3Com® Embedded FirewallSoftware for the 3CR990Network Interface Card (NIC) FamilyQuick Start Guidehttp://www.3com.com/http://www.3com.com/registration/frontpg.pl09-2110-000Published December 2001

What You Will Need

Management Console Software

Initializing the Policy Server

Starting the Management Console and connecting to the Policy Server

Creating and retaining a recovery diskette

Importing the "No snifﬁng, no spooﬁng" pre-deﬁned Policy and Assigning it to the Default Device Set

Installing and Registering an EFW NIC

Verifying NIC Registration

Importing the "Windows 2000 Standard" Rule Set

Creating a Sample Device Set

Moving the EFW NIC to the New Device Set

Expanding Your EFW Conﬁguration

3Com 3CR990 Quick Start Manual

3CR990

Preface: Using This Guide

Viewing and Printing this Document Online

Planning and Overview

EFW Architectural Components and Concepts

MMC Management Console

EFW Policy Servers

EFW Domain

Overview of EFW Operations

EFW and Your Network

Proxying EFW Trafﬁc Through a Perimeter Firewall

Operational Security

Planning Your Conﬁguration

Determine Where You Want to Deploy Individual EFW Devices

EFW Flexible Implementation

Installing and Initially Conﬁguring EFW

System Requirements

Overview of EFW Software

Installing the Management Console Using Java Web Start

Uninstalling EFW

Uninstalling the Policy Server and Management Console

Joining a New Policy Server to a Domain

Starting and Logging in to the Management Console

Licensing Overview

Managing Licenses in the Management Console

Adding an Activation Key

Registering EFW NICs Manually

Installing and Registering EFW Devices Using the Diskette-keyed Process

Creating a Keying Diskette

Applying a Keying Diskette

Special Considerations for Multi-NIC Systems

Managing EFW Devices Using the Policy Servers

Conﬁguring Policy Servers for Redundancy

Organizing Policy Servers and EFW Devices

Setting up Device Sets

Moving EFW Devices to a Different Device Set

Monitoring EFW Device Status and Missed Heartbeats

Monitoring NIC Connectivity and Policy Status

Using the Recovery Diskette

Managing Policies

Pre-deﬁned Policies

Policy Settings

Organizing Rules for Optimum Performance Within a Policy

Creating Policies and Rules

Creating Rules

Creating a Rule Set from a Policy

Editing a Rule Set Using the Rule Set Manager

Distributing a Policy to the Network

Secured EFW Device—Allow Trafﬁc versus Block All Trafﬁc

Performing Other Administration Tasks

To Edit an Existing Administrator's User Name or Password

Creating or Editing Audit Queries

Displaying Audit Query Results

Understanding Audit Query Results

Backing up the Database

Restoring the Database

A Pre-Deﬁned Rule Sets

Common problem solutions

B Troubleshooting

troubleshooting

System Connectivity

Policy Server-to-Policy Server Communication Check

C Using ZENworks to Install EFW

Online Technical Services

D Technical Support

user guide

Product Registration

EtherCD Navigation

Auto Insert

Installation Overview

Making a DOS-Bootable Diskette

Installing from Diskettes

NIC Overview

NIC Features

Remote Wake-Up

Desktop Management Interface

Enabling Ofﬂoads

Installing the NIC

Windows 2000

Windows 98

Windows 95

New Hardware Found

Update Device Driver Wizard

Windows NT 4.0

Verifying Successful Installation

Windows NT 3.51

Windows 95 and Windows 98

Obtaining NetWare Loadable Modules

NetWare 4.10, 4.11, and 5.0

Multiple NICs

Verifying the PCI Slot Number

Overview

Deﬁning the Console

Creating a Filter

Binding the Filter Action

Determining the Version

Windows 95 OSR2

Conﬁguration Options

Com DOS Conﬁguration Program

Com NIC Diagnostics Program

Accessing the 3Com KnowledgeBase

Interpreting the LEDs

Com DOS Diagnostics Program

Statistics Tab

To Run the Network Test

To Run the Remote Wake-Up Test

Viewing Network Statistics

Com Tray Icon

Remote Wake-Up Cable

Troubleshooting Hubs

NIC Speciﬁcations

Network Connection Criteria

BASE-TX Description

Flow Control

Register this Product

Com Bulletin Board Service

Support from 3Com

Returning Products for Repair

Additional Drivers

Windows 98 and Windows 95

Enabling or Disabling the Boot ROM Setting

Non-BBS BIOS-Compatible PCs

regulatory compliance information