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

Software Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

Connecting your Vital Security Appliance (NG-1000/NG-5000/NG-6000) . . . . . . 10

Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10

Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10

Connection Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10

Update Mechanism . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Installing Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

Defining System Device Roles via the Management Console . . . . . . . . . . . . . . . . . 25

Connecting your Vital Security Appliance NG-8000 . . . . . . . . . . . . . . . . . . . . . . . . 27

Initial Procedures for the Policy Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27

Initial Procedures for the Vital Security Scanning Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28

Routing Traffic through the Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Configuring Workstations for Routing Traffic through the Appliance . . . . . . . . . . . . . . . . . . .29

Transparent Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30

Working with HTTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

HTTP Proxies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31

Working with Caching Proxies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31

HTTP Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Working with ICAP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Why work with ICAP? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Vital Security as an ICAP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33

REQMOD – RESPMOD Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33

ICAP Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34

4 Configuring ICAP Clients . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Network Appliance Netcache Series (NetApp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Blue Coat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Installation and Setup Guide

Contentsii

5 Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49

Introduction to Setup Console Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . .49

Configuring Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49

Appliance Role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Licensing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

Custom Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Time Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57

Network Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Change Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

Restart Role . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Reboot/Shutdown Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Active/Standby Policy Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

A Limited Shell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .77

B Installation CD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .79

Chapter 1 - About this Manual 1

CHAPTER

BOUT

THIS

ANUAL

Chapter Description

Chapter 1 About this Manual

Chapter 2 Overview - An introduction to Finjan's Vital Security

Appliance platform, including a brief overview of the

Vital Security Appliances NG-1000/NG-5000/NG-

6000/NG-8000.

Chapter 3 Getting Started – This section tells you everything you

need to know about getting started and lists the

necessary steps to be taken when installing and working

with your appliance.

This includes:

System requirements (hardware and software)

Information on supported protocols (HTTP and ICAP)

Configuration of end-user machines

Transparent proxy configuration

Connecting – describing the steps to be taken prior to

accessing the web-based Management Console

Chapter 4 Configuring the ICAP Clients – Discusses

configuration of Network Appliance (NetApp) and

Blue Coat

Chapter 5 Configuring Advanced Settings – This Chapter

describes how to use the Advanced Settings of the

Setup Console to manage the functionality of the

appliance

Appendix A Limited Shell – This Appendix describes the Limited

Shell feature.

Appendix B Installation CD – This Appendix details the installation

procedure using the Installation CD

Chapter 2 - Finjan Overview 3

CHAPTER

INJAN

VERVIEW

1 Introduction

Cyber-threats are fast increasing and pose a serious and growing problem for corporate

networks, appearing in different forms and using a variety of tactics – viruses, worms,

Trojans, and more. New, ultra-fast viruses can infect your system within seconds, long

before traditional signature-based solutions can protect you. While waiting for anti-virus

companies to release a new virus signature, thousands of unprotected computers may have

already been infected, leaving no alternative other than to shut down the corporate network.

Finjan's proactive behavior-inspection technology at the gateway provides protection by

examining active content behavior and identifying and blocking malicious mobile code

(viruses, worms, Trojan horses and a myriad of ever-developing attack types). Finjan’s

unique and patented proactive behavior inspection technology offers instant protection

against new virus, worm and malicious mobile code outbreaks without time-sensitive

signature-file updates, thus closing the Window-of-Vulnerability™and providing

networks with true day-zero protection.

Vital Security - Finjan’s Integrated Security Platform - is a complete and integrated

Secure Content Management solution in which individual best-of-breed security

applications work together in concert to respond proactively to the changing security

threats of both today and tomorrow.

This section contains a brief overview of the Vital SecurityAppliances NG-1000/

NG-5000/NG-6000/NG-8000.

1.1 Appliance Types

This manual deals with the following Vital Security Appliances:

1.1.1 Vital Security Appliance Series NG-8000

This appliance is a specially configured chassis containing multiple hot swappable blades,

with redundant power supplies, disks etc. The Vital Security Operating System (VSOS) is

preinstalled and preconfigured.

Installation and Setup Guide

Chapter 2 - Finjan Overview4

Figure 2-1: NG-8000 Superformance Appliance

The following table contains the hardware specifications for the NG-8000 appliance..

1.1.2 Vital Security Appliance Series NG-1000/NG-5000/NG-6000

This appliance is typically deployed to include multiple appliances, each running the Vital

Security Operating System (VSOS). It can, however, also be deployed All-in-one, using a

single appliance.

The different services running on each appliance can be configured according to your

organization's network requirements.

Component Specification

Memory 2 GB

Hard Drive 36 GB SAS (Web appliance)

2 x 73 GB SAS ( RAID 1)

(Policy Server)

CPU Xeon D 2 x 2.0GHz

Gigabit Ethernet NIC 2

NOTE: This document deals with the basic setup of the NG-8000 Appliance. Please

contact Finjan’s Support, or IBM for information about more advanced setup of the

Blade Center.

Installation and Setup Guide

Chapter 2 - Finjan Overview

Figure 2-2: NG-5000 Superformance Appliance

The following table contains the hardware specifications for the NG-5000 appliance.

Component Specification

Memory 2GB

Hard Drive 160GB SATA2

CPU Pentium D 3.4 GHz dual core

Flash Card 1024 MB

Rack space (1U) 429 x 382 x 44 mm (WxDxH)

16.9 x 15.0 x 1.8 inches

(WxDxH)

Gigabit Ethernet NIC 4

Built-in LCD display 1

Installation and Setup Guide

Chapter 2 - Finjan Overview6

Figure 2-3: NG-1000 Superformance Appliance

The following table contains the hardware specifications for the NG-1000 appliance.

Component Specification

Memory 1GB

Hard Drive 160GB

CPU Pentium IV 2.8GHz

Flash Card 256 MB

Rack space (1U) 428.6 x 360 x 44 mm (WxDxH)

16.9 x 14.1 x 1.7 inches

(WxDxH)

Fast/Gigabit Ethernet NIC 4 + 2

Built-in LCD display 1

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels finjan Pare-feu

finjan

finjan NG-8000 Manuel utilisateur

Manuels Pare-feu populaires d'autres marques

Cisco

Cisco S190 Manuel utilisateur

Fortinet

Fortinet FortiGate Voice Series Manuel utilisateur

ADTRAN

ADTRAN NetVanta 2300 Manuel utilisateur

SecureLogix

SecureLogix ETM System Manuel utilisateur

NETGEAR

NETGEAR ProSafe FVX538 Manuel utilisateur

Lanner

Lanner FW-8877 Manuel utilisateur

Huawei

Huawei USG6000 Series Manuel d'installation et d'exploitation

H3C

H3C SecPath F5000-AI-15 Manuel utilisateur

Nexcom

Nexcom DNA 1150 Manuel utilisateur

Fortinet

Fortinet FortiGate-60 series Manuel utilisateur

Cisco

Cisco 3110 Manuel

Draytek

Draytek Vigor2860 Series Manuel utilisateur

Lanner electronics

Lanner electronics FW-7650 Series Manuel utilisateur

Swisscom

Swisscom Internet Backup Manuel utilisateur

SonicWALL

SonicWALL NSa 5700 Manuel utilisateur

DPtech

DPtech FW1000 SERIES Manuel utilisateur

FEITIAN

FEITIAN MultiPass FIDO Manuel utilisateur

EBLOCKER

EBLOCKER PRO Manuel utilisateur

finjan Vital Security NG-1000 Instructions de montage

Manuels Pare-feu populaires d'autres marques