Multi-Tech Systems RF600 manual

RF7 60/ 660/ 600VPN Inter net Securit y Applianc e User Guide[...]

Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 2 User Guide RouteFinder RF760/660/60 0VPN S000323D Revision D This publication may not be repro duced, in whole or in part, without prior expressed written permission from Multi-Tech Systems, Inc. All rights reserved. Copyright © 2005 by Multi-Tech Systems, Inc. Mu[...]

Table of Contents Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 3 Contents Chapter 1 – Product Descripti on, Features, and Overview............................................................................... 7 Product Descr iption .............................................................................[...]

Table of Contents Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 4 Chapter 6 – RouteF inder Software ............................................................................................... ..................... 42 Menu Ba r ................................................................................[...]

Table of Contents Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 5 Packet F ilters ................................................................................................................. ................................................ 101 Packet Filters > Packe t Filter Rules .......................[...]

Table of Contents Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 6 X. Fragmented Dropped Log ...................................................................................................... ................................... 147 XI. ICMP In formati on .......................................................[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 7 Chapter 1 – Product Description, Features, and Overview Your Multi-Tech Systems, Inc. RouteFin der Internet security appl iance is an in tegrated VPN gateway/firewall designed to maximize network security[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 8 Feature Highlights RouteFinder A p plications. The RouteFinder combines Virtual Private Ne tworking (VPN), firewall, e-mail anti-virus protection, and content filtering in one box. It is a cost-effective, e[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 9 E-mail Anti-Virus Protection. Computer viruses are one o f the leading secu rity threats to Internet-connected net works. Users can unknowingl y download and launch dan gerous viruses t hat can dama ge data[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 10 License Keys System License Key Each RouteFinder VPN ships with a uniq ue individual system License Ke y, a 20-digit alphanumeric number. You can enter and view License Ke y information from the RouteFinde[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 11 Safety Warnings Lithium Battery Caution Danger of explosion if battery is incorrectly r eplaced. A lithium battery on the RouteFinder VPN PC boar d provides backup power for the time-keeping capabi lity. T[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 12 RouteFinder Front Panels RF760/660VPN Front Panel The R760VPN and the RF660 VPN have 16 LEDs that show device an d network operating status. For the RF760VPN, these LEDs are labe led 10/100/1G. • When 10[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 13 RF600VPN The RF600VPN has 12 front panel LEDs th at show the network operating status. General LED Descriptions POWER POWER LED - Off when the RF600VPN is in a re set state. When the POWER LED is lit, the [...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 14 RouteFinder Back Panels RF760VPN Back Panel The RF760VPN back panel h as three fans, a power plug, a POWER Switch ( | / O ), an RJ-11 LINE jack, a DB-9 COM1 jack, a DB-15 High-densit y DSUB ( VIDEO ) jack,[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 15 Specifications Appliance Features RF760VPN RF660VPN RF600VPN Ethernet Ports 3x10/100/1000BaseT (LAN,WAN, DMZ) 3x10/100BaseT (LAN,WAN, DMZ) 3x10/100BaseT (LAN,WAN, DMZ) Number of Netw ork Users Unlimited Un[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 16 Power & Physical Description RF760VPN RF660VPN RF600VPN Power - Voltage & Frequency 100-240v AC, 50-60 Hz 100-240v AC, 50-60 Hz 100- 240v AC, 50-60 Hz Power Consumption 50 Watts 30 Watts 15 Watts P[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 17 Overview of RouteFinder VPN Technology Before we look at how the RouteFinder works and how to use i t, we will illustrate why the RouteFinder is necessary for the protection of networks, as well as show wh[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 18 The great advantage of a network layer fir ewall is it s independenc e of both the operating system and the applications running on the machi ne. In more complex network layer fire wall implementations, th[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 19 To satisfy today’s business world needs, the IT infrastr ucture must offer real-time communication and co-operate closely with business partners , consul tants, and branches. Increasing ly, th e demand f[...]

Chapter 1 – Product Description, Features, and Overvie w Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 20 Typical Applications Remote User VPN The client-to-LAN VPN applic ation replaces traditional dial-in remote access by allowing a remote user to connect to the corporate LAN through a secure tunnel over the[...]

Chapter 2 – Installation Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 21 Chapter 2 – Installation Pre-Installation Planning Planning and Establis hing the Corporate Security Policy Having an organization- wide security polic y is the first, and per haps most, important step in general s ecurity planning. Or[...]

Chapter 2 – Installation Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 22 Planning the Network Before installing, you should plan your network and dec ide wh ich computer is to have access to which services. T his simplifies configuration and s aves you a lot of time that you would other wise need for correcti[...]

Chapter 2 – Installation Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 23 Installation Overview RouteFinder VPN installation is divid ed into four steps: 1. Hardware installation 2. Cabling 3. Software initial configuration 4. RouteFinder configuratio n Hardware Installation Procedure The RouteFinder VPN is de[...]

Chapter 2 – Installation Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 24 Setting up a Workstation and Starting the RouteFinder VPN This section of the Quick Start Guide covers the steps for se tting up a workstation that is connected to the RouteFinder VPN, starting up the RouteFinder VPN, open in g the Route[...]

Chapter 2 – Installation Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 25 Login 8. The Login scre en is displayed . • Type the default User name: admin (all lower-case). • Tab to the Password field and type the d efault password: admin (all lo wer-case). • Click the Login button. Note: The User name and [...]

Chapter 2 – Installation Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 26 Navigating Through the Screens Before using the software, you may find the following inform ation about na vigating the screens and the s tructuring of the menus helpful. The Web Management Screen Menu Bar Sub Menu Screen Buttons Screen [...]

Chapter 2 – Installation Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 27 Sub-Menu Each item on the Menu Bar has its own sub-menu which displa ys on the left side of the screen. When you click one of the Me nu Bar buttons, the screen that di splays is the first sub-menu option. You c an choose other sub-menu s[...]

Chapter 3 – Configuration Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 28 Chapter 3 – Configuration Initial Configuration Step Set Up Your Time Zone Click Administration on the menu bar. The System Setup screen displays. Set the following: • Set System Time by selecting your Time Zone • Set the current [...]

Chapter 3 – Configuration Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 29 Second Configuration Step Using the Wizard Setup is a quick way to enter the basic configuration parameters to allo w communication bet ween the LAN’s workstation(s) and the Internet as sh own in the example b elow. Important Note: An[...]

Chapter 3 – Configuration Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 30 The Wizard Setup Screen Click on the Wizard Setup button. The following screen dis plays. 1. Enter your Administrator Email Address (can be anything). Example: admin@yourdom ain.com 2. Enter your Hostname for the RouteFinder (can be an [...]

Chapter 4 – Configuration Ex amples Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 31 Chapter 4 – Configuration Examples Example 1 – LAN-to-LAN VPN (Branch Office) The setup for a LAN-to-LAN VPN (branch office) requ ires two RF660VPNs - one in the home office and one in the remote branch office. It requires[...]

Chapter 4 – Configuration Ex amples Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 32 Setup Networks & Services Site A Configuration on t he RouteFinder VPN in the Home Office To configure your RouteFind er VPN in the home office in pr eparation for connection to a re mote branch office, click the Networks [...]

Chapter 4 – Configuration Ex amples Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 33 Set Packet Filters Site A Configuration: Rout eFinder VPN in the Home Office Establish remote access filtering: click on Packet Filters > Pack et Filter Rules . 1. For the Remote L AN at the branch office to access the Rout[...]

Chapter 4 – Configuration Ex amples Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 34 Set VPN IPSec Protocol Site A Configuration: Rout eFinder VPN in the Home Office Establish an IPSec Protocol for your remote branch office ac cess: click on VPN > IPSec . 1. Check the VPN Status box, and then click Save . 2[...]

Chapter 4 – Configuration Ex amples Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 35 3. Enter the following information in order to es tablish an IPSec IKE connection. • Enter a Connection name . (Ex ample: SiteA) • Place a checkmark in the box to enabl e Perfect Forw ard Secrecy . • Select Secret for th[...]

Chapter 4 – Configuration Ex amples Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 36 Example 2 – Remote Client-to-LAN VPN Configuration The VPN function to setup your RouteFi nder so that your network allows a remote client to have access to the LAN through a secure tunnel on the Internet. Your RouteFinder i[...]

Chapter 4 – Configuration Ex amples Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 37 Example 3 – Remote Client-to-LAN Configuration Using DNAT and Aliasing Use this procedure to configure the RF 660VPN with DNAT and Al iasing. T his configuration allo ws a Windows 2000 Remote Client to Telnet through the RF6[...]

Chapter 4 – Configuration Ex amples Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 38 Example 4 – Client-to-LAN Configuration Using PPTP Tunneling Use this procedure to configure the RF660V PN as a PPTP se rver for VPN Remote Client Access (aka, PPT P Roadwarrior configuration). ( Note : IPX and Netbeui not s[...]

Chapter 5 – URL Categorization Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 39 Chapter 5 – URL Categorization The Universal Resource Loc ator (URL) Categorization L icense Ke y allows you to set up a URL databas e that limits clients’ access to places on the Internet by blocking sites you do not wa nt acc[...]

Chapter 5 – URL Categorization Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 40 • Go to the Administration > License Ke y screen to enter your URL Lice nse Key. This is a required in or der to use this feature. • Click the Open button across from URL Categorization License Key . The Administration > [...]

Chapter 5 – URL Categorization Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 41 • The URL Categories screen displ ays. You can use this screen to allo w or block Web sites from users. • Use the Allow and Filter buttons to move a URL Cat egory from the URL Categories Allow ed list to the URL Categories Filt[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 42 Chapter 6 – RouteFinder Software This chapter describes each screen and its function in the RouteFinder VPN soft wa re. The aim of the administrator in setting the options in the software should be to let as little as possible [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 43 Administration > System Se tup Administration Administration > System Setup In the A dminis tration part of the software, you can set the RouteFinder g eneral system-based parameter s. System Setup includes general s ystem [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 44 Administration > System Setup Configure Email Notifications the RouteFinder VPN Will Send Select the types of notifications that you want sent. Click the Add button. The name will then appear in the Send Email Notification For[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 45 Administration > SSH Administration > SSH What Is SSH SSH (Secure Shell) is a program to log into another computer over a net work to execute commands in a remote machine and to move files from one machine to another. It pr[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 46 Administration > SNTP Client Administration > SNTP Client SNTP (Simple Network Time Protocol) is an internet protocol used to synchronize the clo cks of computers on the net work. Clicking the SNTP Client che ck box enables[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 47 Administration > Ad ministrative Access Administration > Administrative Access The networks and hosts that are allo wed to have administrative access are selected on t his screen. This is a good way to regulate access to th[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 48 Administration > Ad ministrative Access Change Password You should change the password imme diately after init ial install ation and configur ation, and also chang e it regularly thereafter. T o change the pas s word, enter th[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 49 Administration > Site Certificate Administration > Site Certificate Public keys are used as the encryptio n algorithm for security sy stems. For the validity of pub lic keys, certificates are issued by a Certificate Authori[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 50 Administration > Li cense Key Administration > License Key The system license key, virus scanner licens e key, and the URL Categoriz ation engine lic ense key can be configured from this screen. Notes: • Each RouteFinder [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 51 Administration > Intruder De tection Administration > Intrusion Detection The Intrusion Detection mechan ism notifies the administrator if there has bee n any tampering with the files on the server. Intrusion Detection Enab[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 52 Administration > Tools Administration > Tools There are three tools that can help yo u test the network connections and R outeFinder functionalit y. Ping and Trace Rou te test the network connections on the IP level. TCP Co[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 53 Administration > Tools Trace Route Trace Route is a tool for finding errors in the net work routing. It lists each router’s addresses on the way to remote systems. If the path for the data packets is tem porarily unavai labl[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 54 Administration > System Sc heduler Administration > Factory De faults Administration > System Scheduler The System Scheduler is a module built into the RouteFinder that schedul es the tracking or checking of the followin[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 55 Administration > User Auth entication > Local Users Administration > User Authentication > Local Use rs In this part of the software enter local users and define their access to various proxies. External user database[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 56 Administration > User Auth entication > RADIUS & SAM Administration > User Authentication > RADIUS & SAM RADIUS ( Remote Authentication Dial-In User Service) is a protocol with which equipment such as a n ISDN[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 57 Administration > User Auth entication > RADIUS & SAM SAM Prerequisite In order to be able to use this authentication method, your n etwork requires a Microsoft Windows NT or 2000 computer that contains t he user informa[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 58 Administration > Restart Administration > Shutdow n Administration > Restart 1. Click the Rest art button to shut down and restart the RouteFinder. The message Are you sure you want to restart th e system? is displayed. [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 59 Networks & Services > Net works Networks & Services Networks & Services > Networks A network always consists of a Name, an IP address, and a Subnet Mask addr ess. Once you add a net work, the information display[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 60 Networks & Services > Net works After clicking the Ad d button, the Networks you hav e setup di splay on the l ower part of the screen. Example 1 – After the net works in the example are adde d, you will see the followin[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 61 Networks & Services > Services Networks & Services > Services On this screen you can set the RouteFinder p rotocol services. Protocols make ongoing administrati on easier and enable the configuration of user-defined[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 62 Networks & Services > Services Editing and Deleting User-Added Ser vices There are options for editing or deleti ng the user added se rvices. Ho wever, there are some standard services which cannot be edited or deleted. If[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 63 Networks & Services > Ne twork Groups Networks & Services > Network Groups On this screen you can combine vari ous networks into groups. The net works added in the screen Netw ork & Services > Networks can be[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 64 Networks & Service > Serv i ce Groups Networks & Services > Service Groups On this screen you can combine multi ple Services (see Se rvices section) into grou ps, called Service Groups. Service Groups are treated li[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 65 Proxy Proxy While the packet filter f ilters the data traffic on a net work level, the use of a Proxy (also called an A pplication Gate way) increases the security of the RouteFin der on the application l evel, as there is no di [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 66 Proxy > HTTP Proxy Proxy > HTTP Proxy The HTTP Proxy is capable of transferring www requests. HTT P use can be viewed in the Statistics & Logs menu. HTTP Proxy Section Status To enable HTTP, check the Status box an d cl[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 67 Proxy > HTTP Proxy > URL Categoriza tion URL Categorization Secti on of the Main Proxy HTTP Screen 1. Enable URL C ategorization by checking the URL Filter box on the main Proxy HTT P screen. The URL Categorization section [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 68 Proxy > HTTP Proxy > User Au thentication User Authentication Section of the Main Proxy HT TP Screen To enable User Authenticati on, check the User Authentication box and click Save (a cutout section of the main screen with[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 69 Proxy > HTTP Proxy > Custo m Filters Proxy > HTTP Proxy > Custom Filters The URL Categories in the HTT P Proxy page allows URLs to be filtered or forwarded by the firewall. On this screen, yo u can configure Custom Fi[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 70 Proxy > HTTP Proxy > Custo m Filters Access Rules The Access Rules function enables you to define custom rules. With these custom rules, net works or network groups can be allowed or deni ed access to certain URLs . URLs ca[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 71 Proxy > SMTP Proxy Proxy > SMTP Proxy On this screen (the full screen displays once the Status box is checked), you can confi gur e the SMTP proxy and th e Virus Protection function. The SMTP pro xy acts as an email relay. [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 72 Proxy > SMTP Proxy When Status is checked, the screen expa nds to display the follo wing fields: Accepted Incomin g Domains All the domains for which the SMT P Proxy can accept emails must be listed here. The do main for which[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 73 Proxy > SMTP Proxy SMTP Proxy Example An entry Company.com covers all further su b-domains; for example, subsidiary1.Comp any.com and subsidiary2.Company.co m . The RouteFinder must be the MX (Mai l Exchanger) for Company.com [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 74 Proxy > SMTP Proxy > SMTP SPAM Filtering Proxy > SMTP Proxy > SMTP SPAM Filtering On this screen the SPAM filtering parameters can be set so that all incomin g and outgoing emails sent to the internal mail server(s) w[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 75 Proxy > SMTP Proxy > SMTP SPAM Filtering Recipient Black List Enter a recipient’s email address to be block ed. Then, if the recipient’s em ail address matches any e ntry in the list, the email will not be forwarded. If[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 76 Proxy > SMTP Proxy > SMTP SPAM Filtering Message Filtering. If you check this option, then the email message or body will be searched for the extensions and expressi ons added here. If there is a match, the email will be qu[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 77 Proxy > POP3 Proxy Proxy > POP3 Proxy In order to use this function, you must have a valid Antivi rus Scanner l icense key install ed. T o install one, go to the Administration > License > Vir us Scanner page. Use thi[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 78 Proxy > POP3 Proxy > POP3 SPAM Filtering Proxy > POP3 Proxy > POP3 SPAM Filtering The administrator can configu re POP3 SPAM filtering and related settings on this screen. All outgoing email retriev ed from the intern[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 79 Proxy > POP3 Proxy > POP3 SPAM Filtering Recipient White Li st Enter the recipient email IDs that will not be checked for SPAM. For example, if all the emails from the specific domain cde.com are not to be checked for SPAM,[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 80 Proxy > SOCKS Proxy Proxy > SOCKS Proxy SOCKS is a universal proxy supp orted by many client appli c ations. SOCKS5 is an IETF (Int ernet Engineering T ask Force) approved standard, proxy pr otocol for TCP/IP -base d networ[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 81 Proxy > SOCKS Proxy Allowed Users and Available Use rs Enter a straightforward name that will identify a user group in the Allo wed Users text box. Click the Add button. The name will display in the Available User s box. Once [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 82 Proxy > DNS Proxy Proxy > DNS Proxy DNS Proxy is a module used to redirect DNS requests to na me servers. This module supports a caching-only name server which will store the DNS entries for a spec ifi ed item. So, when the[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 83 Network Setup > Interfaces Network Setup The Network Setup menus consist of Interface, PPP, PPPo E, DHCP Client, Dynamic DNS, Routes, Masqueradi ng, SNAT, and DNAT screens. With the help of DNAT and SNAT, the destination and s[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 84 Network Setup > Interface Network Setup > Interface Local Host Default Gateway and Host Name The Default Gateway and the Host Name must be defined for your RouteFind er. The Default Gateway was already set during initia l i[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 85 Network Setup > Interface Network Cards About Network Card 1 (LAN e th0) Network Card 1 is the interface to the interna l network (LAN). The information was entered during initial installation. This can be changed. About Netwo[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 86 Network Setup > PPP Network Setup > PPP The PPP link is used as a backup link to the WAN interface. If the PPPoE or static link goes down, the backup link will automatically come up and the s ystem will be again connected t[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 87 Network Setup > PPPoE Network Setup > PPPoE PPPoE (Point-to-Point Protocol over Etherne t) is a specification for connecting mult iple computer users on an Ethernet local area network to a remote site through DSL or cable m[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 88 Network Setup > DHCP Client Network Setup > DHCP Client On this screen you can enable DHCP Cli ent (Dynamic Host Configuration Protocol), which is a TC P/IP protocol that en ables PCs and workstations to get temporar y or p[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 89 Network Setup > Dynamic DNS Network Setup > Dynamic DNS Dynamic DNS allows a user to connect his PC to the Internet with a dynamic IP address, so that he will be able to use applications that require a static IP address. Dy[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 90 Network Setup > Routes Network Setup > Routes Routing information is used b y every computer connected t o a net work to identify whether it is sending a data packet directl y to the Firewall or passing it on to another net[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 91 Network Setup > Masquerading Network Setup > Masquerading Masquerading is a process which allo ws a whole net work to hide behind one or several address es preventing the identification of your net work topology from the ou[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 92 Network Setup > SNAT Network Setup > SNAT The SNAT (Source Net work Address Translation) process allo ws attaching private net works to public networks. SNAT is used when you want to have a LAN using a p rivate IP network t[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 93 Network Setup > DNAT Network Setup > DNAT On this screen you can set up DNAT re-routin g. DNAT (Destination Network Address Translatio n) describes the target addresses of the IP packets. Use DNAT if you want to operate a p[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 94 DHCP Server > Subnet Settings DHCP Server > Fixed Addresses DHCP Server DHCP Server > Subnet Settings DHCP (Dynamic Host Configu ration Protocol) is a protocol which allows individual dev ices on an IP network to get the[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 95 Tracking > Accounting Tracking Tracking > Accounting The Accounting function reco rds all the IP packets on the extern al net work cards and sums up their size. The traffic sum for each day is calculated once a day. Additi [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 96 Tracking > Update Services Tracking > Update Se rvices On this screen you can define RouteFi nder update parameters. If you use the Update Service, your RouteFinder can be continually updated with new virus protection patte[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 97 Tracking > Update Services Update Services Update System, Update Virus Patterns, Up date URL Categories Database This section of the screen allows you to start t he update processes of these services. Cl ick the Start button t[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 98 Tracking > Backup Tracking > Backup The Backup function lets you save the Route Finder settings on a loca l hard disk. With a backup file, yo u can set a recently installed RouteFinder to the id entical configuration l evel[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 99 Tracking > Backup Import Backup from Remote Client When a backup is taken, the backu p file is sent to the administrator thro ugh email. This function is used f or restoring the configuratio n files from a remote client. After[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 100 Tracking > Version Co ntrol Tracking > Version Control These settings are the configuration mana ge ment system settings. All configur ation files can be saved in a repos itory in a CVS server. There are fields for setting[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 101 Packet Filters > Packet Filter Rules Packet Filters Packet Filters > Packet Filter Rules The Packet Filter is a key element of the RouteFind er. Packet f ilters are used to set firewall rules which define what type of data[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 102 Packet Filters > Packet Filter Rules System Defined Rules These rules define a set of common applic ation services that are allowed outbound acc ess through the RouteFinder's WA N interface. The software defines a defa u[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 103 Packet Filters > ICMP Packet Filters > ICMP ICMP (Internet Control Message Protocol) is necessary to test netwo rk connections and to test f unctionality of your firewall. It is also used for diagnostic pur poses. ICMP-for[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 104 Packet Filters > Advanced Packet Filters > Advanced On this screen you can configure the adv anced packet filter settings. H.323 Packets Passthrou gh Check this box to enable the for warding of H.323 packets across the fir[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 105 Packet Filters > Enable/Disable Log Packet Filters > Enable/Disable Log On this screen you can enable/disab le RouteFinder firewall l ogging. Enable/Disable Logging Permitted Inbound Access Logs Check this box to enable th[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 106 VPN > IPSec VPN (Virtual Private Networks) VPN > IPSec Introduction to Virtual Private Networks A Virtual Private Network (VPN) is a secure communic ation c onnection via an insec ure medium – usually the Intern et. A VP[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 107 VPN > IPSec > Add IKE Connection Add an IKE Connection The IKE protocol automaticall y negotiate s protocols and encr yption algorithms; it keys automatic exchange of keys. Add IKE Connection Connection Name Enter a text n[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 108 VPN > IPSec > IKE Local WAN IP This is the interface init iating the IPSec tunnel. Local LAN Local security gateway for which the secur ity services should be provided. If the RouteF inder acts as a host, this should be co[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 109 VPN > IPSec > Manual Add a Manual Connection Add Manual Connec tion Connection Name Enter a text name that will identify the connec tion for you. Compression Check the compression checkbox to enable IPCOMP, the compressi o[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 110 VPN > IPSec > Manual Local LAN This is the local security gateway for which the securit y services are to be provided. If the RouteFinder acts as a host, this should be configured as None . Remote Gateway IP This is the in[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 111 VPN > X.509 Certificates VPN > IPSec Bridging VPN > x.509 Certificates X.509 is an International T elecommunication IT U-T and ISO certif icate format standard. The last release of this standard was X.509 Version 3 in t[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 112 VPN > PPTP VPN > PPTP PPTP is a tunneling protocol meant for tunneling IP/non-IP packets through t he IP onl y network (the Internet). The configuration of the VPN PPTP lets you grant single specified hosts acces s to your[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 113 VPN > PPTP PPTP Settings Status Check the Status checkbox to enable this PP TP function. Encryption Strength Select the encryption strength, either strong ( 128 Bit, the default, or weak (40 Bit) encryption. This field define[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 114 Wizard Setup Wizard Setup Using the Wizard Setup screen is a quick way to configure y our RouteFind er. The screen cont ains the ba sic configuration input fields for setting up the RouteFinder as a firewall. If you desire to co[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 115 Wizard Setup Packet Filter Rule If this setting is enabled by checking the checkbox, all pack ets coming from the LAN will be forwarded b y the firewall. If disabled, none of the packets will go through. Modem Settings Use this [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 116 Statistics & Logs Statistics & Logs Various log files maintained b y the RouteFinder can be viewed and/or d ownloaded to the browser. This function provides current system information, status, and usag e information. The[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 117 Statistics & Logs > Uptime Statistics & Logs > Hardwa re Statistics & Logs > Uptime Uptime tells you ho w long the system has been running. The firs t line displays the date and time the s ystem was started.[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 118 Statistics & Logs > Networ ks Statistics and Logs > Networks This menu displays an ana lysis of the RouteFinder net w ork interface details, routing, and net work connections. Network Interface Card s Click the Interfa[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 119 Statistics & Logs > Networ ks Network Connections Click the Network Connectio ns button to display the statu s of all cu rrent (active) network connections t o or from your RouteFinder. Information on the active prot oco [...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 120 Statistics & Logs > Interfaces Statistics & Logs > Interfaces The information displaye d under each optio n shows the networ k traffic on each interface (LAN, WAN, DMZ) delineated by days, weeks, months, and years.[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 121 Statistics & Logs > SM TP Proxy Statistics & Logs > SMTP Proxy The SMTP Proxy screen displays the RouteFind er‘s SMTP proxy (email) usage and statu s in two windows called SMTP- Logs and SMTP-Status. It shows a r[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 122 Statistics & Logs > Acc ounting Statistics & Logs > Accounting This report gives the details of the am ount of data transferre d in bytes through t he system on every interf ace (LAN, WAN, DMZ). The Accounting func[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 123 Statistics & Logs > Self Monitor Statistics & Logs > Self Monitor The Self Monitoring function ensures the integrity of the RouteFind er system and informs the administrator of important events by email. Self Monit[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 124 Statistics & Logs > IPSe c Statistics & Logs > PP TP Statistics & Logs > IPSec IPSec Live Log Click the IPSec Live Log button to display informati on ab out initialization, encr yption/decryption messages, r[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 125 Statistics & Logs > Packet Filter Statistics & Logs > Packet Filter This report shows the RouteFinder firewall logs for various t y pes of packets. The type and number of packets to be displaye d can be configured.[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 126 Statistics & Logs > P ort Scan Logs Statistics & Logs > V iew Logs Statistics & Logs > Port Scans The Port Scans screen displays the informati on gathered by t he Network Intrusion Detection mod ule, which g[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 127 Statistics & Logs > HTTP A ccess Statistics & Logs > HTTP Access HTTP Access reports provide a clear picture of “w here” your users are going to on the Inte rnet. Generate HTTP Access Reports This screen displa[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 128 Statistics & Logs > DHCP Statistics & Logs > DHCP This live Log gives information about the D HCP l eases that have been provided so far. Example of a DHCP Log[...]

Chapter 6 – RouteFinder Software Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 129 Statistics & Logs > SMTP & POP3 Virus Quarantines Statistics & Logs > SM TP SPAM Quarantines Statistics & Logs > Admini strative Authentication Log Statistics & Logs > SMTP & POP3 Virus Quaran[...]

Chapter 7 – User Authentication Metho ds Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 130 Chapter 7 – User Authentication Methods While you can restrict access of your internal clients to proxy services at the IP level by using packet filter rules, you will run into problems when you us e a dynamic IP confi[...]

Chapter 7 – User Authentication Metho ds Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 131 Authentication Setup Choose one of the following setup methods. Setting Up RADIUS Authentication To set up RADIUS Authentica tion, first you need a RADIUS se rver on your network. The server can be anywhere on the Intern[...]

Chapter 7 – User Authentication Metho ds Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 132 Setting Up NT/2000 SAM (SMB) Authentication To setup Windows NT/2000 SAM Authentic at ion, you will nee d an NT/2000 machine on your network that holds the user accounts. This can be a domain controller (PDC) or a simp l[...]

Chapter 8 – Frequently Asked Questions (FAQs) Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 133 Chapter 8 – Frequently Asked Questions (FAQs) Q1 . In general, what does the RouteFinder do? A1. The RouteFinder VPN Gate way/Firewall Router lets you us e data encryption an d the Internet to securely connect to [...]

Chapter 8 – Frequently Asked Questions (FAQs) Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 134 Q11. Is it possible to define a static N AT from the outside to the inside, (e.g., Map external IP a.b.c.d to internal IP w.x.y.z) in both directions? A11. Yes, it is possible to do stat ic NAT, but with limitations[...]

Chapter 8 – Frequently Asked Questions (FAQs) Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 135 Q13. Can I forward SSH conne ctions? A13. Yes, by configuring port forwarding of SSH (dest. port 22): Source: External Interface Port 22 goes to Destination: SSH_Server Port 22 Procedure: 1. Define two Hosts in Netw[...]

Chapter 8 – Frequently Asked Questions (FAQs) Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 136 Q19. Why is the export of cryptography controlled ? A19. Cryptography is export-controlled for s everal reasons. St rong cryptography can be used for crimi nal purposes or even as a weapon of war. In wartime, the ab[...]

Chapter 8 – Frequently Asked Questions (FAQs) Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 137 This rule allows the FT P server to make outgoing co nnections to clients, thus enabling the PORT command. Any PA SV_Range FTP_Server Allo w This rule allows connections f rom clients to the passive port range of th[...]

Chapter 8 – Frequently Asked Questions (FAQs) Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 138 Q33. What is a single-homed and multi-homed firew all? A33. A multi-homed firewall has multiple network interfac es and does not for ward packets. Single-homed firewalls have one network interface card. You would us[...]

Chapter 9 – Troubleshooti ng Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 139 Chapter 9 – Troubleshooting 1. Review the RouteF inder FAQs in the previous section. 2. Verify that the pre-install ation requirements are met. Refer to Chapter 2 of this manual. 3. Verify that the Administrations PC requir ements[...]

Chapter 9 – Troubleshooti ng Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 140 11. Attach a monitor and keyb oard to the RouteFinder for moni toring and d ebugging (refer to Chapter 5 of this manual for keyboard and monitor conne ction information). 12. Run the applic able Statistics & Logs function for th[...]

Appendix A – Dispositio n of Events Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 141 Appendix A – Disposition of Events for the RouteFinder v3.2x For ICSA Certification Based on The Modular Firewall Certification Criteria Baseline module - version 4.0 Revision History Date Revision Remarks/Changes 16-Aug-20[...]

Appendix A – Dispositio n of Events Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 142 1. Abst ract Disposition of Events The LVPN RouteFinder 3.2x p rovides logging capab ilities for various types of Access requests to the product. The logging is classified as follo ws: • Inbound Access Requests (LO1.A) • [...]

Appendix A – Dispositio n of Events Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 143 Admin Port Access Requests All requests to the Administrative port (HTTPS/HTTP to the box using the WEB GUI) are logged as Admin Port T raffic. Access requests logged as Admin Port Access requests cor res pond to LO1.F of Bas[...]

Appendix A – Dispositio n of Events Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 144 Inbound Access (DNAT with Connection Tracking) Figure 3 – Inbound Access (DNAT with Connection Trackin g) Description of Figure 3 The Access request originated from the sour ce (204.26.122. 9) to the destination (204. 54. 3[...]

Appendix A – Dispositio n of Events Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 145 III. Outbound Access Log Figure 4 – Outbou nd Acc ess Figure 5 – Snaps hot of Outbound Access Log Figure 6 – Snapshot of Out bound Access Log ( w ith Connection Tracking)[...]

Appendix A – Dispositio n of Events Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 146 Description of Figure 6 The FTP Access request originated from the source (192.16 8.1.212 [SlNO 2]) to the des tinatio n (195.220.108.108). The above figure illustrates a capture of FT P service. • Slno 2, in the above snap[...]

Appendix A – Dispositio n of Events Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 147 VI. Administrative Authentication Logs Figure 10 – Snapshot of Administra ti ve Authentication Log VII. Admin Port Access Log Figure 11 – Snaps hot of A d min Port Access Log VIII. Startup History Log Figure 12 – Snapsh[...]

Appendix A – Dispositio n of Events Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 148 XI. ICMP Information Figure 15 – Snapshot of Log with ICMP Information[...]

Appendix B – T he RouteFinder Rescue Kernel Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 149 Appendix B – The RouteFinder Rescue Kernel What Is a Rescue Kernel? Rescue Kernel is a software program that all ows you to rein stall the RouteFinder soft ware without connecting the CD-ROM drive and using the Rout[...]

Appendix B – T he RouteFinder Rescue Kernel Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 150 Links You Will Need During the Install Process Link to Download Windows FTP Server: http://support.jgaa.com Link to Download Windows WinSCP Client: http://winscp.sourceforge.net/eng/ Link to Download Putty Telnet/SSH [...]

Appendix B – T he RouteFinder Rescue Kernel Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 151 9. Connect a monitor to the Rout eFinder and monitor to make sure the install process does not show any problems. If there are problems during the install, y ou will need to us e Method 3 to recover. If you do not hav[...]

Appendix B – T he RouteFinder Rescue Kernel Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 152 7. T ype in lilo -R RFNetInstall . 8. T ype in reboot . 9. Connect a monitor to the Rout eFinder and monitor to make sure the install process does not show any problems. If there are problems during the install, y ou [...]

Appendix C – Board Compo nents, Hardware Upgrades & A dd-ons, Soft ware Add-ons, Overnight Replacement Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 153 Appendix C – Board Components, Hardware Upgrades & Add-ons, Software Add-ons, Overnight Replacement Board Components The RouteFinder boar d componen[...]

Appendix C – Board Compo nents, Hardware Upgrades & A dd-ons, Soft ware Add-ons, Overnight Replacement Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 154 850 Mhz INTEL  Celeron  Processor: the microprocess or that provides processing po wer to the unit. The processor can be upgraded i n the field for [...]

Appendix C – Board Compo nents, Hardware Upgrades & A dd-ons, Soft ware Add-ons, Overnight Replacement Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 155 Memory Upgrade The standard 128-Mb memor y module can be upgrad ed in the field to 256 MB. 1. Remove the R outeFinder top cover using the proced ure earli[...]

Appendix C – Board Compo nents, Hardware Upgrades & A dd-ons, Soft ware Add-ons, Overnight Replacement Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 156 Software Add-ons Listed below are the software add- ons available for the Ro uteFinder: SSH Sentinel IPSec VPN Client Software The SSH Sentinel IPSec VPN [...]

Appendix D – CD-ROM Drive Adapter a nd Pin Out Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 157 Appendix D – CD-ROM Drive Adapter and Pin Out CD-ROM Drive Adapter Dimensions Pin 1 Note: Pin 1 of the converter must match with the red line of the ribbon cable. The adapter is polarity sensitive. It will not w [...]

Appendix E – RouteFi nder Maintenance Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 158 Appendix E – RouteFinder Maintenance This section covers issues related to routi nely maintai ning the RouteFinde r, including: • Housekeeping • Monitoring • Updating Housekeeping Housekeeping inclu des the on-going[...]

Appendix E – RouteFi nder Maintenance Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 159 Updating This involves keeping both yourself and your RouteF in der abreast of new bugs, new attacks and new patches, ne w tools and resources, etc. Much of the RouteFinder updating effort c an be done autom atically (refer[...]

Appendix F – Orderin g Accessories Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 160 Appendix F – Ordering Accessories SupplyNet, Inc. supplies replacement transformers, cables, and co nnectors for select Multi-T ech products. You can place an order with SupplyNet via mail, phone, fax, or the Internet at: Ma[...]

Appendix G - Technical Supp ort Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 161 Appendix G – Technical Support Technical Support Contacts Country By Email By Phone France: support@multitech.fr (33) 1-64 61 09 81 India: support@multitec hindi a.com 91 (124) 63 40778 U.K.: support@multitech. co.uk (44) 118 959[...]

Appendix H - Multi-T ech Systems, Inc. Warranty and Repairs Policies Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 162 Appendix H – Multi-Tech Systems, Inc. Warranty and Repairs Policies Multi-Tech Warranty Statement Multi-Tech Systems, Inc., (hereafter “MTS”) warran ts that its pr oducts will be free from[...]

Appendix H - Multi-T ech Systems, Inc. Warranty and Repairs Policies Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 163 Please direct your questions regar ding technical matters, product configuration, verification t hat the product is defective, et c., to our Technical Support department nearest you or email sup[...]

Appendix I – Regulator y Compliance Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 164 Appendix I – Regulatory Compliance EMC, Safety, and R&TTR Directive Compliance The CE mark is affixed to this product to confirm compliance with the following European Communit y Directives: Council Directive 89/336/EEC[...]

Appendix I – Regulator y Compliance Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 165 Industry Canada for the Modem Operation This Class A digital apparatus meets all requirements of the Canadian Interference-Caus ing Equipment Regulations. Cet appareil numerique de la classe A respecte toutes les ex igences d[...]

Appendix J – License Agre ements Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 166 Appendix J – License Agreements Multi-Tech Systems, Inc. End User License Agreement (EULA) IMPORTANT - READ BEFORE OPENING THE SOFTWARE PACKAGE This is a basic multi-user software licens e granted by Multi-Tech Systems, Inc., [...]

Appendix J – License Agre ements Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 167 I will not use the Programs for, and will not allow the Pr ograms to be us ed for, any purposes prohibited by United States law , including, without limitation, for the development, design, manufacture or prod uction of nuclear,[...]

Appendix J – License Agre ements Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 168 GNU GENERAL PUBLI C LICENSE Version 2, June 1991 Copyright (C) 1989, 1991 Free S oftware Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA Everyone is permitted to copy and distribute verbatim copies of this[...]

Appendix J – License Agre ements Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 169 c) Accompany it with the information you received as to the offer t o distribute corresponding s ource code. (This alternative is allowed only for noncommercial distribution and only if you received the pr ogram in object code o[...]

Appendix J – License Agre ements Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 170 SurfControl URL Filtering End-User Terms The parties agree that as a condition of the rights and licenses granted by SurfC ontro l under the Agreement, each license agreement to end-users for the Bundle (“End-Us ers”) shall [...]

Appendix J – License Agre ements Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 171 and/or the Subscription Lists, if any. Licensee may not permit th ird parties to benefit from the use or functionality of the So ftware via a service bureau or other arrangement. Licensee ma y not copy the Software except as exp[...]

Appendix J – License Agre ements Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 172 Licensee acknowledges that the allocation of risk in this License reflects the price paid for the Software and also the fact th at it is not within SurfControl’s control how or for what purposes the Software is used. THE SECTI[...]

Appendix J – License Agre ements Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 173 Kaspersky Standard End User License Agreement. Standard End User Licen se Agreement NOTICE TO ALL USERS: CAREFULLY READ THE FOLLOWING LEGAL AG REEMENT ("AGREEMENT"), FOR THE LICENSE OF SPECIFIED SOFTWARE ("SOFTWAR[...]

Appendix J – License Agre ements Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 174 (iii) By completion of the Support Services Subscription Form you consent to the terms of the Kaspersky Lab Privac y Policy whi ch is attached to this Agreement, and you explicitly consent to the tr ansfer of data to othe r coun[...]

Appendix K – Waste Electr ical and Electronic Equipment Directive (WEEE) Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 175 Appendix K – Waste Electrical and Electronic Equipment Directive (WEEE) Waste Electrical and Electronic Equipment (WEEE) Directive The WEEE directive places an obligati on on manufacture[...]

Glossary Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 176 Glossary * (Asterisk character) – The ‘ wildcard’ character, used to signify “all within this group or function” (e.g., use * to specify all domain names). A special sy mbol that stands for one or more characters. Many operating systems and app[...]

Glossary Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 177 CSS ( Cascading Style Sheets ) – HT ML was intended to mark up only a W eb page' s structure, but not its on-screen displa y characteristics. For Web page appearances, the W orld Wide Web Consortium (W3C) dev eloped a complementar y markup system [...]

Glossary Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 178 Destination Port Number ZZZZ – All the traffic going through the fire wall is part of a connection. A connection consi sts of the pair of IP addresses that are talki ng to each other, as well a pair of por t numbers. The destinati on port number often [...]

Glossary Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 179 ESP (Encapsulating Security Payload ) – An authentication protocol much like AH. IP ESP ma y be applied in com bination with AH. Security services can be prov ided bet ween a pair of communicating hosts, between a pair of communic ating security gatewa[...]

Glossary Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 180 HTTPS ( aka, S-HTTP) – Secure HyperText Transfer Protocol, a secure way of transferring information over the World Wide Web. HTTPS refers to the entry (e.g., https://192.168.2.100 ) used for an S-HTTPS connection. S-HTT PS is the IETF RFC that describe[...]

Glossary Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 181 LILO (LI nux LO ad er) – LILO is a small program that sits on the master boot record of a ha rd drive or on the boot sector of a partition. LILO is used to start the loadi ng process of the Linux kernel. (T here are other programs that can als o do thi[...]

Glossary Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 182 Policy – The purpose of an IPSec Security Polic y is to define how an organization is goin g to protect itself. The policy will generally require t wo parts: a general policy and specific rules (e.g., a system-specific policy). The general polic y sets[...]

Glossary Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 183 PuTTY – A simple but excellent SSH and Telne t replacem ent for Windows 95/98/NT that happens to be free. Installation is simple - you download PuTTY.exe and store it some where on y our system that's convenient. Qmail – A security-oriented Unix[...]

Glossary Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 184 Server – A server is a device on the network t hat provides mostl y standardized servic es (e.g., www, FTP, news, etc.). To be able to use these services, you as a user re quire the comparable clie nt requirements for the desired service. SHA (Secure H[...]

Glossary Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 185 TLS ( Transport Layer Securi ty ) – An open security standard that is similar to SSL3. (Note that some web sites may not support the TLS protocol.) Trace Route – A program av ailable on many systems that traces the path a packet takes to a destinatio[...]

Index Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 186 Index 3 3DES Encryp tion ...........................................................15 3DES Thr oughput .......................................................... 15 A About Firewall s ..................................................................... 17[...]

Index Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 187 Remote Client-t o-LAN se tup ......................................36 F Factory De faults ............................................................. 54 Featur es........................................................................... 7 Filtering Rules[...]

Index Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 188 NT/2000 SAM Authentic ation Se tup ............................ 132 O Open Web Br owser ....................................................... 24 Operating Envi ronmen t .................................................. 16 Overnight Replacem ent Serv ice [...]

Index Multi-Tech Systems, Inc. RouteFinderVPN RF760/660/60 0VPN User Guide (PN S000323D) 189 Statistics & Logs > Self Moni tor ................................... 123 Statistics & Logs > SMTP & POP3 Virus Quarantines . 129 Statistics & Logs > SMTP Pr oxy .................................. 121 Statistics & Logs > SMTP[...]