Software Reference Manual UM EN MGUARD 8.3 Installation Directions

2016-08-17

• Please observe the following notes
  • User group of this manual
  • Explanation of symbols used and signal words
  • How to contact us
• Table of Contents
• 1 MGUARD basics
  • 1.1 Basic properties of the MGUARDs
  • 1.2 Typical application scenarios
    • 1.2.1 Stealth mode (Plug-n-Protect)
    • 1.2.2 Network router
    • 1.2.3 DMZ
    • 1.2.4 VPN gateway
    • 1.2.5 WLAN via VPN
    • 1.2.6 Resolving network conflicts
• 2 Configuration help
  • 2.1 Suitable browsers
  • 2.2 User roles
  • 2.3 Input help during configuration (system messages)
  • 2.4 Using the web interface
  • 2.5 CIDR (Classless Inter-Domain Routing)
  • 2.6 Network example diagram
• 3 Changes compared to the previous version
  • 3.1 Overview of the changes in Version 8.3
    • 3.1.1 Establishing OpenVPN connections
    • 3.1.2 Dynamic routing (OSPF)
    • 3.1.3 Support for GRE tunnels
    • 3.1.4 Support for the Path Finder function of the mGuard Secure VPN Client
    • 3.1.5 Use of IP and port groups
    • 3.1.6 New access check and modified test report creation (logging) for CIFS
    • 3.1.7 Improved display of the VPN status (IPsec)
    • 3.1.8 New VPN license model
    • 3.1.9 Improved use of configuration profiles
    • 3.1.10 Improved timeout behavior for VPN connections
    • 3.1.11 Support for XAuth and Mode Config (iOS support)
    • 3.1.12 Optional use of the proxy server by the secondary external interface
  • 3.2 Overview of the changes in Version 8.1
    • 3.2.1 User firewall in VPN connections
    • 3.2.2 Dynamic activation of the firewall rules (conditional firewall)
    • 3.2.3 Function extension of the service contacts
    • 3.2.4 OPC Inspector for Deep Packet Inspection for OPC Classic
    • 3.2.5 Additional functions
  • 3.3 Overview of the changes in Version 8.0
    • 3.3.1 New in CIFS Integrity Monitoring
    • 3.3.2 VPN extensions
• 4 Management menu
  • 4.1 Management >> System Settings
    • 4.1.1 Host
    • 4.1.2 Time and Date
    • 4.1.3 Shell Access
    • 4.1.4 E-Mail
    • 4.1.5 Secure Cloud
  • 4.2 Management >> Web Settings
    • 4.2.1 General
    • 4.2.2 Access
  • 4.3 Management >> Licensing
    • 4.3.1 Overview
    • 4.3.2 Install
    • 4.3.3 Terms of License
    • 4.3.4 Management >> Update
    • 4.3.5 Overview
    • 4.3.6 Update
  • 4.4 Management >> Configuration Profiles
    • 4.4.1 Configuration Profiles
  • 4.5 Management >> SNMP
    • 4.5.1 Query
    • 4.5.2 Trap
    • 4.5.3 LLDP
  • 4.6 Management >> Central Management
    • 4.6.1 Configuration Pull
  • 4.7 Management >> Service I/O
    • 4.7.1 Service I/O
    • 4.7.2 Alarm output
  • 4.8 Management >> Restart
    • 4.8.1 Restart
• 5 Blade Control menu
  • 5.1 Blade Control >> Overview
  • 5.2 Blade Control >> Blade 01 to 12
    • 5.2.1 Blade in slot #...
    • 5.2.2 Configuration
• 6 Network menu
  • 6.1 Network >> Interfaces
    • 6.1.1 General
    • 6.1.2 Dial-out
    • 6.1.3 Dial-in
    • 6.1.4 Modem / Console
  • 6.2 Network >> Ethernet
    • 6.2.1 MAU settings
    • 6.2.2 Multicast
    • 6.2.3 Ethernet
  • 6.3 Network >> NAT
    • 6.3.1 Masquerading
    • 6.3.2 IP and Port Forwarding
  • 6.4 Network >> DNS
    • 6.4.1 DNS server
    • 6.4.2 DynDNS
  • 6.5 Network >> DHCP
    • 6.5.1 Internal/External DHCP
  • 6.6 Network >> Proxy Settings
    • 6.6.1 HTTP(S) Proxy Settings
  • 6.7 Network >> Mobile Network
    • 6.7.1 General
    • 6.7.2 SIM Settings
    • 6.7.3 Mobile Network Notifications
    • 6.7.4 Positioning system
  • 6.8 Network >> Dynamic Routing
    • 6.8.1 OSPF
    • 6.8.2 Distribution Settings
  • 6.9 Network >> GRE Tunnel
    • 6.9.1 General
    • 6.9.2 Firewall
• 7 Authentication menu
  • 7.1 Authentication >> Administrative Users
    • 7.1.1 Passwords
    • 7.1.2 RADIUS Filters
  • 7.2 Authentication >> Firewall Users
    • 7.2.1 Firewall Users
    • 7.2.2 Access
    • 7.2.3 Status
  • 7.3 Authentication >> RADIUS
  • 7.4 Authentication >> Certificates
    • 7.4.1 Certificate settings
    • 7.4.2 Machine Certificates
    • 7.4.3 CA Certificates
    • 7.4.4 Remote Certificates
    • 7.4.5 CRL
• 8 Network Security menu
  • 8.1 Network Security >> Packet Filter
    • 8.1.1 Incoming Rules
    • 8.1.2 Outgoing Rules
    • 8.1.3 DMZ
    • 8.1.4 Rule Records
    • 8.1.5 MAC Filtering
    • 8.1.6 IP/Port Groups
    • 8.1.7 Advanced
    • 8.1.8 Firewall for the FL MGUARD RS2000, TC MGUARD RS2000 3G, and FL MGUARD RS2005
  • 8.2 Network Security >> DoS Protection
    • 8.2.1 Flood Protection
  • 8.3 Network Security >> User Firewall
    • 8.3.1 User Firewall Templates
• 9 CIFS Integrity Monitoring menu
  • 9.1 CIFS Integrity Monitoring >> Importable Shares
    • 9.1.1 Importable Shares
  • 9.2 CIFS Integrity Monitoring >> CIFS Integrity Checking
    • 9.2.1 Settings
    • 9.2.2 Filename Patterns
  • 9.3 CIFS Integrity Monitoring >> CIFS AV Scan Connector
    • 9.3.1 CIFS Antivirus Scan Connector
• 10 IPsec VPN menu
  • 10.1 IPsec VPN >> Global
    • 10.1.1 Options
    • 10.1.2 DynDNS Monitoring
  • 10.2 IPsec VPN >> Connections
    • 10.2.1 Connections
    • 10.2.2 General
    • 10.2.3 Authentication
    • 10.2.4 Firewall
    • 10.2.5 IKE Options
  • 10.3 IPsec VPN >> L2TP over IPsec
    • 10.3.1 L2TP Server
  • 10.4 IPsec VPN >> IPsec Status
• 11 OpenVPN Client menu
  • 11.1 OpenVPN Client >> Connections
    • 11.1.1 Connections
    • 11.1.2 General
    • 11.1.3 Tunnel Settings
    • 11.1.4 Authentication
    • 11.1.5 Firewall
    • 11.1.6 NAT
• 12 SEC-Stick menu
  • 12.1 Global
  • 12.2 Connections
• 13 QoS menu
  • 13.1 Ingress Filters
    • 13.1.1 Internal/External
  • 13.2 Egress Queues
    • 13.2.1 Internal/External/External 2/Dial-in
  • 13.3 Egress Queues (VPN)
    • 13.3.1 VPN via Internal/VPN via External/VPN via External 2/VPN via Dial-in
  • 13.4 Egress Rules
    • 13.4.1 Internal/External/External 2/Dial-in
    • 13.4.2 Egress Rules (VPN)
      • QoS menu >> Egress Rules >> Internal/External/External 2/Dial-in
      • QoS menu >> Egress Rules (VPN) >> VPN via Internal/VPN via External/VPN via External 2/VPN via Dial-in [...]
• 14 Redundancy menu
  • 14.1 Redundancy >> Firewall Redundancy
    • 14.1.1 Redundancy
    • 14.1.2 Connectivity Checks
  • 14.2 Redundancy >> FW Redundancy Status
    • 14.2.1 Redundancy Status
    • 14.2.2 Connectivity Status
  • 14.3 Ring/Network Coupling
    • 14.3.1 Ring/Network Coupling
• 15 Logging menu
  • 15.1 Logging >> Settings
    • 15.1.1 Settings
  • 15.2 Logging >> Browse local logs
    • 15.2.1 Log entry categories
• 16 Support menu
  • 16.1 Support >> Tools
    • 16.1.1 Ping Check
    • 16.1.2 Traceroute
    • 16.1.3 DNS Lookup
    • 16.1.4 IKE Ping
  • 16.2 Support >> Advanced
    • 16.2.1 Hardware
    • 16.2.2 Snapshot
• 17 Redundancy
  • 17.1 Firewall redundancy
    • 17.1.1 Components in firewall redundancy
    • 17.1.2 Interaction of the firewall redundancy components
    • 17.1.3 Firewall redundancy settings from previous versions
    • 17.1.4 Requirements for firewall redundancy
    • 17.1.5 Fail-over switching time
    • 17.1.6 Error compensation through firewall redundancy
    • 17.1.7 Handling firewall redundancy in extreme situations
    • 17.1.8 Interaction with other devices
    • 17.1.9 Transmission capacity with firewall redundancy
    • 17.1.10 Limits of firewall redundancy
  • 17.2 VPN redundancy
    • 17.2.1 Components in VPN redundancy
    • 17.2.2 Interaction of the VPN redundancy components
    • 17.2.3 Error compensation through VPN redundancy
    • 17.2.4 Setting the variables for VPN redundancy
    • 17.2.5 Requirements for VPN redundancy
    • 17.2.6 Handling VPN redundancy in extreme situations
    • 17.2.7 Interaction with other devices
    • 17.2.8 Transmission capacity with VPN redundancy
    • 17.2.9 Limits of VPN redundancy
• 18 Glossary
• 19 Appendix
  • 19.1 CGI actions
  • 19.2 CGI status