Avaya FireWall-1 Manual do Utilizador

Part No. 116751-A Rev. AMay 1997Router Software Version 11.02Site Manager Software Version 5.02 Configuring BaySecure FireWall-1

Configuring BaySecure FireWall-1x 116751-A Rev. A Conventions angle brackets (< >) Indicate that you choose the text to enter based on the desc

About This Guide 116751-A Rev. A xi Ordering Bay Networks Publications To purchase additional copies of this document or other Bay Networks publicat

Configuring BaySecure FireWall-1xii 116751-A Rev. A How to Get Help If you purchased a service contract for your Bay Networks product from a distribu

116751-A Rev. A 1-1 Chapter 1BaySecure FireWall-1 BaySecure™ FireWall-1 integrates version 2.1 of Check Point Software Technologies Ltd™ FireWall-1™

Configuring BaySecure FireWall-11-2 116751-A Rev. A To configure a firewall on a router, see the following sections:• Obtaining a FireWall-1 License on

BaySecure FireWall-1 116751-A Rev. A 1-3 Refer to the section “Installing and Running the FireWall-1 Management Software ” and the Check Point docum

Configuring BaySecure FireWall-11-4 116751-A Rev. A For SunOS lab# mount -r -t hsfs /dev/sr0 /cdrom lab# cd /tmp lab# tar xvf /cdrom/sunos4/fw1

BaySecure FireWall-1116751-A Rev. A 1-5 Sample Installation The following sample installation takes the Check Point FireWall-1 software from a CD-ROM

Configuring BaySecure FireWall-11-6 116751-A Rev. ASoftware distribution extraction--------------------------------Extracting software distribution. P

BaySecure FireWall-1116751-A Rev. A 1-7 Configuring Remote Modules...=============================Remote Modules are FireWall or Inspection Modules th

ii 116751-A Rev. A4401 Great America Parkway 8 Federal StreetSanta Clara, CA 95054 Billerica, MA 01821 Copyright © 1988–1997 Bay Networks, Inc. All r

Configuring BaySecure FireWall-11-8 116751-A Rev. ADo you wish to start FW-1 now (y/n) [y] ? n********************************************************

BaySecure FireWall-1116751-A Rev. A 1-9 Installing a License on the Management StationTo install a license on the management station, use the followin

Configuring BaySecure FireWall-11-10 116751-A Rev. AStarting the FireWall-1 GUITo start the FireWall-1 GUI, enter the fwui& command. For example,

BaySecure FireWall-1116751-A Rev. A 1-11 Figure 1-1. Choose Destination Location Window2.Choose a destination directory. For this sample installation,

Configuring BaySecure FireWall-11-12 116751-A Rev. A4. Choose the FireWall-1 component you want to install. To be compatible with BaySecure FireWall-1

BaySecure FireWall-1116751-A Rev. A 1-13 The Administrators window (Figure 1-4) opens. Figure 1-4. Administrators Window You must specify at least one

Configuring BaySecure FireWall-11-14 116751-A Rev. A10. Click on Next.The GUI Clients window opens. Do not enter GUI clients at this time.11. Click on

BaySecure FireWall-1116751-A Rev. A 1-15 The CA Key window opens (Figure 1-7).Figure 1-7. CA Key Window15.Click on Generate to generate a new key.The

Configuring BaySecure FireWall-11-16 116751-A Rev. AFigure 1-8. Choose Destination Location WindowFor this sample installation, accept the default dir

BaySecure FireWall-1116751-A Rev. A 1-17 4.Install the Security Policy, System Status, and Log Viewer components by clicking on each item.Customizing

116751-A Rev. A iii Bay Networks Software License This Software License shall govern the licensing of all software provided to licensee by Bay Netw

Configuring BaySecure FireWall-11-18 116751-A Rev. ABegin by starting Site Manager. Then follow these steps:1. Select Configuration Manager in either l

BaySecure FireWall-1116751-A Rev. A 1-19 5.To enable the firewall, select Protocols > Global Protocols > FWALL > Global. The F.W. Global windo

Configuring BaySecure FireWall-11-20 116751-A Rev. AThe F.W. Router Parameters window opens (Figure 1-12).Figure 1-12. F.W. Router Parameters Window8.

BaySecure FireWall-1116751-A Rev. A 1-21 Parameter: Local Host IP Address Default: 0.0.0.0 Options: Any valid IP address Function: Shows the IP addre

Configuring BaySecure FireWall-11-22 116751-A Rev. AWhen you click on OK, a message box opens, confirming that you are enabling the firewall on all inte

BaySecure FireWall-1116751-A Rev. A 1-23 The Boot Router window opens (Figure 1-14).Figure 1-14. Boot Router Window2.Specify the correct volume and bo

Configuring BaySecure FireWall-11-24 116751-A Rev. AYou must define a security policy that explicitly defines acceptable communication to the router, ba

116751-A Rev. A Index-1 Aactivating FireWall-1, 1-22addingadministrators, 1-8groups, 1-8GUI clients, 1-8, 1-17license, 1-8, 1-17remote modules, 1-8, 1

Index-2 116751-A Rev. Aoptions, 1-4sample, 1-5, 1-10installing management software, 1-4Llicenseadding, 1-8, 1-17installing on management station, 1-9o

iv 116751-A Rev. A Bay Networks Software License (continued) 9. Licensee shall not reverse assemble, reverse compile, or in any way reverse enginee

116751-A Rev. A v Contents About This Guide Before You Begin ...

vi 116751-A Rev. A Configuring a FireWall Security Policy ...1-23Installing th

116751-A Rev. A vii Figures Figure 1-1. Choose Destination Location Window ...1-11Figure 1-2. Select

116751-A Rev. A ix About This Guide If you are responsible for network security, you need to read this guide to learn about BaySecure FireWall-1, an