WatchGuard Technologies MS5AE5W Security Network Appliance T55-W User Manual

WatchGuard Technologies, Inc. Security Network Appliance T55-W Users Manual

Users Manual

Guide de démarrage rapide
Kurzanleitung
Guía Rápida
Guia de início rápido
設定手
Quick Start Guide
Firebox® T55 / T55-W
HW Models: MS5AE5, MS5AE5W
Guida introduttiva
WatchGuard® Technologies, Inc.
2 3
Activate Your Device
1. Go to www.watchguard.com/activate
2. Log in to your WatchGuard account, or create a new account*.
*If you create a new account, return to www.watchguard.com/activate after you nish the account
creation process.
3. Type the serial number for your device.
4. During activation, select your setup method:
RapidDeploy QuickStart – Automatically download and apply a QuickStart
conguration le to your device, pre-congured with security settings
recommended by WatchGuard.
Classic Activation – Use the Web Setup Wizard to create a basic conguration le
for your device.
5. Use the setup directions in this guide that match the method you selected.
English
4 5
RapidDeploy QuickStart Setup
1. Connect Your Device and Power it On
Make sure the computers on your network are congured to use DHCP. When you install
your Firebox, it will assign an IP address on the 10.0.1.0/24 network.
English
Your Network
Internet
Computer Internet
2. Connect to the Web UI
A. Go to https://10.0.1.1:8080
B. You can safely ignore any certicate warnings you see because the device uses a
self-signed certicate.
C. Log in with the user account admin and the Admin (readwrite) passphrase you set
during activation.
Your device has a basic conguration:
Allows outbound TCP, UDP, and ping trac
Blocks all unrequested trac from the external network
Includes optimized security settings
Uses licensed security services to protect the trusted and optional networks
Classic Activation Setup
1. Connect Your Device and Power it On
Make sure your computer is congured to use DHCP. When you connect to the Firebox,
it will assign an IP address on the 10.0.1.0/24 network.
2. Connect to the Web UI
A. Go to https://10.0.1.1:8080
B. You can safely ignore certicate warnings, because the device uses a
self-signed certicate.
C. Log in with the user name admin and the passphrase readwrite.
D. Follow the directions in the Web Setup Wizard to create a basic conguration le for
a new device. Click More Information if you have questions.
E. When the Wizard completes, log in to the Web UI with the admin user account and
the Admin (readwrite) passphrase you set during the Wizard.
F. Install the Firebox in your network.
Your device has a basic conguration:
Allows outbound TCP, UDP, and ping trac
Blocks all unrequested trac from the external network
Inspects outgoing FTP, HTTP, and HTTPS trac
Uses licensed security services to protect the trusted and optional networks
6 7
About the Device Status Lights
Fail Over – Lights when there is a WAN failover from the primary external interface to the
backup interface.
WAP - (Wireless models only) Lights when the device is activated as a wireless access point
or as a wireless client.
Network interface status indicatorsThe Firebox T55 has ve network interfaces.
There are two status indicators for each interface.
Indicator Indicator color Interface Status
1000 Yellow Link speed: 1000 Mbps
Blinks* Data sent and received
10/100 Green Link speed: 10 Mbps or
100 Mbps
Blinks* Data sent and received
* Blink speed increases as the data ow increases
Status – Shows when there is a management connection to the device. The Status
indicator is lit for 30 seconds after you connect to the device with the Fireware Web UI or
the command line interface. It is also lit when the device is polled by WatchGuard System
Manager.
Mode – Shows the status of the external network connection. If the device can connect
to the external network and send trac, the indicator is green. The indicator ashes if the
device cannot connect to the external network and send trac.
Attn – Lights when you start the device with the Reset button pressed.
Power ( ) – The power indicator is lit when the device is on.
English
Next Steps
Congratulations! You have nished basic setup of your Firebox. You can use the Web UI to
view and edit your conguration and to manage and monitor your Firebox. Or, you can
download and install WatchGuard System Manager (WSM) and use Policy Manager and the
WSM suite of management and monitoring tools. Here are some recommendations to help
you get started:
Verify your Internet connectivity
With your Firebox installed in your network, make sure that your users can
successfully browse the Internet.
Get the latest software
To upgrade the Firebox OS:
1. Log in to Fireware Web UI.
2. Select System > Upgrade OS.
To get the latest version of WSM, WatchGuard Dimension, VPN clients,
and other software for your Firebox:
1. Go to www.watchguard.com/support and click Download Software.
2. Find the software downloads page for the Firebox T55 and select the
software you want to install.
Explore the Features and Functions of Your Firebox
Browse the Web UI or the tools in WatchGuard System Manager and click Help on any
page or dialog box to learn more about the management, monitoring, and security
features of your Firebox.
8 9
Reset the Firebox to Factory-Default Settings
If you ever need to, you can restore your Firebox to its factory-default settings. For example,
if you do not know your administrator account passphrase or you want to start over with
RapidDeploy QuickStart, you can reset your device.
For more information, see the Hardware Guide for your Firebox, available at:
www.watchguard.com/help/documentation/hardware.asp
简体中文
激活设备
1. 转到 www.watchguard.com/activate
2. 登录到您的 WatchGuard 帐户,或者创建一个新帐户*
*如果创建新帐户,请在完成帐户创建过程之后返回到 www.watchguard.com/activate
3. 输入设备的序列号。
4. 在激活期间,选择安装方法:
快速部署自动下载快速部署配置文件并将其应用到您的设备,其中预配置了
WatchGuard 推荐的安全设置。
常规激活使用网页安装向导为您的设备创建基本配置。
5. 请根据您的实际安装方法选择本手册中对应的安装说明。
10 11
简体中文
快速部署安装向导
1. 将您的设备连接好网线后开启电源
确保网络中的电脑被配置为使用 DHCP方式自动获取IP地址。在启动 Firebox 设备后,它将在
10.0.1.0/24 网络上分配一个 IP 地址。 您的网络
Internet
2. 连接到网页管理界面
A. 在浏览器地址栏输入https://10.0.1.1:8080
B. 您可以安全地忽略看到的任何证书警告,因为该设备使用自签名证书。
C. 用您的账户 admin 以及在激活过程中设置的账户(readwrite)密码登录。
您的设备有一个基本配置:
允许从内网向外发起 TCPUDP Ping 数据流
自动阻止来自外部网络的所有未经允许的数据流
包含优化过的安全设置
使用许可的安全服务来保护受信任的网络和可选网
常规激活操作
1. 将您的设备连接好网线后开启电源
确保网络中的电脑被配置为使用 DHCP方式自动获取IP地址。连接 Firebox 设备后,
它将在 10.0.1.0/24 网络上分配一个 IP 地址。
2. 连接到网页管理界面
A. 在浏览器地址栏输入https://10.0.1.1:8080
B. 您可以安全地忽略证书警告,因为该设备使用自签名证书。
C. 以管理员账号 admin 和管理员配置密码 readwrite 登录。
D. 按照网页安装向导中的说明为新设备创建基本配置文件。如果有问题,请单击
“更多信息”
(More Information)
E. 在向导完成后,使用 admin 账户和您在向导中设置的账户密码(readwrite)登录到网页
管理界面。
F. 在您的网络中安装 Firebox设备。
您的设备有一个基本配置:
允许从内网向外发起 TCPUDP Ping 数据流
自动阻止来自外部网络的所有未经允许的数据流
电脑 Internet
12 13
简体中文
关于设备状态指示灯
Fail Over故障转移 WAN 从主要外部接口向备份接口进行故障转移时亮起。
WAP(仅无线机型)当设备作为无线接入点或无线客户端时亮起。
网络接口状态指示灯 – Firebox T55 5个网络接口。
指示灯 指示灯颜色 接口状态
1000 黄色 链路速度:1000 Mbps
闪烁*发送和接收数据
10/100 绿色 链路速度:10 Mbps
100 Mbps
闪烁*发送和接收数据
*闪烁速度会随着数据流量的增加而加快
Status状态当设备有管理连接时将亮起。在用Fireware网页管理界面或命令行界面连接上设备
后,状态指示灯将持续亮30秒。当 WatchGuard System Manager 轮询设备时也会亮起。
Mode模式显示外部网络连接的状态。如果设备可以连接到外部网络并发送数据流,则该指示
灯为绿色。如果设备无法连接到外部网络和发送数据流,则该指示灯闪烁。
Attn注意在重启设备时按下“重置”(Reset) 按钮,此灯闪烁。
Power电源 ( ) – 当设备处于开启状态时,电源指示灯亮。
• 检测传出 FTP、HTTP 和 HTTPS 流量
• 使用许可的安全服务来保护受信任的网络和可选网
后续步骤
喜!您 成 了 Firebox 基本安装您可使用网管理界面查看和编辑您的配置并管理和监控您
Firebox 。或 者 ,您 WatchGuard 系 统 管 理 器( WSM 使用政策管器和 WSM 管理
套件和监控工具。下面是助您入门的一些建议
证您的 Internet 连接
在网络中安 Firebox 设备之后,您的用户可以成功浏览网页
获取最新版本软件
要升Firebox作系统:
1. 登录 Fireware 网页管界面。
2. 择系统 > 级操作系统。
要获取 Firebox 上最新版本的 WSMWatchGuard DimensionVPN 客户端
和其他软件:
1. 转到 www.watchguard.com/support 并单击下载件。
2. 找到 Firebox T55 的软件下载页面并选择您想安装的软件
浏览 Firebox 特性和功能
浏览网页管理界面或 WatchGuard 系统管理器击任意页面或对话框的上的帮助了解 Firebox 的管
监控和安全功能。
14 15
Français
Firebox 重置为出厂默认设置
如果需要,可以将 Firebox 重置为其出厂默认设置。例如,如果您忘记了您的管理员帐户密码或
者想用快速部署方式重新安装设备,您可以重置您的设备。
欲了解更多信息,请通过下面的网址浏览Firebox设备的硬件指南(“Hardware Guide”):
www.watchguard.com/help/documentation/hardware.asp
Activation de votre appareil
1. Rendez-vous à l'adresse www.watchguard.com/activate
2. Connectez-vous à votre compte WatchGuard ou créez un nouveau compte*.
*Si vous créez un nouveau compte, retournez à l'adresse www.watchguard.com/activate à la n
du processus de création de compte.
3. Saisissez le numéro de série de votre appareil.
4. Lors de l'activation, sélectionnez votre méthode de conguration:
RapidDeploy QuickStart: téléchargement et application automatiques d'un
chier de conguration QuickStart sur votre appareil. Ce chier est pré-conguré
avec les paramètres de sécurité recommandés par WatchGuard.
Classic Activation: utilisation de l'Assistant de conguration Web pour générer
un chier de conguration de base pour votre appareil.
5. Suivez les instructions de conguration correspondant à la méthode sélectionnée.
16 17
Français
Conguration RapidDeploy QuickStart
1. Branchement et mise sous tension de votre appareil
Assurez-vous que les ordinateurs de votre réseau sont congurés pour utiliser le protocole
DHCP. Lorsque vous installez votre Firebox, il attribue une adresseIP sur le réseau 10.0.1.0/24
Votre réseau
Internet
2. Connexion à l'interface utilisateur Web
A. Rendez-vous à l'adresse https://10.0.1.1:8080
B. Votre appareil utilisant un certicat auto-signé, vous pouvez, sans risque,
ignorer les avertissements liés aux certicats.
C. Connectez-vous avec le compte utilisateur admin et le mot de passe Admin
(readwrite) que vous avez dénis lors de l'activation.
Votre appareil présente une conguration de base:
Trac sortant TCP, UDP et Ping autorisés
Blocage de tout le trac non demandé en provenance du réseau externe
Paramètres de sécurité optimisés
Utilisation de services de sécurité sous licence pour protéger les réseaux
approuvés et en option
Ordinateur Internet
Conguration Classic Activation
1. Branchement et mise sous tension de votre appareil
Assurez-vous que votre ordinateur est conguré pour utiliser le protocole DHCP. Lorsque
vous connectez votre Firebox, il attribue une adresseIP sur le réseau 10.0.1.0/24
2. Connexion à l'interface utilisateur Web
A. Rendez-vous à l'adresse https://10.0.1.1:8080
B. Votre appareil utilisant un certicat auto-signé, vous pouvez, sans risque,
ignorer les avertissements liés aux certicats.
C. Connectez-vous avec le nom d'utilisateur admin et le mot de passe readwrite.
D. Suivez les instructions de l'Assistant de conguration Web pour générer un chier
de conguration pour un nouvel appareil. Si vous avez des questions, cliquez sur
Plus d'informations.
E. Une fois que l'Assistant a terminé, connectez-vous à l'interface utilisateur Web avec
le nom d'utilisateur admin et le mot de passe Admin (readwrite) que vous avez
dénis dans l'Assistant.
F. Installez le Firebox dans votre réseau.
Votre appareil présente une conguration de base:
Trac sortant TCP, UDP et Ping autorisés
Blocage de tout le trac non demandé en provenance du réseau externe
Inspection du trac sortant FTP, HTTP et HTTPS
Utilisation de services de sécurité sous licence pour protéger les réseaux
approuvés et en option
18 19
Français
À propos des témoins d'état de l'appareil
Fail Over (Basculement): s'allume en cas de basculement WAN depuis l'interface externe
principale vers l'interface de secours.
WAP (modèles sans l uniquement): s'allume lorsque l'appareil est activé en tant que point
d'accès sans l ou en tant que client sans l.
Indicateurs d'état des interfaces réseau: le Firebox T55 possède cinq interfaces réseau.
Chaque interface comporte deux indicateurs d'état.
Indicateur Couleur de l'indicateur État de l'interface
1000 Jaune Vitesse des liens: 1000 Mbps
Clignote* Données envoyées et reçues
10/100 Vert Vitesse des liens: 10 Mbps ou
100 Mbps
Clignote* Données envoyées et reçues
* La vitesse de clignotement augmente avec le débit du ux de données
Status (État): indique qu'il y a une connexion de gestion avec l'appareil. L'indicateur d'état
s'allume pendant 30 secondes après avoir connecté l'appareil à l'interface utilisateur Web
de Fireware ou à l'interface de ligne de commande. Il s'allume également lorsque l'appareil
est sondé par WatchGuard System Manager.
Mode: indique l'état de la connexion du réseau externe. Si l'appareil peut se connecter
au réseau externe et envoyer du trac, cet indicateur est vert. Si l'appareil ne peut pas se
connecter au réseau externe et envoyer du trac, cet indicateur clignote.
Attn: s'allume lorsque vous démarrez l'appareil tout en maintenant le bouton Reset
(Réinitialiser) enfoncé.
Power (Alimentation) ( ): l'indicateur d'alimentation s'allume lorsque l'appareil est
sous tension.
Étapes suivantes
Félicitations! Vous avez à présent terminé la conguration de base de votre Firebox. Vous
pouvez utiliser l’interface utilisateur Web pour consulter et modier votre conguration,
mais aussi pour gérer et contrôler votre Firebox. Autrement, vous pouvez télécharger et
installer WatchGuard System Manager (WSM) et utiliser Policy Manager et la suite WSM
d’outils de gestion et de surveillance.
Voici quelques recommandations pour débuter:
Vériez votre connectivité Internet
Une fois votre Firebox installé dans votre réseau, assurez-vous que vos utilisateurs
peuvent naviguer correctement sur Internet.
Procurez-vous le logiciel le plus récent
Pour mettre à niveau le système d’exploitation du Firebox:
1. Connectez-vous à l’interface utilisateur Web de Fireware.
2. Sélectionnez System > Upgrade OS (Système > Mise à niveau du système
d’exploitation).
Pour obtenir la toute dernière version de WSM, de WatchGuard Dimension, des
clients VPN et d’autres logiciels pour votre Firebox:
1. Rendez-vous à l’adresse www.watchguard.com/support et cliquez sur
Download Software (Téléchargements de logiciels).
2. Recherchez la page des téléchargements de logiciels pour le FireboxT55 et
sélectionnez le logiciel à installer.
Examen des fonctions de votre Firebox
Accédez à l’interface utilisateur Web ou aux outils de WatchGuard System Manager et
cliquez sur l’icône d’Aide d’une page ou d’une boîte de dialogue pour en savoir plus sur les
fonctions de gestion, de surveillance et de sécurité de votre Firebox.
20 21
Deutsch
Rétablissement des paramètres d'usine du Firebox
En cas de besoin, vous pouvez réinitialiser votre Firebox sur ses paramètres d'usine. Par
exemple, vous pouvez réinitialiser votre appareil si vous ne connaissez pas le mot de passe
de votre compte administrateur ou si vous souhaitez recommencer à l'aide de RapidDeploy
QuickStart.
Pour en savoir plus, reportez-vous au Guide du matériel pour votre Firebox, disponible à
l'adresse suivante:
www.watchguard.com/help/documentation/hardware.asp
Gerät aktivieren
1. Rufen Sie die Website www.watchguard.com/activate auf.
2. Melden Sie sich bei Ihrem WatchGuard-Account an oder erstellen Sie ein neues Konto*.
*Falls Sie ein neues Konto erstellen, kehren Sie nach erfolgreichem Abschluss zur Seite
www.watchguard.com/activate zurück.
3. Geben Sie die Seriennummer Ihres Geräts ein.
4. Wählen Sie bei der Aktivierung eines der folgenden Setup-Verfahren aus:
RapidDeploy-Schnellstart – Sie können automatisch eine Schnellstart-
Kongurationsdatei auf Ihr Gerät herunterladen und ausführen. Hierbei sind die
von WatchGuard empfohlenen Sicherheitseinstellungen bereits vorkonguriert.
Klassische Aktivierung – Erstellen Sie mithilfe des Web-Setup-Assistenten eine
Basiskongurationsdatei für Ihr Gerät.
5. Folgen Sie den Setup-Anweisungen in diesem Handbuch für das von Ihnen
gewählte Verfahren.
22 23
Deutsch
Setup mit RapidDeploy-Schnellstart
1. Gerät anschließen und einschalten
Stellen Sie sicher, dass die Computer in Ihrem Netzwerk für die Verwendung von DHCP
konguriert sind. Wenn Sie Ihre Firebox installieren, wird eine IP-Adresse im Netzwerk
10.0.1.0/24 zugewiesen. Ihr Netzwerk
Internet
Computer Internet
2. Verbindung zum Web-Interface herstellen
A. Rufen Sie die Website https://10.0.1.1:8080 auf.
B. Etwaig angezeigte Zertikatswarnungen können Sie ignorieren, da das Gerät ein
selbstsigniertes Zertikat verwendet.
C. Melden Sie sich mit dem Benutzerkonto admin und dem Admin-Kennwort
(readwrite) an, das Sie während der Aktivierung festgelegt haben.
Ihr Gerät verfügt über die folgende Basiskonguration:
Unterstützung für ausgehenden TCP-, UDP- und Ping-Datenverkehr
Blockierung von nicht angefordertem Datenverkehr aus dem externen Netzwerk
Bereitstellung optimierter Sicherheitseinstellungen
Verwendung lizenzierter Sicherheitsdienste zum Schutz vertrauenswürdiger und
optionaler Netzwerke
Setup mit klassischer Aktivierung
1. Gerät anschließen und einschalten
Stellen Sie sicher, dass Ihr Computer für die Verwendung von DHCP konguriert ist.
Wenn Sie eine Verbindung zu Ihrer Firebox herstellen, wird eine IP-Adresse im Netzwerk
10.0.1.0/24 zugewiesen.
2. Verbindung zum Web-Interface herstellen
A. Rufen Sie die Website https://10.0.1.1:8080 auf.
B. Eventuell angezeigte Zertikatswarnungen können Sie ignorieren, da das Gerät ein
selbstsigniertes Zertikat verwendet.
C. Melden Sie sich mit dem Benutzernamen admin und dem Kennwort readwrite an.
D. Folgen Sie den Anweisungen im Web-Setup-Assistenten, um eine
Basiskongurationsdatei für ein neues Gerät zu erstellen. Klicken Sie bei weiteren
Fragen auf More Information.
E. Melden Sie sich nach Abschluss des Assistenten mit dem Benutzerkonto admin und
dem Admin-Kennwort (readwrite), das Sie mit dem Assistenten festgelegt haben,
an der Web-Schnittstelle an.
F. Installieren Sie die Firebox in Ihrem Netzwerk.
Ihr Gerät verfügt über die folgende Basiskonguration:
Unterstützung für ausgehenden TCP-, UDP- und Ping-Datenverkehr
Blockierung von nicht angefordertem Datenverkehr aus dem externen Netzwerk
Prüfung von ausgehendem FTP-, HTTP- und HTTPS-Datenverkehr
Verwendung lizenzierter Sicherheitsdienste zum Schutz vertrauenswürdiger und
optionaler Netzwerke
24 25
Deutsch
Informationen zu den Statusanzeigen des Geräts
Fail Over – Diese Anzeige leuchtet bei WAN-Failover zwischen der primären externen
Schnittstelle und der Backup-Schnittstelle.
WAP (nur bei Drahtlosmodellen) – Diese Anzeige leuchtet, wenn das Gerät als Wireless
Access Point oder als drahtloser Client aktiviert wurde.
Statusanzeigen der Netzwerkschnittstellen – Die Firebox T55 verfügt über fünf
Netzwerkschnittstellen. Für jede Schnittstelle gibt es zwei Statusanzeigen.
Anzeige Farbsignal Schnittstellenstatus
1000 Gelb Verbindungsgeschwindigkeit: 1000 MBit/s
Blinkt* Daten werden gesendet und empfangen
10/100 Grün Verbindungsgeschwindigkeit: 10 MBit/s
oder 100 MBit/s
Blinkt* Daten werden gesendet und empfangen
* Bei zunehmendem Datenverkehr erhöht sich die Blinkfrequenz
Status – Zeigt an, ob eine Verwaltungsverbindung zum Gerät besteht. Die Statusanzeige
leuchtet 30 Sekunden lang, nachdem Sie über das Fireware-Web-Interface oder das
Kommandozeileninterface die Verbindung zum Gerät hergestellt haben. Sie leuchtet
außerdem, wenn das Gerät vom WatchGuard System Manager abgefragt wird.
Mode – Zeigt den Status der externen Netzwerkverbindung an. Die Anzeige leuchtet grün,
wenn das Gerät eine Verbindung zum externen Netzwerk herstellen und Datenverkehr
senden kann. Die Anzeige blinkt, wenn das Gerät keine Verbindung zum externen
Netzwerk herstellen und keinen Datenverkehr senden kann.
Attn – Diese Anzeige leuchtet, wenn Sie das Gerät mit gedrückter Reset-Taste starten.
Ein/Aus ( ) – Diese Anzeige leuchtet, wenn das Gerät eingeschaltet ist.
Weitere Schritte
Herzlichen Glückwunsch! Sie haben das Basis-Setup für Ihre Firebox abgeschlossen. Über
das Web-Interface können Sie Ihre Konguration anzeigen lassen sowie bearbeiten und
Ihre Firebox verwalten und überwachen. Alternativ können Sie den WatchGuard System
Manager (WSM) herunterladen und installieren und den Policy Manager und die WSM-
Suite mit Management- und Überwachungstools verwenden. Tipps für den Start:
Internetverbindung überprüfen
Stellen Sie sicher, dass Ihre Nutzer nach der Installation der Firebox im Netzwerk
problemlos im Internet navigieren können.
Neueste Software implementieren
So führen Sie ein Upgrade des Firebox-Betriebssystems durch:
1. Melden Sie sich beim Fireware Web UI an.
2. Wählen Sie die Option System > Upgrade OS aus.
So rufen Sie die neueste Version von WSM, WatchGuard Dimension, VPN-Clients
und anderer Software für die Firebox ab:
1. Rufen Sie die Website www.watchguard.com/support auf, und klicken Sie auf
Download Software.
2. Gehen Sie auf die Seite mit den Software-Downloads für die Firebox T55, und
wählen Sie die zu installierende Software aus.
Merkmale und Funktionen der Firebox erkunden
Durchsuchen Sie das Web-Interface oder die Tools in WatchGuard System Manager und
klicken Sie auf einer beliebigen Seite oder in einem beliebigen Dialogfeld auf Help, um
weitere Informationen zu den Verwaltungs-, Überwachungs- und Sicherheitsmerkmalen
Ihrer Firebox zu erhalten.
26 27
Italiano
Zurücksetzen der Firebox auf die Standard-
Werkseinstellungen
Falls erforderlich, lassen sich jederzeit die Werkseinstellungen Ihrer Firebox
wiederherstellen. Sie können Ihr Gerät beispielsweise zurücksetzen, wenn Sie Ihr
Kennwort für das Administratorkonto vergessen haben oder den RapidDeploy QuickStart
durchführen möchten.
Weitere Informationen nden Sie im Hardwarehandbuch für Ihre Firebox. Sie nden es unter:
www.watchguard.com/help/documentation/hardware.asp
Attivazione del dispositivo
1. Vai su www.watchguard.com/activate
2. Accedi al tuo account WatchGuard, oppure creane uno nuovo*.
*Se crei un nuovo account, ritorna a www.watchguard.com/activate dopo aver terminato la procedura
di creazione dell’account.
3. Digita il numero di serie del tuo dispositivo.
4. Durante l’attivazione, seleziona il metodo di installazione preferito:
RapidDeploy QuickStart – Scarica automaticamente e applica il le di
congurazione sul tuo dispositivo, con le impostazioni di sicurezza consigliate
da WatchGuard.
Attivazione classica – Utilizza la procedura guidata, attraverso l’interfaccia di
gestione via Web, per creare il le di congurazione base per il tuo dispositivo.
5. Utilizza le istruzioni per l’installazione contenute in questa guida, corrispondenti
al metodo selezionato.
28 29
Italiano
Impostazione di RapidDeploy QuickStart
1. Collegamento e accensione del dispositivo
Assicurati che i computer collegati alla rete siano congurati per utilizzare il protocollo
DHCP. Quando installi il tuo Firebox, questo assegnerà al computer un indirizzo IP nella
sottorete 10.0.1.0/24 La tua rete
Internet
Computer Internet
2. Collegamento all'interfaccia di gestione via Web
A. Vai all'indirizzo https://10.0.1.1:8080
B. Puoi ignorare l'avviso di sito web non sicuro dovuto al certicato SSL, perché
il dispositivo utilizza un certicato auto-rmato.
C. Accedi con l’account utente admin e la passphrase di amministratore (readwrite)
impostata durante l’attivazione.
Il dispositivo contiene una congurazione di base:
Consente il traco TCP e UDP in uscita, e il ping
Blocca tutto il traco non richiesto dalla rete esterna
Include impostazioni di sicurezza ottimizzate
Utilizza i servizi di sicurezza concessi in licenza per proteggere le reti adabili e
opzionali
Impostazioni di attivazione classiche
1. Collegamento e accensione del dispositivo
Verica che il computer in uso sia congurato per utilizzare il protocollo DHCP.
Quando installi il tuo Firebox, questo assegnerà al computer un indirizzo
IP nella sottorete 10.0.1.0/24
2. Collegamento all'interfaccia di gestione via Web
A. Vai all'indirizzo https://10.0.1.1:8080
B. Puoi ignorare tranquillamente qualsiasi avviso di certicato visualizzato perché
il dispositivo utilizza un certicato autormato.
C. Accedi con il nome utente admin e la passphrase readwrite.
D. Per creare un le di congurazione di base per il nuovo dispositivo, segui le
indicazioni contenute nella procedura guidata per l’installazione basata sul Web.
In caso di domande, fai clic su Ulteriori informazioni.
E. Una volta completata la procedura guidata, accedi all’interfaccia di gestione via
Web con l’account utente admin e la password (readwrite), impostata durante la
procedura guidata.
F. Installa il Firebox nella tua rete.
Il dispositivo contiene una congurazione di base:
Consente il traco TCP e UDP in uscita, e il ping
Blocca tutto il traco non richiesto dalla rete esterna
Ispeziona il traco in uscita FTP, HTTP e HTTPS
Utilizza i servizi di sicurezza concessi in licenza per proteggere le reti adabili e
opzionali
30 31
Italiano
Informazioni sulle spie di stato del dispositivo
Fail Over – Si accende in caso di failover WAN dall’interfaccia esterna primaria all’interfaccia
di backup.
WAP – (Solo nei modelli wireless) Si accende quando il dispositivo viene attivato come un
punto di accesso wireless o un come un client wireless.
Indicatori di stato della scheda di rete – Firebox T55 ha cinque interfacce di rete.
Per ogni scheda sono disponibili due indicatori di stato.
Indicatore Colore dell’indicatore Stato dell’interfaccia
1000 Giallo Velocità collegamento: 1000 Mbps
Lampeggi* Dati inviati e ricevuti
10/100 Verde Velocità collegamento: 10 Mbps o
100 Mbps
Lampeggi* Dati inviati e ricevuti
* La velocità di lampeggio aumenta insieme all’incremento del usso di dati
Stato – Si accende quando viene stabilita una connessione per la gestione del dispositivo.
Lindicatore di stato si accende per 30 secondi una volta collegatisi al dispositivo mediante
l’interfaccia utente basata sul web di Fireware o l’interfaccia a riga di comando. Si accende
anche quando il dispositivo viene sondato da WatchGuard System Manager.
Modo – Mostra lo stato della connessione alla rete esterna. Se il dispositivo può collegarsi
alla rete esterna e inviare traco, l’indicatore è verde. Se il dispositivo non può collegarsi
alla rete esterna e inviare traco, l’indicatore lampeggia.
Attn – Si accende quando il dispositivo viene avviato premendo il pulsante Reset.
Alimentazione ( ) – Lindicatore dell’alimentazione si accende quando il dispositivo
viene acceso.
Passaggi successivi
Congratulazioni! Linstallazione di base di Firebox è completata. Per visualizzare e
modicare la congurazione in uso e per gestire e monitorare Firebox, utilizza l’interfaccia
di gestione via Web. In alternativa, è possibile scaricare e installare WatchGuard System
Manager (WSM) e utilizzare Policy Manager e la suite di strumenti gestionali e di
monitoraggio WSM. Di seguito alcuni consigli utili per iniziare:
Verica della connessione a Internet
Dopo avere installato Firebox nella tua rete, verica che gli utenti possano
navigare in Internet senza problemi.
Aggiornamento del software
Per aggiornare il sistema operativo Firebox:
1. Accedi all’interfaccia utente Web Fireware.
2. Seleziona System > Upgrade OS.
Per ottenere l’ultima versione di WSM, WatchGuard Dimension, client VPN
e altro software per Firebox:
1. Vai su www.watchguard.com/support e fai clic su Download Software.
2. Cerca la pagina per scaricare il software di Firebox T55 e seleziona il software
che desideri installare.
Esplorazione delle caratteristiche e delle funzionalità
di Firebox
Per ulteriori informazioni sulle funzionalità di gestione, monitoraggio e sicurezza di
Firebox, sfogliare l’interfaccia utente basata sul web o gli strumenti di WatchGuard System
Manager e fare clic su ? o su qualsiasi altra pagina o nestra di dialogo.
32 33
日本
Ripristino delle impostazioni di fabbrica predenite di Firebox
Se necessario, è possibile ripristinare le impostazioni di fabbrica di Firebox. Per esempio, il
dispositivo può essere ripristinato se non conosci la passphrase dell’account administrator
o se desideri ricominciare la procedura con RapidDeploy QuickStart.
Per maggiori informazioni, consulta la Guida all'hardware del tuo Firebox, disponibile
all’indirizzo:
www.watchguard.com/help/documentation/hardware.asp
デバイスのアクティベーションを行う
1. www.watchguard.com/activateにアクセスします。
2. 登録済みのWatchGuardアカウントにログインするか、新しいアカウントを作成します*
*新しいアカウントを作成する場合は、アカウントの作成が完了してからもう一度
www.watchguard.com/activateにアクセスしてください。
3. デバイスのシリアル番号を入力します。
4. アクティベーションの実行時にセットアップ方法を選択します。
RapidDeploy QuickStart – QuickStart設定ファイルを自動的にダウンロードしてデバ
イスに適用します。このファイルは、WatchGuardで推奨しているセキュリティ設定
を事前に設定したものです。
従来のアクティベーションウェブセットアップ・ウィザードを使用して、デバイス
の基本設定ファイルを作成します。
5.選択した方法に応じて、本ガイドのいずれかのセットアップ手順に従います。
34 35
日本
RapidDeploy QuickStartによるセットアップ
1. デバイスを接続して電源を入れる
ネットワーク上のコンピュータがDHCPを使用するように設定されていることを確認します。
Fireboxのインストール時に、10.0.1.0/24ネットワーク上のIPアドレスが割り当てられます。
ネ ット ワ ー ク
インターネッ
ンピュータ インターネッ
2. WebUIに接続する
A. https://10.0.1.1:8080にアクセスします。
B. Fireboxデバイスは自己署名証明書を使用するため、証明書に関する警告は無視してか
まいません。
C. アクティベーションの実行時に設定したユーザー・アカウントadminと管理用パスフ
レーズreadwriteでログインします。
デバイスの基本設定は次のとおりです。
アウトバウンドのTCPUDP、およびpingトラフィックを許可
外部ネットワークからのすべての要求されないトラフィックをブロック
セキュリティ設定を最適化
•信頼できるネットワークとオプションネットワーク保護のため、ライセンス式セキ
ュリティサービスを使用
従来のアクティベーションによるセットアップ
1. デバイスを接続して電源を入れる
コンピュータがDHCPを使用するように設定されていることを確認します。Fireboxへの接続時
に、10.0.1.0/24ネットワーク上のIPアドレスが割り当てられます。
2. WebUIに接続する
A. https://10.0.1.1:8080にアクセスします。
B. Fireboxデバイスは自己署名証明書を使用するため、証明書に関する警告は無視して
かまいません。
C. ユーザー名adminとパスフレーズreadwriteでログインします。
D. ウェブセットアップ・ウィザードの手順に従って、新しいデバイスの基本設定ファイ
ルを作成します。詳しい手順を確認する場合は、[More Information]をクリックしてくだ
さい。
E. ウィザードが完了したら、ウィザードで設定したユーザー・アカウントadminと管理用
パスフレーズreadwriteでウェブUIにログインします。
F. ネットワークにFireboxをインストールします。
デバイスの基本設定は次のとおりです。
アウトバウンドのTCPUDP、およびpingトラフィックを許可
外部ネットワークからのすべての要求されないトラフィックをブロック
•外部に向けたFTP、HTTP、HTTPSトラフィックを検査
•信頼できるネットワークとオプションネットワーク保護のため、ライセンス式セキ
ュリティサービスを使用
36 37
日本
デバイスのステータス・ライトについて
Fail Overプライマリ外部インターフェイスからバックアップ・インターフェイスへのWAN
フェイルオーバーの発生時に点灯します。
WAP - (無線モデルのみ)デバイスを無線アクセス・ポイントまたは無線クライアントとして
アクティベートした場合に点灯します。
ネットワーク・インターフェイスのステータス・インジケータ – Firebox T55には5つのネット
ワーク・インターフェイスがあります。それらのインターフェイスのそれぞれに2種類のステ
ータス・インジケータがあります。
インジケータ インジケータの色 インターフェイスのステータス
1000 黄色 リンク速度:1000 Mbps
点滅*データを送受信
10/100 緑色 リンク速度:10 Mbpsまたは
100 Mbps
点滅*データを送受信
* データの量が多いほど高速に点滅します
Statusデバイスへの管理接続のステータスを示します。このインジケータは、Fireware Web
UIまたはコマンドライン・インターフェイスでデバイスに接続したときに、30秒間点灯し
ます。また、WatchGuard System Managerによるデバイスのポーリング時にも点灯します。
Mode外部ネットワーク接続のステータスを示します。外部ネットワークに接続してトラフ
ィックを送信できる場合、このインジケータは緑色になります。外部ネットワークに接続して
トラフィックを送信することができない場合は点滅します。
Attnデバイスの起動時にリセット・ボタンを押すと点灯します。
Power ( ) – デバイスの電源が入っているときに点灯します。
ップ
お めうご ざ い ま す。 こ れ Firebox 本セプがしました
Web UI 使 って、 定 の
覧と編および Firebox の 管 / 監 視 が 可 能 で す。 ま た 、
WatchGuard System Manager
WSM
ダウンロドしインストールし
Policy Manager WSM イート 含 ま れ る 管 / 視 ツ ー ル を 利
る こできます。それらの作業の手始め、いつかの推奨事項を次に示ます
インターネト接する
ネットワークにインストールした Firebox で、ユーザーがイターネを正常に閲でき
認します。
最新の手す
Firebox OS をアッグレ ードする のとおりです。
1. Fireware Web UI ロ グイ ンま す。
2. System > Upgrade OS を 選 し ま す。
Firebox に、最新版の WSM
WatchGuard Dimension
VPN clients ソフトウェア
を 入には :
1. www.watchguard.com/support アクDownload Software クリックし
す。
2. Firebox T55 ソフトウェア・ダウンロー・ペー探しインストールするトウェアを
択します。
Firebox いて調
Firebox 管理、監視、およびセの機能の詳細についは、ウUI または WatchGuard
System Manager きます。れぞダイ・ボックスで [Help] を クしてく
ださい。
38 39
한국어
Fireboxの設定を工場出荷時の状態に戻す
必要に応じて、Fireboxの設定を工場出荷時の状態に戻すことができます。たとえば、管理者
アカウントのパスフレーズを忘れた場合や、RapidDeploy QuickStartでセットアップをやり直し
たい場合に、デバイスをリセットすることができます。
詳細については、下記のサイトでお使いのFirebox向けのハードウェア・ガイドを参照してく
ださい。
www.watchguard.com/help/documentation/hardware.asp
장치 활성화
1. www.watchguard.com/activate로 이동합니다.
2. WatchGuard 󺆓󻳤󻰋󺴫󺴫󺋇󻱇󼨧󺄿󺕧󻖗󺆓󻳤󻰓󺺛󺦼󺞗󺞳*.
*󻖗󺆓󻳤󻰓󺺛󺦳󺆌󻭿󺆓󻳤󻖬󻘀󺇋󻳤󻰓󺺗󼌫󼮓 www.watchguard.com/activate󺴫󺢛󻨓󺃏󻞼󻞫󻫳.
3. 󻱴󼌧󻰧󻱋󺳷󻅗󼬇󺹋󻱔󺳴󼨸󺞗󺞳
4. 활성화 과정을 진행하는 중에 원하는 설정 방법을 선택합니다.
RapidDeploy QuickStart – WatchGuard󻪟󻗫󺉛󻱴󼨧󺝣󻇃󻨗󻗳󻳤󻰋󺴫󻕻󻳓󺈻󻘀󺣫 QuickStart 󺈻󻘀
󼟛󻱋󻰓󻱟󺢨󻰋󺴫󺞳󻮃󺴫󺦫󼨧󻪻󻱴󼌧󻪟󻳐󻭸󼨸󺞗󺞳
Classic Activation – Web Setup Wizard󺹋󻕻󻭸󼨧󻪻󻱴󼌧󻪟󺟏󼨫󺋿󻇇󺈻󻘀󼟛󻱋󻰓󺺛󺦼󺞗󺞳
5. 󻱃󺃏󻱃󺦫󻪟󻗫󻗯󼖬󼨫󻃸󻅤󻪟󺺭󺝣󻗳󻳤󻺏󼌷󻰓󺧿󺹔󺞗󺞳
40 41
한국어
RapidDeploy QuickStart 설정
1. 장치 연결 및 전원 켜기
󺗳󼞇󻮛󼔻󻪟󻱗󺝣󼏃󼦷󼗿󺃏 DHCP󺹋󻕻󻭸󼨧󺢓󺴬󻗳󻳤󺣧󻪃󻱗󺝣󻺏󼬤󻱇󼨸󺞗󺞳 Firebox󺹋 󻗳󼌧󼨯 󺨛 10.0.1.0/24
󺗳󼞇󻮛󼔻󻰧 IP 󻷋󻙛󺃏󻱟󺢨󼨯󺟈󺣸󺞗󺞳
네트워크
인터넷
컴퓨터 인터넷
2. Web UI에 연결
A. https://10.0.1.1:8080으로 이동합니다.
B. 󻱴󼌧󻪟󻗫󻱟󼆃󻗫󺽔󺣫󻱇󻹬󻗫󺹋󻕻󻭸󼨧󺋿󺨛󻀇󻪟󻱇󻹬󻗫󺆌󺆯󺝣󻨗󻞻󼨧󺆯󻀃󻞫󼨧󻞫󺽃󺣸󺞗󺞳
C. 󻕻󻭸󻱟 󺆓󻳤 admin󺇋 󼬫󻘀󼬣 󺇋󻳤󻪟󻗫 󻗳󻳤󼨫 Admin 󻨣󼬇(readwrite)󺹋󻕻󻭸󼨧󻪻󺴫󺋇󻱇󼨸󺞗󺞳
󻱴󼌧󺃏󺋿󻇇󻳐󻰋󺴫󺞳󻰛󺇋󺃨󻱃󺈻󻘀󺣸󺞗󺞳
󻨓󻮒󻃣󻮃󺦫 TCP, UDP 󻃞 Ping 󼞇󺱧󼨌 󼪗󻭸
󻭇󻉏󺗳󼞇󻮛󼔻󻪟󻗫󺦳󻪃󻫳󺝣󻭣󼅼󺣧󻺏󻨙󻰏󼞇󺱧󼨌󺽷󺤟󼃷󺞷
󼈫󻳐󼬣󺣫󻇃󻨗󻗳󻳤󼢻󼨷
󺱋󻱃󻗯󻝳󺃏󽴔󻱗󺝣󽴔󻇃󻨗󽴔󻗫󻌓󻝳󺹋󽴔󻕻󻭸󼨧󻪻󽴔󻞯󺵿󼨯󽴔󻛧󽴔󻱗󺆯󽴔󻗯󼖬󻳐󻱇
 󺗳󼞇󻮛󼔻󺹋󽴔󻇃󼬇󼨸󺞗󺞳
Classic Activation 설정
1. 장치 연결 및 전원 켜기
󼏃󼦷󼗿󺃏 DHCP󺹋󻕻󻭸󼨧󺢓󺴬󻗳󻳤󺣧󻪃󻱗󺝣󻺏󼬤󻱇󼨸󺞗󺞳 Firebox󻪟󻪿󺅿󼨯󺨛10.0.1.0/24 󺗳󼞇󻮛󼔻󻰧
IP 󻷋󻙛󺃏󻱟󺢨󻰋󺴫󼨯󺟈󺣸󺞗󺞳
2. Web UI에 연결
A. https://10.0.1.1:8080으로 이동합니다.
B. 󻱴󼌧󻪟󻗫󻱟󼆃󻗫󺽔󺣫󻱇󻹬󻗫󺹋󻕻󻭸󼨧󺋿󺨛󻀇󻪟󻱇󻹬󻗫󺆌󺆯󺝣󻨗󻞻󼨧󺆯󻀃󻞫󼨧󻞫󺽃󺣸󺞗󺞳
C. 󻕻󻭸󻱟󻱃󺹓 admin󺇋 󻨣󼬇 readwrite󺹋 󻕻󻭸󼨧󻪻 󺴫󺋇󻱇󼨸󺞗󺞳
D. Web Setup Wizard󻰧󻺏󼌷󻰓󺧿󺱋󻖗󻱴󼌧󻪟󺟏󼨫󺋿󻇇󺈻󻘀󼟛󻱋󻰓󺺛󺦼󺞗󺞳󻺗󻀇󻱃󻱗󻰓󺆌󻭿
More Information󻰓󼕃󺹼󼨸󺞗󺞳
E. 󺺗󻅤󻕻󺃏󻬓󺶛󺣧󺽃󻕻󻭸󻱟󺆓󻳤 admin󺇋󺺗󻅤󻕻󺹋󻺓󼩘󼨧󺝣󺢓󻷠󻗳󻳤󼨫 Admin 󻨣󼬇(readwrite)󺹋
󻕻󻭸󼨧󻪻 Web UI󻪟 󺴫󺋇󻱇󼨸󺞗󺞳
F. 󺗳󼞇󻮛󼔻󻪟 Firebox󺹋 󻗳󼌧󼨸󺞗󺞳
󻱴󼌧󺃏󺋿󻇇󻳐󻰋󺴫󺞳󻰛󺇋󺃨󻱃󺈻󻘀󺣸󺞗󺞳
󻨓󻮒󻃣󻮃󺦫 TCP, UDP 󻃞 Ping 󼞇󺱧󼨌 󼪗󻭸
󻭇󻉏󺗳󼞇󻮛󼔻󻪟󻗫󺦳󻪃󻫳󺝣󻭣󼅼󺣧󻺏󻨙󻰏󼞇󺱧󼨌󺽷󺤟󼃷󺞷
󺕧󺃏󺝣󻃞󼞇󺱧󼨌󽴔󺅏󻕻
󺱋󻱃󻗯󻝳󺃏󽴔󻱗󺝣󽴔󻇃󻨗󽴔󻗫󻌓󻝳󺹋󽴔󻕻󻭸󼨧󻪻󽴔󻞯󺵿󼨯󽴔󻛧󽴔󻱗󺆯󽴔󻗯󼖬󻳐󻱇
 󺗳󼞇󻮛󼔻󺹋󽴔󻇃󼬇󼨸󺞗󺞳
42 43
한국어
장치 상태 표시등 정보
Fail Over󺋿󻇇󻭇󻉏󻱇󼗿󼡧󻱃󻝳󻪟󻗫󻄀󻪔󻱇󼗿󼡧󻱃󻝳󺴫󻰧 WAN 󼡧󻱋󻫳󻅓󺃏󻃫󻖬󼨯󺆌󻭿󼏫󻺠󺞗󺞳
WAP - (󻀃󻗯󺽷󺡇󻳓󻭸) 󻱴󼌧󺃏󻀃󻗯󻨰󻘇󻝳󼢻󻱇󼞇󺫟󺝣󻀃󻗯󼕃󺱋󻱃󻪇󼞇󺴫󼬫󻘀󼬣󺣫󺆌󻭿󻪟󼏫󻺠󺞗󺞳
네트워크 인터페이스 상태 표시등 – Firebox T55󻪟󺝣󺞳󻗾󺃏󻺏󺗳󼞇󻮛󼔻󻱇󼗿󼡧󻱃󻝳󺃏󻱗󻞄󺞗󺞳
󺃐󻱇󼗿󼡧󻱃󻝳󺺗󺞳󻖐󼖫󼤫󻞫󺧀󻱃󺤟󺃫󻧸󻱗󻞄󺞗󺞳
󼤫󻞫󺧀 󼤫󻞫󺧀󽴔󻖘󻖐 󻱇󼗿󼡧󻱃󻝳󽴔󻖐󼖫
1000 󺙇󺱏󻖘 󺺐󼔻 󻙜󺢓 1000Mbps
󺌫󻃤󻱓*󺠿󻱃󼗿󽴔󻙰󻛧󻞯
10/100 󺙈󻖘 󺺐󼔻 󻙜󺢓 10Mbps 󺫟󺝣
100Mbps
󺌫󻃤󻱓*󺠿󻱃󼗿󽴔󻙰󻛧󻞯
* 󺠿󻱃󼗿󼰟󺹓󻙜󺢓󺃏󻌷󺱋󻺗󻛧󺴬󺌫󻃤󻱓󻙜󺢓󺢓󻌷󺱋󻺠󺞗󺞳
Status󻱴󼌧󻪟󺟏󼨫󺇏󺹻󻪿󺅿󻱃󻱗󻰛󻰓󼤫󻞫󼨸󺞗󺞳󻱃󻖐󼖫󼤫󻞫󺧀󻰏󻕻󻭸󻱟󺃏 Fireware Web UI 󺫟󺝣󺽔󺴈󻷓
󻱇󼗿󼡧󻱃󻝳󺹋󻕻󻭸󼨧󻪻󻱴󼌧󻪟󻪿󺅿󼨫󼮓 30󼇗󺃓 󼏫󻺠󺞗󺞳 WatchGuard System Manager󻪟󻗫󻱴󼌧󺹋󼣃󺺐󼨫
󺆌󻭿󻪟󺢓󼏫󻺠󺞗󺞳
Mode󻭇󻉏󺗳󼞇󻮛󼔻󻪿󺅿󻖐󼖫󺹋󼤫󻞫󼨸󺞗󺞳󻱴󼌧󺃏󻭇󻉏󺗳󼞇󻮛󼔻󻪟󻪿󺅿󼨧󻪻󼞇󺱧󼨌󻰓󻙰󻞯󼨯󻛧󻱗󻰓󺆌󻭿
󼤫󻞫󺧀󻰏󺙈󻖘󻰋󺴫󼏫󻺠󺞗󺞳󻱴󼌧󺃏󻭇󻉏󺗳󼞇󻮛󼔻󻪟󻪿󺅿󼨧󻪻󼞇󺱧󼨌󻰓󻙰󻞯󼨯󻛧󻪕󻰓󺆌󻭿󻪟󺝣󼤫󻞫󺧀󻱃
󺌫󻃤󻱔󺞗󺞳
Attn – Reset 󻅓󼞋󻰓󺛓󺹇󻖐󼖫󺴫󻱴󼌧󺹋󻞫󻱠󼨯󺨛󼏫󻺠󺞗󺞳
Power ( ) – 󻱴󼌧󺃏󼏫󻺏󺽃󻳓󻮟󼤫󻞫󺧀󻱃󼏫󻺠󺞗󺞳
다음 단
축하합니다! Firebox 본 설을 완습니. Web UI를 사용하여 구성을 보고 편
수 있으Firebox를 관고 모니할 수 있습. 또WatchGuard System Manager
(WSM)를 다로드한 후 설하여 Policy Manager WSM 관리 및 모링 도구 제품군을
사용할 수도 있습니. 시작할 때 도움이 되는 몇 가지 권장 사항은 다음과 같습니.
인터넷 연결 상태 확인
트워에 설Firebox서 사용가 성공적으로 인넷을 탐색할 수 있지 확인하십오.
최신 소프웨어 다
Firebox OS를 업그레이드하려면 다음과 같이 하십시오.
1. Fireware Web UI에 로그합니.
2. System > Upgrade OS를 선합니.
최신 버전의 WSM, WatchGuard Dimension, VPN 클라이언트 및
기타 Firebox용 소프트웨어를 다로드하려면 다음과 같이 하십시오.
1. www.watchguard.com/support로 이동하고 Download Software를 클릭합니다.
2. Firebox T55 의 소프트웨어 다로드 페를 찾아 설고자 하는 소프트어를 선택합니다.
Firebox의 특징 및 기능 살보기
Web UIWatchGuard System Manager의 도구를 살보고 어한 페나 대화 상자에Help
클릭하 Firebox의 관리, 모링 및 보안 기능에 대한 자한 내용을 볼 수 있.
44 45
Español
Firebox를 공장 초기 설정으로 리셋
󼨓󻭣󼨯󺆌󻭿 Firebox󺹋󺇄󻱴󼇗󺋿󻗳󻳤󻰋󺴫󺣧󺢛󺺃󻛧󻱗󻞄󺞗󺞳󻫗󺹋󺦳󻪃󺇏󺹻󻱟󺆓󻳤󻨣󼬇󺹋󺽷󺹃󺄿󺕧
RapidDeploy QuickStart󺴫󺞳󻞫󻞫󻱠󼨧󺆯󻱟󼨧󺝣󺆌󻭿󻱴󼌧󺹋󺹻󻘚󼨯󻛧󻱗󻞄󺞗󺞳
󻱟󻘇󼨫󺖃󻭸󻰏󻕻󻭸󼨧󻞫󺝣 Firebox󻭸󼨧󺦫󻮷󻪃󺃏󻱃󺦫󺹋󼄇󻴿󼨧󻞼󻞫󻫳󻱃󺃏󻱃󺦫󺝣󺞳󻰛󻪟󻗫󼬤󻱇󼨯󻛧󻱗󻞄󺞗󺞳
www.watchguard.com/help/documentation/hardware.asp
Active su dispositivo
1. Visite www.watchguard.com/activate
2. Inicie sesión con su cuenta de WatchGuard o cree una cuenta nueva*.
*Si usted crea una cuenta nueva, regrese a www.watchguard.com/activate luego de nalizar el proceso
de creación de la cuenta.
3. Ingrese el número de serie de su dispositivo.
4. Durante la activación, seleccione su método de instalación:
Inicio rápido de RapidDeploy: automáticamente descargue y aplique un archivo
de conguración de inicio rápido en su dispositivo, congurado previamente con
la conguración de seguridad recomendada por WatchGuard.
Activación clásica: use el asistente de instalación web para crear un archivo de
conguración básico para su dispositivo.
5. Use las directivas de instalación de esta guía que correspondan al método
que seleccionó.
46 47
Español
Instalación del inicio rápido RapidDeploy
1. Conecte su dispositivo y enciéndalo
Asegúrese de que los equipos de su red estén congurados para usar DHCP. Cuando instale
su Firebox, este le asignará una dirección IP en la red 10.0.1.0/24
Su red
Internet
Equipo Internet
2. Conéctese a la interfaz de usuario web
A. Vaya a https://10.0.1.1:8080
B. De manera segura, puede ignorar cualquier certicado de advertencia que vea
debido a que el dispositivo usa un certicado con rma automática.
C. Inicie sesión con la cuenta de usuario admin y la frase de contraseña de Administrador
(readwrite) que estableció durante la activación.
Su dispositivo tiene una conguración básica:
Permite tráco ping, UDP y TCP saliente
Bloquea todo el tráco no solicitado de la red externa
Incluye conguración de seguridad optimizada
Usa servicios de seguridad con licencia para proteger las redes conablesy
opcionales.
Instalación de activación clásica
1. Conecte su dispositivo y enciéndalo
Asegúrese de que su equipo esté congurado para usar DHCP. Cuando se conecte
a su Firebox, este le asignará una dirección IP en la red 10.0.1.0/24
2. Conéctese a la interfaz de usuario web
A. Vaya a https://10.0.1.1:8080
B. De manera segura, puede ignorar cualquier certicado de advertencia debido
a que el dispositivo usa un certicado con rma automática.
C. Inicie sesión con el nombre de usuario admin y la frase de contraseña readwrite.
D. Siga las directivas en el asistente de instalación web para crear un archivo de
conguración básico para un dispositivo nuevo. Haga clic en Más información si
tiene preguntas.
E. Cuando el asistente nalice, inicie sesión en la interfaz de usuario web con la cuenta
de usuario admin y la frase de contraseña de Administrador (readwrite) que estableció
durante el asistente.
F. Instale el Firebox en su red
Su dispositivo tiene una conguración básica:
Permite tráco ping, UDP y TCP saliente
Bloquea todo el tráco no solicitado de la red externa
Inspecciona tráco HTTPS, HTTP y FTP saliente.
Usa servicios de seguridad con licencia para proteger las redes conablesy
opcionales.
48 49
Español
Acerca de las luces de estado del dispositivo
Conmutación por error: las luces se encienden cuando hay una conmutación por error
de WAN de la interfaz externa principal a la interfaz de copia de seguridad.
WAP: (únicamente en modelos inalámbricos) las luces se encienden cuando el dispositivo
está activado como punto de acceso inalámbrico o como cliente inalámbrico.
Indicadores de estado de la interfaz de la red: el Firebox T55 iene cinco interfaces
de red. Hay dos indicadores de estado para
cada interfaz.
Indicador Color del indicador Estado de interfaz
1000 Amarillo Velocidad de vínculo: 1000Mbps
Las luces parpadean* Datos enviados y recibidos
10/100 Verde Velocidad de vínculo: 10Mbps
o 100Mbps
Las luces parpadean* Datos enviados y recibidos
* La velocidad de parpadeo de las luces aumenta a medida que el ujo de datos aumenta
Estado: muestra cuando hay una conexión de administración al dispositivo. El indicador
de estado está iluminado durante 30 segundos después de que usted se conecta al
dispositivo con la interfaz de usuario web de Fireware o con la interfaz de línea de
comandos. También está iluminado cuando WatchGuard System Manager realiza un
sondeo en el dispositivo.
Modo: muestra el estado de la conexión de red externa. Si el dispositivo se puede conectar
a la red externa y enviar tráco, el indicador se muestra de color verde. El indicador se
enciende y apaga de forma intermitente si el dispositivo no se puede conectar a la red
externa y enviar tráco.
Attn: las luces se encienden cuando enciende el dispositivo con el botón para
reiniciar apretado.
Encendido ( ): el indicador de encendido está iluminado cuando el dispositivo
está encendido.
Próximos pasos
¡Felicitaciones! Ha nalizado la instalación básica de su Firebox. Puede usar la interfaz de
usuario web para ver y editar su conguración, y para administrar y controlar su Firebox.
O bien, puede descargar e instalar WatchGuard System Manager (WSM) y usar la función
Policy Manager y el conjunto de herramientas de gestión y supervisión de WSM. A
continuación, presentamos algunas recomendaciones para ayudarlo a comenzar:
Verique su Conexión a Internet
Con su Firebox instalado en su red, asegúrese de que sus usuarios puedan navegar
correctamente en Internet.
Obtenga el Software más Reciente
Para actualizar el SO Firebox:
1. Inicie sesión en la interfaz de usuario web de Fireware.
2. Seleccione System (Sistema) > Upgrade OS (Actualizar SO).
Para obtener la versión más reciente de WSM, WatchGuard Dimension, clientes
de VPN y otro software para su Firebox:
1. Visite www.watchguard.com/support y haga clic en Download Software
(Descargas de software).
2. Encuentre la página de descargas de software para el Firebox T55 y seleccione
el software que desee instalar
Explore las Características y Funciones de su Firebox
Explore la interfaz de usuario web o las herramientas de WatchGuard System Manager y
haga clic en Help (Ayuda) en cualquier página o cuadro de diálogo para aprender más
sobre las características de seguridad, control y gestión de su Firebox.
50 51
Português
Restablecimiento del Firebox a la conguración
predeterminada de fábrica
Si alguna vez lo necesita, puede restaurar su Firebox a la conguración predeterminada de
fábrica. Por ejemplo, si no conoce la frase de contraseña de su cuenta de administrador o quiere
comenzar de nuevo con el inicio rápido RapidDeploy, puede restablecer su dispositivo.
Para obtener más información, consulte la guía de hardware de su Firebox, disponible en:
www.watchguard.com/help/documentation/hardware.asp
Ative o dispositivo
1. Acesse www.watchguard.com/activate
2. Faça login na conta WatchGuard ou crie uma conta nova*.
*Se for criar uma conta nova, volte a www.watchguard.com/activate depois de concluído o processo
de criação de conta.
3. Insira o número de série do dispositivo.
4. Durante a ativação, selecione o método de conguração:
RapidDeploy QuickStart – baixe e aplique automaticamente um arquivo de
conguração QuickStart no dispositivo, pré-congurado com as congurações
de segurança recomendadas pela WatchGuard.
Ativação clássica – use o Assistente de Conguração pela Web para criar um
arquivo de conguração básica para o dispositivo.
5. Use as orientações de conguração neste guia que correspondam ao
método selecionado.
52 53
Português
Conguração RapidDeploy QuickStart
1. Conecte o dispositivo e ligue-o
Certique-se de que os computadores da rede estejam congurados para usar DHCP.
Ao instalar o Firebox, ele atribuirá um endereço IP na rede 10.0.1.0/24
Sua rede
Internet
Computador Internet
2. Conecte à interface de usuário da web
A. Acesse https://10.0.1.1:8080
B. É seguro ignorar os avisos de certicado exibidos porque o dispositivo usa
um certicado autoassinado.
C. Faça login com a conta de usuário admin e a senha do Admin (readwrite) denida
durante a ativação.
O dispositivo tem uma conguração básica:
Permite TCP, UDP e tráfego de ping de saída
Bloqueia todo tráfego não solicitado da rede externa
Contém congurações de segurança otimizadas
Usa serviços de segurança licenciados para proteger as redes opcionais e
conáveis
Conguração de ativação clássica
1. Conecte o dispositivo e ligue-o
Certique-se de que o computador esteja congurado para usar DHCP. Ao conectar-se ao
Firebox, ele atribuirá um endereço IP na rede 10.0.1.0/24
2. Conecte à interface de usuário da web
A. Acesse https://10.0.1.1:8080
B. É seguro ignorar os avisos de certicado porque o dispositivo usa um
certicado autoassinado.
C. Faça login com o nome de usuário admin e a senha readwrite.
D. Siga as instruções no Assistente de Conguração da Web para criar um arquivo
de conguração básica para o dispositivo. Em caso de dúvidas, clique em
Mais informações.
E. Na conclusão do assistente, faça login na interface de usuário da web com a conta
de usuário admin e a senha do Admin (readwrite) denida durante o Assistente.
F. Instale o Firebox na rede.
O dispositivo tem uma conguração básica:
Permite TCP, UDP e tráfego de ping de saída
Bloqueia todo tráfego não solicitado da rede externa
Inspeciona o tráfego de saída de FTP, HTTP e HTTPS
Usa serviços de segurança licenciados para proteger as redes opcionais e
conáveis
54 55
Português
Sobre as luzes de estado do dispositivo
Fail Over – acende quando existe um failover de WAN a partir da interface externa
principal para a interface de backup.
WAP – (somente modelos sem o) acende quando o dispositivo é ativado como um ponto
de acesso sem o ou um cliente sem o.
Indicadores de estado da interface de rede – o Firebox T55 tem cinco interfaces de rede.
Existem dois indicadores de status de cada interface.
Indicador Cor do indicador Estado da interface
1.000 Amarelo Velocidade do link: 1.000 Mbps
Intermitente* Dados enviados e recebidos
10/100 Verde Velocidade do link: 10 Mbps ou
100 Mbps
Intermitente* Dados enviados e recebidos
* A velocidade da intermitência aumenta proporcionalmente ao aumento do uxo de dados
Status – indica que existe uma conexão de gerenciamento com o dispositivo. O indicador
Status acende por 30 segundos depois de conectar ao dispositivo pela interface de usuário
da web do Fireware ou pela interface de linha de comando. Ela também acende quando o
dispositivo é sondado pelo WatchGuard System Manager.
Mode – indica o status da conexão de rede externa. Se o dispositivo puder se conectar
com a rede externa e enviar tráfego, a luz cará verde. O indicador piscará se o dispositivo
não puder se conectar com a rede externa e enviar tráfego.
Attn – acende ao iniciar o dispositivo com o botão Reset pressionado.
Power ( ) – o indicador de alimentação acende quando o dispositivo está ligado.
Próximas etapas
Parabéns! Você concluiu a conguração básica do Firebox. Use a interface de usuário da
web para editar as congurações e para gerenciar e monitorar o Firebox. Ou você pode
fazer o download e instalar o WatchGuard System Manager (WSM) e usar o Policy Manager
e o conjunto WSM de ferramentas de gerenciamento e monitoramento. Eis algumas
recomendações para ajudar no início:
Verique a conectividade com a internet
Com o Firebox instalado na rede, certique-se de que os usuários consigam
navegar na internet.
Obtenha o software mais recente
Para atualizar o Firebox OS:
1. Faça login na interface de usuário da web do Fireware.
2. Selecione System > Upgrade OS (Sistema > Atualizar SO).
Para obter a versão mais recente do WSM, do WatchGuard Dimension, dos
clientes VPN e outros softwares para o Firebox:
1. Acesse www.watchguard.com/support e clique em Download Software
(Baixar software).
2. Localize a página de downloads de software do Firebox T55 e selecione o
software que deseja instalar.
Explore os recursos e as funções do Firebox
Abra a interface de usuário da web ou as ferramentas no WatchGuard System Manager e
clique em Help (Ajuda) em qualquer página ou caixa de diálogo para saber mais sobre os
recursos de gerenciamento, monitoramento e segurança do Firebox.
56 57
繁體中文
Redena o Firebox com as congurações padrão de fábrica
Se for necessário, é possível restaurar as congurações padrão de fábrica do Firebox.
Por exemplo, se não souber a senha da conta do administrador ou quiser reiniciar o
RapidDeploy QuickStart, você pode redenir o dispositivo.
Para obter mais informações, consulte o guia de hardware do seu Firebox, disponível em:
www.watchguard.com/help/documentation/hardware.asp
啟動您的裝置
1. 請前往 www.watchguard.com/activate
2. 登入您的 WatchGuard 帳戶,或是建立新的帳戶*
*如果您建立新的帳戶,請在帳戶建立程序完成後返回 www.watchguard.com/activate
3. 輸入您的裝置序號。
4. 在啟用期間,選取您的安裝方法:
RapidDeploy QuickStart (快速部署快速啟動) 自動下載並套用 QuickStart 設定檔案到
您的裝置,使用 WatchGuard 建議的資訊安全設定預先設定。
Classic Activation (傳統啟用) 使用「網頁安裝精靈」為您的裝置建立基本設定。
5. 使用此指南中符合您所選方法的安裝程式指示。
58 59
繁體中文
RapidDeploy QuickStart (快速部署快速啟動) 安裝程式
1. 連接您的裝置並開啟電源
確定您網路上的電腦已設定為使用 DHCP。當您安裝 Firebox 時,它將會指派 10.0.1.0/24 網路上
IP 位址。 您的網路
網際網路
電腦 網際網路
2. 連線到 Web UI
A. 請前往 https://10.0.1.1:8080
B. 您可以安全地忽略看到的任何憑證警告,因為裝置使用自我簽署憑證。
C. 以您在啟用期間所設定的使用者帳戶 admin Admin (readwrite) 密碼登入。
您的裝置會有下列基本設定:
允許連出的 TCPUDP Ping 流量
封鎖來自外部網路所有的流量
包含最佳化的資訊安全設定
使用授權的資訊安全服務以保護信任和選用的網路 量
Classic Activation (傳統啟用) 安裝程式
1. 連接您的裝置並開啟電源
請確定您的電腦已設定為使用 DHCP。連線到 Firebox 時,它將會指派 10.0.1.0/24 網路上的
IP 位址。
2. 連線到 Web UI
A. 請前往 https://10.0.1.1:8080
B. 您可以安全地忽略憑證警告,因為裝置使用自我簽署憑證。
C. 請利用使用者名稱 admin 與通行詞組 readwrite 登入。
D. 請遵循「Web 安裝精靈」中的指示,建立新裝置的基本設定檔案。若您有問題,
請按一下 [More Information]
(更多資訊)
E. 當精靈完成時,請使用您在精靈期間設定的 admin 使用者帳戶與 Admin (readwrite)
密碼登入 Web UI
F. 在您的網路中安裝 Firebox
您的裝置會有下列基本設定:
允許連出的 TCPUDP Ping 流量
封鎖來自外部網路所有的流
60 61
繁體中文
關於裝置狀態燈號
容錯移轉 (Fail Over)當有從主要外部介面到備份介面的 WAN 容錯移轉時,此燈號會亮起。
WAP - (僅無線模式) 當裝置啟動為無線基地台或啟動為無線用戶端時,此燈號會亮起。
網路介面狀態指示燈 – Firebox T55 有五個網路介面。每個介面有兩個狀態指示燈。
指示燈 指示燈色彩 介面狀態
1000 黃色 連結速度:1000 Mbps
閃爍*資料傳送與接收
10/100 綠色 連結速度:10 Mbps
100 Mbps
閃爍*資料傳送與接收
* 當資料流量增加時,閃爍速度會變快
狀態 (Status)顯示連到裝置的管理連線。當您使用 Fireware Web UI 或命令列介面連線到裝置
時,Status (狀態) 指示燈會亮起 30 秒。當裝置由 WatchGuard System Manager (WatchGuard 系統
管理員) 輪詢時,它也會亮起。
模式 (Mode)顯示外部網路連線的狀態。若裝置可以連線到外部網路並傳送流量,此指示燈是
綠色的。若裝置無法連線到外部網路並傳送流量,此指示燈會閃爍。
注意 (Attn)當您按下 [重設] 按鈕啟動裝置時會亮起。
電源 (Power) ( )當裝置電源開啟時,電源指示燈會亮起。
• 檢查 FTP 下載、HTTP 及 HTTPS 傳輸
• 使用授權的資訊安全服務以保護信任和選用的網路 量
下來的步驟
喜!您 已 Firebox 的基本安裝您可以使用 Web UI 檢視及編輯設定並管理及監視您
Firebox或者您可以下載並安裝 WatchGuard System Manager (WSM),並 使 用 管 理 與 監 工 具
Policy Manager 以及 WSM 套件助您開始使用的一些建議
驗證您的網際網路連線
在網路中安裝 Firebox 之後請確認您的使用者可順利瀏覽網際網路
取得最新的軟體
升級 Firebox OS
1. 登入 Fireware Web UI
2. 選取 [System] (系統) > [Upgrade OS] (升 OS)
若要取得最新版本的 WSMWatchGuard DimensionVPN 客戶端,以及其他 Firebox
體:
1. 移至 www.watchguard.com/support 並 按 一下 [Download Software]
(下載軟體)
2. 尋找 Firebox T55 的軟體下載頁面並選取您要安裝的軟體
探索 Firebox 作用
瀏覽 Web UI 或是 WatchGuard System Manager 中的工按一何頁或對話方塊上的
[Help] (說明),了 解 Firebox 管理監視與安全功能的詳細資訊
Certications
6362
Firebox 重設為預設設定
若您需要,可以將 Firebox 還原為出廠預設值。例如,若您不知道系統管理員帳戶密碼,或是想
要以 RapidDeploy QuickStart (快速部署快速啟動) 重新開始,您可以重設裝置。
如需詳細資訊,請參閱 Firebox 硬體手冊,網址是:
www.watchguard.com/help/documentation/hardware.asp
Certications
6564
Hinweise Zur Sicherheit
Alle WatchGuard Produkte werden entwickelt und getestet, um strenge Sicherheitsanforderungen
zu erfüllen. Diese Anforderungen umfassen Produktsicherheit Zulassungen und andere globale
Compliance- Standards. Bitte lesen Sie die folgenden Anweisungen sorgfältig, bevor Sie das Produkt,
und bezeichnen sie als notwendig, um den sicheren Betrieb des Geräts zu gewährleisten. Weitere
Informationen nden Sie in der elektronischen Hardware Guide.
Die WatchGuard Produkt ist Sicherheit unter den folgenden Normen zertiziert:
CAN/CSA C22.2 No.60950-1-07, Second edition 2014-14
UL 60950-1, Second Edition 2014-10-14
IEC 60950-1:2005+A1:2009+A2:2013
EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013
Sicherheitshinweis
Legen Sie keine Gegenstände auf das Netzkabel.
Verdecken Sie nicht die Lüftungsönungen. Diese Önungen verhindern eine Überhitzung
der Maschine
Stecken Sie niemals Gegenstände jeglicher Art in die Schlitze oder Önungen des Geräts stecken.
Der Kontakt mit einem spannungsführenden Punkt oder das Kurzschließen eines Bauteils kann zu
einem Brand oder elektrischen Schlag führen.
Beim Entfernen oder Installieren eines Gerätes, nach den allgemeinen Installation
Sicherheitshinweise.
Notices:
All WatchGuard products are designed and tested to meet strict safety requirements. These
requirements include product safety approvals and other global compliance standards. Please read
the following instructions carefully before operating the product, and refer to them as needed to
ensure the continued safe operation of your product. Additional information can be found in the
Hardware Guide located on the WatchGuard website:
http://www.watchguard.com/help/documentation/hardware.asp
Product Safety Certication
The WatchGuard product is safety certied under the following standards:
CAN/CSA C22.2 No.60950-1-07, Second Edition 2014-10
UL 60950-1, Second Edition 2014-10-14
IEC 60950-1, 2005+A1:2009+A2:2013
EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013
Safety Warning
Do not place objects on the power cord.
Do not obstruct the ventilation openings. These openings prevent overheating of the machine.
Never push objects of any kind into slots or openings on this equipment. Making a contact with a
voltage point or shorting out a part may result in re or electrical shock.
When removing or installing an appliance, follow the general installation safety instructions.
You must disconnect the AC power cord from the Firebox before you remove the cover of the
Firebox for any reason.
There is risk of explosion if the battery is replaced by an incorrect type. Dispose of used batteries
according to the manufacturers instructions.
Disclaimer
WatchGuard shall not be held liable if the end user alters, modies, or repairs any WatchGuard
hardware appliance.
Certications
6766
Federal Communication Commission Interference Statement
Operations in the 5.15-5.25GHz band are restricted to indoor usage only. This equipment
has been tested and found to comply with the limits for a Class B digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential installation. This equipment
generates, uses and can radiate radio frequency energy and, if not installed and used in accordance
with the instructions, may cause harmful interference to radio communications. However, there
is no guarantee that interference will not occur in a particular installation. If this equipment does
cause harmful interference to radio or television reception, which can be determined by turning
the equipment o and on, the user is encouraged to try to correct the interference by one of the
following measures:
Reorient or relocate the device.
Increase the separation between the equipment and receiver.
Connect the equipment into an outlet on a circuit dierent from that to which the receiver
is connected.
Consult the dealer or an experienced radio/TV technician for help.
FCC Caution: Any changes or modications not expressly approved by the party responsible for
compliance could void the users authority to operate this equipment.
Operation is subject to the following two conditions: (1) This device may not cause harmful
interference, and (2) this device must accept any interference received, including interference that
may cause undesired operation.
IMPORTANT NOTE:
FCC Radiation Exposure Statement: (Wireless)
This equipment complies with FCC radiation exposure limits set forth for an uncontrolled
environment. This equipment should be installed and operated with minimum distance 20cm
between the radiator & your body. This transmitter must not be co-located or operating in
conjunction with any other antenna or transmitter.
Aviso De Seguridad
Todos los productos WatchGuard están diseñados y probados para satisfacer estrictos requisitos de
seguridad. Estos requisitos incluyen la homologación de productos de seguridad y otras normas
de cumplimiento global. Por favor, lea atentamente las siguientes instrucciones antes de utilizar
el producto, y se reeren a ellos como sea necesario para garantizar el funcionamiento seguro
y continuo de su producto. Información adicional se puede encontrar en la Guía del usuario
electrónica.
Certicación de seguridad del producto
El producto tiene certicación de seguridad WatchGuard bajo las siguientes normas:
CAN/CSA C22.2 No.60950-1-07, Second edition 2014-14
UL 60950-1, Second Edition 2014-10-14
IEC 60950-1:2005+A1:2009+A2:2013
EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013
Advertencia de seguridad
No coloque objetos sobre el cable de alimentación.
No obstruya las aberturas de ventilación. Estas aberturas evitan el sobrecalentamiento de
la máquina.
Nunca introduzca objetos de ningún tipo en las ranuras o aberturas del equipo. El contacto
con puntos de voltaje o el cortocircuito de una pieza podría provocar un incendio o una descarga
eléctrica.
Al extraer o instalar un electrodoméstico, siga las instrucciones generales de instalación
de seguridad.
CE Notice:
The CE symbol on your WatchGuard Technologies equipment indicates that it is in
compliance with the Electromagnetic Compatibility (EMC) directive and the Low Voltage
Directive (LVD) of the European Union (EU).
Certications
6968
RoHS Statement
The member states of the European Union approved directive 2002/95/EC, Restrictions of Hazardous
Substances (“RoHS directive”‘) that became valid on July 1, 2006. It states that all new electrical
and electronic equipment put on the market within the member states must not contain certain
hazardous materials. This device complies with the European Unions R0HS directive 2002/95/EC and
similar regulations that may be adopted by other countries for European Sales.
WEEE Statement
WEEE is a general set of requirements dictated in the EU Directive 2002/96/EC. This Directive
mandated that member EU countries enact regulations governing the Waste of Electrical and
Electronic Equipment (WEEE). The Directive, and its individual transpositions into specic country
laws and legislation, is aimed at the reduction of WEEE through reuse, recovery, and recycling
of WEEE.
WatchGuard is working in partnership with our European Union (EU) distribution partners to ensure
that our products are in compliance with the WEEE statutes, and that the recovery of our product per
the specic EU country legislative requirements is seamless for our product’s end users. If you have a
WatchGuard product that is at its end of life and needs to be disposed of, please contact WatchGuard
Customer Care Department at:
U.S. Customers: 877.232.3531 International Customers: +1.206.613.0456
WatchGuard is reasonably condent that our products do not contain any substances or hazardous
materials presently banned by any legislation, and do not present a risk due to hazardous materials.
WEEE recovery professionals should also note that these products do not have any materials that are
of particular high value in their individual form.
REACH
The new EU chemicals policy REACH (Registration, Evaluation, Authorization and restriction of
Chemicals) came into eect on June 1, 2007. REACH is Europes new chemicals legislation, which
is applicable in all 27 EU Member States as well as the EFTA European Economic Area (EEA).
REACH creates a new system for gathering information, assessing risks to human health and the
environment, and authorizing or restricting the marketing and use of chemicals produced or
Europe – EU Declaration of Conformity (Wireless)
This device complies with the essential requirements of the RED 2014/53/EU. The following test
methods have been applied in order to prove presumption of conformity with the essential
requirements of the RED 2014/53/EU:
EN 60950-1 - Safety of Information Technology Equipment
EN 50385 - Generic standard to demonstrate the compliance of electronic and electrical apparatus
with the basic restrictions related to human exposure to electromagnetic elds (0 Hz - 300 GHz)
EN 300 328 - Electromagnetic compatibility and Radio spectrum Matters (ERM); Wideband
Transmission systems; Data transmission equipment operating in the 2,4 GHz ISM band and using
spread spectrum modulation techniques; Harmonized EN covering essential requirements under
article 3.2 of the RED Directive
EN 301 893 - Broadband Radio Access Networks (BRAN); 5 GHz high performance RLAN; Harmonized
EN covering essential requirements of article 3.2 of the RED Directive
EN 301 489-1 - Electromagnetic compatibility and Radio Spectrum Matters (ERM); ElectroMagnetic
Compatibility (EMC) standard for radio equipment and services; Part 1: Common technical
requirements
EN 301 489-17 - Electromagnetic compatibility and Radio spectrum Matters (ERM); ElectroMagnetic
Compatibility (EMC) standard for radio equipment and services; Part 17: Specic conditions for 2.4
GHz wideband transmission systems and 5 GHz high performance RLAN equipment
This device is a 5GHz wideband transmission system (transceiver), intended for use in all EU member
states and EFTA countries, except in France and Italy where restrictive use applies.
In Italy the end-user should apply for a license at the national spectrum authorities in order to obtain
authorization to use the device for setting up outdoor radio links and/or for supplying public access
to telecommunications and/or network services.
This device may not be used for setting up outdoor radio links in France and in some areas the
RF output power may be limited to 10 mW EIRP in the frequency range of 2454 – 2483.5 MHz. For
detailed information the end-user should contact the national spectrum authority in France.
Certications
7170
supplied in the EEA. REACH has an impact on EEA producers and importers of nished products and
users of chemicals in the course of industrial or professional activities.
WatchGuard supports the overall REACH objective of improving the protection of human health
and the environment and will meet all applicable REACH requirements. WatchGuard is strongly
committed to working with our customers and supply chain to dene and implement the REACH
requirements and ensure a smooth transition to compliance.
One of the REACH requirements is that manufacturers and importers have the duty to register
substances they are producing or importing. In accordance with the regulations, the products of
WatchGuard do not need to be registered for the following reasons:
WatchGuard does not import more than 1 metric ton per year of a substance as dened by REACH.
WatchGuard products are non-chemical products that are not designed to release any substance
under normal and reasonably predictable application.
Our products do not contain the listed substances at more than 0.1% by weight of the whole
product/part.
Industry Canada statement:
This device complies with RSS-247 of the Industry Canada Rules. Operation is subject to the following
two conditions: (1) This device may not cause harmful interference, and (2) this device must accept
any interference received, including interference that may cause undesired operation. CAN ICES-
3(B)/NMB-3(B)
Ce dispositif est conforme à la norme CNR-247 d’Industrie Canada applicable aux appareils radio
exempts de licence. Son fonctionnement est sujet aux deux conditions suivantes: (1) le dispositif ne
doit pas produire de brouillage préjudiciable, et (2) ce dispositif doit accepter tout brouillage reçu, y
compris un brouillage susceptible de provoquer un fonctionnement indésirable.
Caution: (Wireless)
The device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for
harmful interference to co-channel mobile satellite systems;
Avertissement:
Les dispositifs fonctionnant dans la bande 5150-5 250 MHz sont réservés uniquement pour une
utilisation à l’intérieur an de réduire les risques de brouillage préjudiciable aux systèmes de satellites
mobiles utilisant les mêmes canaux;
For Mobile Device Usage (Wireless)
Radiation Exposure Statement:
This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment.
This equipment should be installed and operated with minimum distance 20cm between the
radiator & your body.
Déclaration dexposition aux radiations:
Cet équipement est conforme aux limites d’exposition aux rayonnements IC établies pour un
environnement non contrôlé. Cet équipement doit être installé et utilisé avec un minimum de 20cm
de distance entre la source de rayonnement et votre corps.
France (Wireless)
Les dispositifs fonctionnant dans la bande 5150-5250 MHz est réservé à une utilisation en intérieur
pour réduire le risque de brouillage préjudiciable aux systèmes mobiles par satellite utilisant les
mêmes canaux;
Japan VCCI Notice (Class A ITE)
れはVCCI評議会の基準に基づA製品です本製品がジオやテレビ受信機の近で使用
場合は、電波障害を引き起があますール取扱説明書に従
機器を使用てい     VCCI-A
72
Certications
73
Taiwan Class A Notice:
警告使用者:這是甲類產品,應使用並正確安裝。本產品可能會造成無線電干擾,在這種情況
下,用戶可能需要採取適當的措施。
警示 本電池如果更換不正確會有爆炸的危險,請勿自行更換電池
設備名稱:
網路伺服器 型號(型式):
MS3AE5,MS3AE5W,MS5AE5,MS5AE5W
單元nit
限用物質及其化學符號
Lead
(Pb)
Mercury
(Hg)
Cadmium
(Cd)
六價鉻
Hexavalent
chromium
(Cr+6)
多溴聯苯
Polybrominated
biphenyls
(PBB)
多溴二苯醚
Polybrominated
diphenyl ethers
(PBDE)
電路板總成
PCBA
電源供應器
Power
Supply
金屬機構件
ME metal
part
塑膠機構件
ME plastic
part
配件(
:
電源線等
)
Accessory
(cable, etc.)
備考1.〝超出0.1 wt %〞及〝超出0.01 wt %〞係指限用物質之百分比含量超出百分比含量基準
值。
備考2.〝○〞係指該項限用物質之百分比含量未超出百分比含量基準值。
備考3.〝-〞係指該項限用物質為排除項目。
Note 1
“Exceeding 0.1 wt %” and “exceeding 0.01 wt %” indicate that the percentage content of the restricted substance exceeds the
reference percentage value of presence condition.
Note 2
” indicates that the percentage content of the restricted substance does not exceed the percentage of reference value of presence.
Note 3The” indicates that the restricted substance corresponds to the exemption.
Equipment name
Type designation (Type)
Restricted substances and its chemical symbols
Taiwan NCC
低功率電波輻射性電機管理辦法
第十二條 經型式認證合格之低功率射頻電機 , 非經許可 , 公司﹑商號或使用者均不得擅自變更頻
率﹑ 加大功率或變更原設計之特性及功能。
第十四條 低功率射頻電機之使用不得影響飛航安全及干擾合法通信;經發現有干擾現象時 , 應立
即停 用 , 並改善至無干擾時方得繼續使用。前項合法通信 , 指依電信法規定作業之無線電通信。
低功率射頻電機須忍受合法通信或工業、科學及醫療用電波輻射性電機設備之干擾。
電磁波曝露量MPE標準值(MPE) 1mW/cm2,送測產品實值為0.338 mW/cm2
無線資訊傳輸設備避免影響附近雷達系統之操作
Mexico Notice:
La operación de este equipo está sujeta a las siguientes dos condiciones:
(i) es posible que este equipo o dispositivo no cause interferencia perjudicial y
(ii) este equipo o dispositivo debe aceptar cualquier interferencia, incluyendo la que pueda causar su
operación no deseada.
74 75
DeclarationofConformity
WatchGuard Technologies, Inc.
505 Fifth Ave. S., Suite 500
Seattle, WA 98104 USA
WatchGuard Technologies Inc. hereby declares that the product(s) listed below conform to the
European Union directives and standards identified in this declaration.
Product (s):
WatchGuard Model: Firebox T55-W and Firebox T55, Hardware Model: MS5AE5WandMS5AE5
EU Directive(s):
Low Voltage (2006/95/EC)
Electromagnetic Compatibility (2004/108/EC)
RoHS (2002/95/EC)
WEEE Directive 2002/96/EC
REACH EC 1907/2006
The Radio Equipment Directive (2014/53/EU)
Common Standard(s):
EN 60950-1:2006+A11+A1+A12 Safety for ITE
EN55032:2012/AC:2013
Class A Emissions for ITE
EN 55024:2010
Immunity for ITE
EN 50385:2002
EN 61000-3-2:2014 Class A
EN 61000-3-3:2013
EN 61000-4-2:2009
EN 61000-4-3:2006+A1:2008+A2:2010
EN 61000-4-4:2012
EN 61000-4-5:2014
EN 61000-4-6:2014
EN 61000-4-11:2004
Wireless Standard(s):
EN 301 489-1 v2.1.1 EMC and Radio Spectrum Matters
EN 301 489-17 v3.1.1 EMC and Radio Spectrum Matters
EN 300 328 v2.1.1 Radio Spectrum Matters
EN 301 893 v2.2.1 Broadband Radio Access Networks
This device complies with Directive 2014/53/EU issued by the Commission of the European Community.
Manufacturer / Hersteller: WatchGuard Technologies
505 5th Ave S. Suite 500, Seattle, WA 98104 USA
Radio Equipment / Funkanlage: Wireless Access Point
Type Designation / Typenbezeichnung: Firebox T55-W and Firebox T55
Specifications / Technische Daten: 802.11a,b,g,n,ac (2.4Ghz & 5GHz)
Intended Purpose / Verwendungszweck: Indoor Access Point
Equipment Class / Betriebsmittel der Klasse: Class II
The above device complies with the essential requirements and other relevant provisions to Directive
2014/53/EU when used for its intended purpose. This equipment may be operated in the USA, Canada, & Europe
Union.
Warning! This is a Class A product. In a domestic environment this product may cause radio interference in which
case the user may be required to take adequate measures.
The frequency and maximum transmitted power limit in EU are listed as belows,
2412 - 2472 MHz: 20 dBm
5150 - 5350 MHz: 20 dBm
Restrictions: France les dispositifs fonctionnant dans la bande 5150-5250 MHz sont réservés uniquement pour une
utilisation à l’intérieur afin de réduire les risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant
les mêmes canaux
Warnung! Dies ist eine Einrichtung der Klasse A. Diese Einrichtung kann im Wohnbereich Funkstörungen
verursachen. In diesem Fall kann vom Betreiber verlangt werden, angemessene Maßnahmen durchzuführen
Einschränkungen: FrankreichGeräte, die im Band 5150-5250 MHz ist nur für den Innenbereich, um das Risiko
von Störungen des mobilen Satelliten-Systeme, die die gleichen Kanäle
Signature

Full Name: Laurence Huang
Position:
Manufacturing Program Manager Date: July 21
7776
Limited Hardware Warranty
This Limited Hardware Warranty (the Warranty”) applies to the enclosed hardware product, not including any
associated software, which is licensed pursuant to a separate end-user license agreement and warranty (the
“Product”). BY USING THE PRODUCT, YOU (either an individual or a single entity) AGREE TO THE TERMS HEREOF.
If you do not agree to these terms, please return this package, along with proof of purchase, to the authorized
dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc. (“WatchGuard”) and you agree
as set forth below or on the reverse side of this card, as applicable.
1. LIMITED WARRANTY. WatchGuard warrants that upon delivery and for one (1) year thereafter (the Warranty
Period”): (a) the Product will be free from material defects in materials and workmanship, and (b) the Product,
when properly installed and used for its intended purpose and in its intended operating environment, will
perform substantially in accordance with WatchGuard applicable specications.
This warranty does not apply to any Product that has been: (i) altered, repaired or modied by any party
other than WatchGuard except for the replacement or inclusion of specied components authorized in, and
performed in strict accordance with, documentation provided by WatchGuard; or (ii) damaged or destroyed
by force majeure events, accidents, power spikes or similar events or by any intentional, reckless or negligent
acts or omissions of any party. You may have additional warranties with respect to the Product from the
manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby release
WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on account of,
any such warranties or any breach thereof.
2. REMEDIES. If any Product does not comply with the WatchGuard warranties set forth in Section 1 above,
WatchGuard will, following the receipt of the product you claim is defective and at its option, either (a) repair
the Product, or (b) replace the Product with a like or similar product; provided, that you will be responsible
for returning the Product and for all costs of shipping and handling. Repair or replacement of the Product
shall not extend the Warranty Period. Any Product, component, part or other item replaced by WatchGuard
becomes the property of WatchGuard. WatchGuard shall not be responsible for return of or damage to any
software, rmware, information or data contained in, stored on, or integrated with any returned Products.
3. DISCLAIMER AND RELEASE. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD, AND YOUR
REMEDIES, SET FORTH IN PARAGRAPHS 1 AND 2 ABOVE ARE EXCLUSIVE AND IN SUBSTITUTION FOR, AND YOU
HEREBY WAIVE, DISCLAIM AND RELEASE ANY AND ALL OTHER WARRANTIES, OBLIGATIONS AND LIABILITIES
OF WATCHGUARD AND ALL OTHER RIGHTS, CLAIMS AND REMEDIES YOU MAY HAVE AGAINST WATCHGUARD,
EXPRESS OR IMPLIED, ARISING BY LAW OR OTHERWISE, WITH RESPECT TO ANY NONCONFORMANCE OR
DEFECT IN THE PRODUCT (INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY
OR FITNESS FOR A PARTICULAR PURPOSE, ANY IMPLIED WARRANTY ARISING FROM COURSE OF
PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, ANY WARRANTY OF NONINFRINGEMENT, ANY
WARRANTY OF UNINTERRUPTED OR ERROR-FREE OPERATION, ANY OBLIGATION, LIABILITY, RIGHT, CLAIM
OR REMEDY IN TORT, WHETHER OR NOT ARISING FROM THE NEGLIGENCE (WHETHER ACTIVE, PASSIVE OR
IMPUTED) OR FAULT OF WATCHGUARD OR FROM PRODUCT LIABILITY, STRICT LIABILITY OR OTHER THEORY,
AND ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY FOR LOSS OR DAMAGE TO, OR CAUSED BY OR
CONTRIBUTED TO BY, THE PRODUCT).
4. LIMITATION AND LIABILITY. WATCHGUARDS LIABILITY (WHETHER ARISING IN CONTRACT (INCLUDING
WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT)
OR OTHER THEORY) WITH REGARD TO ANY PRODUCT WILL IN NO EVENT EXCEED THE PURCHASE PRICE PAID
BY YOU FOR SUCH PRODUCT. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED
REMEDY. IN NO EVENT WILL WATCHGUARD BE LIABLE TO YOU OR ANY THIRD PARTY (WHETHER ARISING IN
CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND
STRICT LIABILITY AND FAULT) OR OTHER THEORY) FOR COST OF COVER OR FOR ANY INDIRECT, SPECIAL,
INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOSS OF PROFITS, BUSINESS,
OR DATA) ARISING OUT OF OR IN CONNECTION WITH THIS WARRANTY OR THE USE OF OR INABILITY TO USE
THE PRODUCT, EVEN IF WATCHGUARD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THIS
SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY.
5. MISCELLANEOUS PROVISIONS. This Warranty will be governed by the laws of the state of Washington,
U.S.A., without reference to its choice of law rules. The provisions of the 1980 United Nations Convention
on Contracts for the International Sales of Goods, as amended, shall not apply. You agree not to directly or
indirectly transfer the Product or use of the product or associated documentation to any country to which
such transfer would be prohibited by the U.S. Export laws and regulations. If any provision of this Warranty
is found to be invalid or unenforceable, then the remainder shall have full force and eect and the invalid
provision shall be modied or partially enforced to the maximum extent permitted by law to eectuate the
purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the Product,
and supersedes any prior purchase order, communications, advertising or representations concerning the
Product AND BY USING THE PRODUCT YOU AGREE TO THESE TERMS. IF THE PRODUCT IS BEING USED BY AN
ENTITY, THE INDIVIDUAL INDICATING AGREEMENT TO THESE TERMS BY USING THE PRODUCT REPRESENTS
AND WARRANTS THAT (A) SUCH INDIVIDUAL IS DULY AUTHORIZED TO ACCEPT THE WARRANTY ON BEHALF
OF THE ENTITY AND TO BIND THE ENTITY TO THE TERMS OF THIS WARRANTY; (B) THE ENTITY HAS THE FULL
POWER, CORPORATE OR OTHERWISE, TO ENTER INTO THE WARRANTY AND PERFORM ITS OBLIGATIONS
UNDER THE WARRANTY AND; (C) THE WARRANTY AND THE PERFORMANCE OF THE ENTITY’S OBLIGATIONS
UNDER THE WARRANTY DO NOT VIOLATE ANY THIRD-PARTY AGREEMENT TO WHICH THE ENTITY IS A PARTY.
No change or modication of the Warranty will be valid unless it is in writing and is signed by WatchGuard.
ADDRESS: 505 Fifth Avenue South, Suite 500, Seattle, WA 98104
WEB: www.watchguard.com • U.S. SALES: 1.800.734.9905 • INTERNATIONAL SALES: +1.206.613.0895
1.877.232.3531
(U.S. and Canada)
WATCHGUARD TECHNICAL SUPPORT
+1.206.613.0456
(all other countries)
www.watchguard.com/support
© 2017 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard Logo, Fireware,
and LiveSecurity are registered trademarks of WatchGuard Technologies, Inc. in the United States and/or
other countries. All other trademarks and tradenames are the property of their respective owners.
P.N.352-T550-001_082617 Rev A

Navigation menu