Planet Networking & Communication CS-2001 Manuel utilisateur

CS-2001 UTM Content Security Gateway User’s Manual

UTM Content Security

Gateway

CS-2001

User’s Manual

reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language or

computer

language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or

otherwise, without the prior written permission of PLANET.

PLANET makes no representations or warranties, either expressed or implied, with respect to the

contents

hereof and specifically disclaims any warranties, merchantability or fitness for any particular purpose.

Any

software described in this manual is sold or licensed "as is". Should the programs prove defective

following

their purchase, the buyer (and not this company, its distributor, or its dealer) assumes the entire cost of

all

necessary servicing, repair, and any incidental or consequential damages resulting from any defect in the

software. Further, this company reserves the right to revise this publication and to make changes from

time

to time in the contents hereof without obligation to notify any person of such revision or changes.

All brand and product names mentioned in this manual are trademarks and/or registered trademarks of

their

respective holders.

Disclaimer

PLANET Technology does not warrant that the hardware will work properly in all environments and

applications, and makes no warranty and representation, either implied or expressed, with respect to the

quality, performance, merchantability, or fitness for a particular purpose.

PLANET has made every effort to ensure that this User’s Manual is accurate; PLANET disclaims liability

for any inaccuracies or omissions that may have occurred.

Information in this User’s Manual is subject to change without notice and does not represent a

commitment

on the part of PLANET. PLANET assumes no responsibility for any inaccuracies that may be contained in

this User’s Manual. PLANET makes no commitment to update or keep current the information in this

User’s

Manual, and reserves the right to make improvements to this User’s Manual and/or to the products

described

in this User’s Manual, at any time without notice.

If you find information in this manual that is incorrect, misleading, or incomplete, we would appreciate

your

comments and suggestions.

Trademarks

The PLANET logo is a trademark of PLANET Technology.

This documentation may refer to numerous hardware and software products by their trade names. In

most, if

not all cases, these designations are claimed as trademarks or registered trademarks by their respective

companies.

CE mark Warning

This is a class A device, in a domestic environment; this product may cause radio interference, in which

case the user may be required to take adequate measures.

Federal Communication Commission Interference Statement

This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant

Part 15 of FCC Rules. These limits are designed to provide reasonable protection against harmful

interference in a residential installation. This equipment generates, uses, and can radiate radio frequency

energy and, if not installed and used in accordance with the instructions, may cause harmful interference

radio communications. However, there is no guarantee that interference will not occur in a particular

installation. If this equipment does cause harmful interference to radio or television reception, which can

be determined by turning the equipment off and on, the user is encouraged to try to correct the

interference

by one or more of the following measures:

1. Reorient or relocate the receiving antenna.

2. Increase the separation between the equipment and receiver.

3. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.

4. Consult the dealer or an experienced radio technician for help.

FCC Caution:

To assure continued compliance (example-use only shielded interface cables when connecting to

computer or

peripheral devices). Any changes or modifications not expressly approved by the party responsible for

compliance could void the user’s authority to operate the equipment.

This device complies with Part 15 of the FCC Rules. Operation is subject to the Following two conditions:

(1)

This device may not cause harmful interference, and (2) this Device must accept any interference

received,

including interference that may cause undesired operation.

R&TTE Compliance Statement

This equipment complies with all the requirements of DIRECTIVE 1999/5/EC OF THE EUROPEAN

PARLIAMENT AND THE COUNCIL OF 9 March 1999 on radio equipment and telecommunication

terminal Equipment and the mutual recognition of their conformity (R&TTE)

The R&TTE Directive repeals and replaces in the directive 98/13/EEC (Telecommunications Terminal

Equipment and Satellite Earth Station Equipment) As of April 8, 2000.

WEEE Caution

To avoid the potential effects on the environment and human health as a result of the

presence of hazardous substances in electrical and electronic equipment, end users of

electrical and electronic equipment should understand the meaning of the crossed-out

wheeled bin symbol. Do not dispose of WEEE as unsorted municipal waste and have to

collect such WEEE separately.

Safety

This equipment is designed with the utmost care for the safety of those who install and use it. However,

special attention must be paid to the dangers of electric shock and static electricity when working with

electrical equipment. All guidelines of this and of the computer manufacture must therefore be allowed at

all

times to ensure the safe use of the equipment.

Customer Service

For information on customer service and support for the UTM Content Security Gateway, please refer to

the following Website URL:

http://www.test.com

Before contacting customer service, please take a moment to gather the following information:

♦UTM Content Security Gateway serial number and MAC address

♦Any error messages that displayed when the problem occurred

♦Any software running when the problem occurred

♦Steps you took to resolve the problem on your own

Revision

User’s Manual for PLANET UTM Content Security Gateway

Model: CS-2001

Rev: 1.0 (Dec, 2010)

PartNo: EM-CS2001v1

Table of Contents

Quick Installation Guide..........................................................................8

Hardware Installation ........................................................................................9

Basic System Configuration.............................................................................12

S.1 Overview of Functions ..................................................................20

System ......................................................................................................27

Chapter 1Administration ................................................................................28

1.1 Admin.............................................................................................30

1.2 Permitted IPs..................................................................................32

1.3 Logout............................................................................................33

1.4 Updating Software .........................................................................35

Chapter 2 Configuration..................................................................................36

2.1 Settings...........................................................................................47

2.2 Date / Time.....................................................................................52

2.3 Multiple Subnet..............................................................................53

2.4 Route Table....................................................................................67

2.5 DHCP.............................................................................................71

2.6 DDNS.............................................................................................76

2.7 Host Table......................................................................................78

2.8 SNMP.............................................................................................79

2.9 Language........................................................................................81

Interface...................................................................................................82

Chapter 3 Interface...........................................................................................83

3.1 Example .........................................................................................91

Policy Object..........................................................................................130

Chapter 4Address...........................................................................................131

4.1 Example .......................................................................................134

Chapter 5 Service............................................................................................142

5.1 Example of Pre-defined ...............................................................144

5.2 Example of Service Group...........................................................148

Chapter 6 Schedule.........................................................................................152

6.1 Example .......................................................................................154

Chapter 7 QoS.................................................................................................156

7.1 Example .......................................................................................158

Chapter 8Authentication...............................................................................163

8.1 User / Group Authentication........................................................168

8.2 RADIUS Authentication..............................................................172

8.3 POP3 Authentication....................................................................193

8.4 LDAPAuthentication...................................................................196

Chapter9 Application Blocking ....................................................................210

9.1 Example .......................................................................................213

Chapter 10 Virtual Server..............................................................................220

10.1 Example .....................................................................................222

Chapter 11 VPN ..............................................................................................242

11.1 Example .....................................................................................255

Mail Security.........................................................................................413

Chapter 12 Configuration..............................................................................414

12.1 Mail Domains.............................................................................421

12.2 Account Manager.......................................................................426

12.3 Mail Relay..................................................................................440

12.4 Mail Notice ................................................................................446

12.5 Queued Mail...............................................................................449

12.6 Mail Signatures..........................................................................451

Chapter13 Anti-Spam....................................................................................453

13.1 Example .....................................................................................464

Chapter14 Anti-Virus ....................................................................................533

14.1 Example .....................................................................................536

Chapter 15 Mail Reports................................................................................557

15.1 Statistics.....................................................................................566

15.2 Logs............................................................................................567

Web Filter..............................................................................................569

Chapter 16 Configuration..............................................................................570

16.1 Example .....................................................................................577

Chapter 17 Reports.........................................................................................594

17.1 Statistics.....................................................................................599

17.2 Logs............................................................................................603

IDP..........................................................................................................604

Chapter 18 Configuration..............................................................................605

Chapter 19 Signatures....................................................................................610

19.1 Example .....................................................................................616

Chapter 20 IDP Report...................................................................................623

20.1 Statistics.....................................................................................627

20.2 Logs............................................................................................628

Web VPN / SSLVPN ............................................................................629

Chapter 21 Web VPN / SSLVPN ..................................................................630

21.1 Example .....................................................................................634

Policy......................................................................................................649

Chapter 22 Policy............................................................................................650

22.1 Example .....................................................................................657

Anomaly Flow IP ..................................................................................682

Chapter 23Anomaly Flow IP.........................................................................683

23.1 Example .....................................................................................684

Advance..................................................................................................688

Chapter 24 Inbound Balancing......................................................................689

24.1 Example .....................................................................................700

Chapter 25 High Availability .........................................................................733

25.1 Example .....................................................................................735

Chapter 26 Co-Defense System......................................................................742

26.1 Example .....................................................................................745

Monitoring.............................................................................................750

Chapter 27 Logs..............................................................................................751

27.1 Traffic.........................................................................................759

27.2 Event..........................................................................................763

27.3 Connection.................................................................................765

27.4 Viruses........................................................................................767

27.5 Application Blocking .................................................................771

27.6 Concurrent Sessions...................................................................773

27.7 Quota..........................................................................................776

27.8 Log Backup................................................................................779

Chapter 28Accounting Reports ....................................................................782

28.1 Flow Analysis.............................................................................788

28.2 Today’s Top Chart......................................................................789

28.3 Historical Top Chart...................................................................796

Chapter 29 Traffic Grapher...........................................................................797

29.1 WAN Traffic...............................................................................799

29.2 Policy-Based Traffic ..................................................................803

Chapter 30 Diagnostic Tools ..........................................................................807

30.1 Ping............................................................................................808

30.2 Traceroute ..................................................................................811

30.3 Packet Capture...........................................................................813

Chapter 31 Wake-On-LAN ............................................................................814

31.1 Example .....................................................................................815

Chapter 32 Status............................................................................................816

32.1 Interface .....................................................................................817

32.2 System Info................................................................................819

32.3 Authentication............................................................................821

32.4 ARP Table ..................................................................................822

32.5 Sessions Info..............................................................................825

32.6 DHCP Clients.............................................................................827

Quick Installation Guide

Hardware Installation

Front panel:

Figure. Front Panel of the CS-2001

Rear panel:

Power Indicator: Lights up when the power is on.

HDD Indicator: Glitters when system is accessing data from the HDD.

Console Port (9600, 8, N, 1):A RJ-45 console cable connect this serial port for

checking network interface setting and can reset to factory setting.

Ethernet Port 1/2/3/4 can be set as a:

LAN Port: Connects to the Intranet.

WAN Port: Connects to the perimeter router.

DMZ Port: The demilitarized zone (DMZ) is a physical subnet for securing

the Local Area Network. It allows the externals users to access the

company’s external network.

Power Indicator

HDD Indicator

Console Port

Ethernet Port1/2/3/4

Power Socket

Power Switch

Table des matières

Autres manuels Planet Networking & Communication Porte