Setup GuideWatchGuard® SSL 500WatchGuard® SSL 1000

next steps

Watchguard SSL 1000 Setup Manual

SSL 1000

Audience

Document Conventions

LiveSecurity Service Broadcasts

Activating LiveSecurity Service

WatchGuard Users Forum

Online Help

LiveSecurity Gold

Overview

New Features

Secure Access Client connections

NTLM authentication and authorization support

Firebox SSL VPN Gateway Settings

Feature Summary

Deployment and Administration

Planning your deployment

Planning for Security with the Firebox SSL VPN Gateway

Deploying Additional Appliances for Load Balancing and Failover

Setting Up the Firebox SSL VPN Gateway Hardware

Redirecting Connections on Port 80 to a Secure Port

Starting the Secure Access Client

Establishing the Secure Tunnel

Terminating the Secure Tunnel and Returning Packets to the Client

Using Kiosk Mode

CHAPTER 1 Getting Started with Firebox SSL VPN Gateway

Firebox SSL VPN Gateway Administration Desktop

Admin Users Tab

To open the serial console

Publishing Settings to Multiple Firebox SSL VPN Gateways

Upgrading the LiveSecurity Renewal and Tunnel Renewal license

To install a license file

Blocking External Access to the Administration Portal

Downloading and Working with Portal Page Templates

To download the portal page templates to your local computer

Enabling Portal Page Authentication

Multiple Log On Options using the Portal

Double-source Authentication Portal

Saving and Restoring the Configuration

Restarting the Firebox SSL VPN Gateway

To change the system date and time

Configuring Network Information

General Networking

Name Service Providers

Dynamic and Static Routing

Configuring Dynamic Routing

Changing from Dynamic Routing to Static Routing

Static Route Example

Configuring Firebox SSL VPN Gateway Failover

Controlling Network Access

Specifying Accessible Networks

To enable split tunneling

To deny access to user groups without an ACL

To improve latency for UDP traffic

CHAPTER 5 Configuring Authentication and Authorization

Configuring Authentication without Authorization

Configuring Local Users

Using LDAP Authorization with Local Authentication

Creating Additional Realms

Removing Realms

To disable Firebox SSL VPN Gateway authentication

To configure the IAS RADIUS realm

To configure Microsoft Internet Authentication Service for Windows 2000 Server

To specify RADIUS server authentication

Using LDAP Servers for Authentication and Authorization

To configure LDAP authentication

LDAP Authorization

Group memberships from group objects working evaluations

To configure LDAP authorization

Using certificates for secure LDAP connections

Using RSA SecurID for Authentication

To generate a sdconf.rec file for the Firebox SSL VPN Gateway

Enable RSA SecurID authentication for the Firebox SSL VPN Gateway

Configuring RSA Settings for a Cluster

Configuring NTLM Authentication and Authorization

Configuring NTLM Authorization

Configuring Double-Source Authentication

Changing Password Labels

Adding Local Users

To delete a user from the Firebox SSL VPN Gateway

Creating User Groups

Configuring Properties for a User Group

Configuring Secure Access Client for single sign-on

Enabling session time-out

Configuring Web Session Time-Outs

Enabling Split DNS

Choosing a portal page for a group

Global policies

Adding Users to Multiple Groups

Defining network resources

Allowing and Denying Network Resources and Application Policies

Application policies

Configuring file share resources

Configuring kiosk mode

limited hardware warranty

industry canada

hardware guide

package contents

environmental requirements

hardware description

rear view

SSL 500


Contents next steps	Setup GuideWatchGuard® SSL 500WatchGuard® SSL 1000 Next / 6