Français dropdown-ico

Global Technology Associates GBWA200501-01 manuel d'utilisation

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

Aller à la page of

Les manuels d’utilisation similaires

Un bon manuel d’utilisation

Les règles imposent au revendeur l'obligation de fournir à l'acheteur, avec des marchandises, le manuel d’utilisation Global Technology Associates GBWA200501-01. Le manque du manuel d’utilisation ou les informations incorrectes fournies au consommateur sont à la base d'une plainte pour non-conformité du dispositif avec le contrat. Conformément à la loi, l’inclusion du manuel d’utilisation sous une forme autre que le papier est autorisée, ce qui est souvent utilisé récemment, en incluant la forme graphique ou électronique du manuel Global Technology Associates GBWA200501-01 ou les vidéos d'instruction pour les utilisateurs. La condition est son caractère lisible et compréhensible.

Qu'est ce que le manuel d’utilisation?

Le mot vient du latin "Instructio", à savoir organiser. Ainsi, le manuel d’utilisation Global Technology Associates GBWA200501-01 décrit les étapes de la procédure. Le but du manuel d’utilisation est d’instruire, de faciliter le démarrage, l'utilisation de l'équipement ou l'exécution des actions spécifiques. Le manuel d’utilisation est une collection d'informations sur l'objet/service, une indice.

Malheureusement, peu d'utilisateurs prennent le temps de lire le manuel d’utilisation, et un bon manuel permet non seulement d’apprendre à connaître un certain nombre de fonctionnalités supplémentaires du dispositif acheté, mais aussi éviter la majorité des défaillances.

Donc, ce qui devrait contenir le manuel parfait?

Tout d'abord, le manuel d’utilisation Global Technology Associates GBWA200501-01 devrait contenir:
- informations sur les caractéristiques techniques du dispositif Global Technology Associates GBWA200501-01
- nom du fabricant et année de fabrication Global Technology Associates GBWA200501-01
- instructions d'utilisation, de réglage et d’entretien de l'équipement Global Technology Associates GBWA200501-01
- signes de sécurité et attestations confirmant la conformité avec les normes pertinentes

Pourquoi nous ne lisons pas les manuels d’utilisation?

Habituellement, cela est dû au manque de temps et de certitude quant à la fonctionnalité spécifique de l'équipement acheté. Malheureusement, la connexion et le démarrage Global Technology Associates GBWA200501-01 ne suffisent pas. Le manuel d’utilisation contient un certain nombre de lignes directrices concernant les fonctionnalités spécifiques, la sécurité, les méthodes d'entretien (même les moyens qui doivent être utilisés), les défauts possibles Global Technology Associates GBWA200501-01 et les moyens de résoudre des problèmes communs lors de l'utilisation. Enfin, le manuel contient les coordonnées du service Global Technology Associates en l'absence de l'efficacité des solutions proposées. Actuellement, les manuels d’utilisation sous la forme d'animations intéressantes et de vidéos pédagogiques qui sont meilleurs que la brochure, sont très populaires. Ce type de manuel permet à l'utilisateur de voir toute la vidéo d'instruction sans sauter les spécifications et les descriptions techniques compliquées Global Technology Associates GBWA200501-01, comme c’est le cas pour la version papier.

Pourquoi lire le manuel d’utilisation?

Tout d'abord, il contient la réponse sur la structure, les possibilités du dispositif Global Technology Associates GBWA200501-01, l'utilisation de divers accessoires et une gamme d'informations pour profiter pleinement de toutes les fonctionnalités et commodités.

Après un achat réussi de l’équipement/dispositif, prenez un moment pour vous familiariser avec toutes les parties du manuel d'utilisation Global Technology Associates GBWA200501-01. À l'heure actuelle, ils sont soigneusement préparés et traduits pour qu'ils soient non seulement compréhensibles pour les utilisateurs, mais pour qu’ils remplissent leur fonction de base de l'information et d’aide.

Table des matières du manuel d’utilisation

  • Page 1

    G B - W a r e S OFT W ARE F i re wa l l P roduc t Guide GBW A200501-01 powered by GNA T Bo x S y st e m So f t w ar e[...]

  • Page 2

    Copyright © 1996-2004, Global T echnology Associates, Incorporated (GTA). All rights reserved. Except as permitted under copyright law , no part of this manual may be reproduced or distributed in any form or by any means without the prior permission of Global T echnology Associates, Incorporated. T echnical Support GT A includes 30 days “up and [...]

  • Page 3

    T able of Contents iii Contents 1 INTRODUCTION ............................................................................................... 1 About GT A Firewalls ....................................................................................... 1 About GB-W are ...............................................................................[...]

  • Page 4

    GB-Ware Firewall Product Guide iv Re-configuring Y our Computer ................................................................ 28 Accessing the Firewall ............................................................................ 28 Configuration Using GBAdmin .................................................................... 29 Entering Y ou[...]

  • Page 5

    1 - Introduction 1 1 Introduction About GT A Firewalls Global T echnology Associates, Inc. (GT A) has been designing and building Internet firewalls since 1994. In 1996, GT A developed the first truly affordable commercial-grade firewall, the GNA T Box ® . Since then, ICSA- certified GNA T Box System Software has become the engine that drives [...]

  • Page 6

    GB-Ware Firewall Product Guide 2 • Dynamic DNS • DNS proxy • T ransparent and traditional web proxy with script blocking • DNS server (optional on 10 user version) • DHCP server • Web and GBAdmin user interfaces for remote management • SNMP (read-only) • T raffic shaping (bandwidth limiting) • NTP (network time protocol) server A[...]

  • Page 7

    1 - Introduction 3 Software Specifications Specification GB-W are 10 users GB-W are unrestricted users Concurrent connec- tions (standard) 1,000 128,000 Concurrent out- bound users (stan- dard) 10 Unrestricted Network interfaces (standard) 2 3 User authentication 50 750 Address objects 50 600 Aliases 5 300 Pass-through hosts 10 300 Filters, outbou[...]

  • Page 8

    GB-Ware Firewall Product Guide 4 configuration with full network speeds on all interfaces. The best possible performance can be obtained by using a Pentium class or higher CPU with PCI network cards. Network performance bottlenecks usually occur at the connection to the Internet when using DSL or T1 class connectivity . GB-W are with 10 Mbps Ether[...]

  • Page 9

    1 - Introduction 5 Optional Components • 1-18 additional network cards (if using the Multi-Interface Option) • Async modem (PPP connections or pager only) • ISDN T A with RS-232 interface (PPP connections only) • Cable modem • Serial ports for COM 1-4 (1645x/1655x UART s only) Note GT A recommends installing only the GB-War e required or [...]

  • Page 10

    GB-Ware Firewall Product Guide 6 Modem/ISDN T A Hardware GT A recommends configuring the modem or ISDN T A on another system before installing it on GB-W are. Most modems allow the storage of a user configuration and the recall of this configuration using a specific command (e.g. A TZ). It is usually easiest to configure the modem before insta[...]

  • Page 11

    1 - Introduction 7 Other avenues for assistance are available through authorized GT A Channel Partners, the GNA T Box Mailing List, or the GT A web site (www .gta.com). Upgrades Once registered, you can view available upgrades in the GT A online support center section of the GT A web site (www .gta.com/support/center/login/). Click on the serial nu[...]

  • Page 12

    GB-Ware Firewall Product Guide 8 Additional Documentation For additional instructions on installation, registration and setup of a GT A product, see applicable Quick Guides, F AQs or technical papers. For optional features, see the appropriate feature guide. Documentation is included on installation CDs, and is available for download from the GT A [...]

  • Page 13

    2 – Installation 9 2 Installation Registration T o get technical support and software updates, you must register your GT A firewall. 1) T o register , go to www .gta.com. Click on SUPPORT and then the SUPPORT CENTER link to visit https://gta.com/support/center/login/. 2) If you do not have an online support account, click on the CREA TE AN ACCOU[...]

  • Page 14

    GB-Ware Firewall Product Guide 10 Installing GB-W are on PC Hardware GB-W are software must be installed on x86 (Intel-compatible) computer hardware before you can use your firewall. The GB-W are installation CD will install the firewall software onto your computer hardware. Requirements GB-W are can be installed either on a bootable Compact Flas[...]

  • Page 15

    2 – Installation 1 1 Setup for GB-W are Installation The computer (either the intended firewall or an installation proxy computer) must be modified to boot using a CD-ROM drive. This enables the GNA T Box System Software installation CD to activate and install the GB-W are firewall software when powering on the PC. Caution If in stall ing GB-W[...]

  • Page 16

    GB-Ware Firewall Product Guide 12 Caution Inst alli ng GB -W are on a hard drive wil l era se its cont ents and replace them with GB-Ware. If you wish to keep the data on a hard drive, do not install GB-W are on it; instead, install GB-Ware on a dif ferent hard drive. Y ou may also wish to temporarily disconnect other (non- GB-W are) hard drives to[...]

  • Page 17

    2 – Installation 13 GNA T Box System Softwar e Licensing Agr eement Selecting a GB-W are Runtime The GNA T Box System Software Runtime Installer screen will appear . If you are upgrading, verify that your configuration has been backed up to another location. Any information currently on the disk will be over-written during the installation. Sele[...]

  • Page 18

    GB-Ware Firewall Product Guide 14 The serial version of the GB-Ware runtime installs factory default settin gs; a serial or temporary peer Ether net con necti on can be used to change these settings. If you prefer to perform initial firewall configuration over the web or with GBAdmin, choose this option. The selection list also includes the Erase[...]

  • Page 19

    2 – Installation 15 Note USB pen drives may appear , but should not be selected for installation as they are not IDE-bootable devices. CD-ROM or DVD- ROM dr ives will not be displayed by the GB- W are system ins tallat ion process, as they are not writable discs. Other drives will not display . Device Designations Designation Description Device G[...]

  • Page 20

    GB-Ware Firewall Product Guide 16 Disk Re-formatting W arning It may take several minutes for the runtime to install. A pipe indicator (|) will be animated while the system installs. A message similar to the following will display when the system installation is complete: Load i ng r u nti m e i m age for <runtime number> – succee de d Ini [...]

  • Page 21

    2 – Installation 17 attach the hardware key block to a prospective GB-W are firewall and boot the GB-W are disk.[...]

  • Page 22

    GB-Ware Firewall Product Guide 18[...]

  • Page 23

    3 – Configuration 19 3 Configuration The following sections describe how to change GB-W are from the default configuration, in which all internal users are allowed outbound connections, but no unsolicited inbound connections are allowed. Use either the web user interface, GBAdmin, the video console, or the serial console to configure the GB-W [...]

  • Page 24

    GB-Ware Firewall Product Guide 20 During installation, you chose the video or the serial console version of the GNA T Box runtime. These methods can be used during setup, or when you have direct physical access to the firewall, or as a failsafe if the network is down and you can no longer administer your firewall remotely . Addition- ally , you m[...]

  • Page 25

    3 – Configuration 21 Requirements If using the web user interface, you will need: • 1 crossover Ethernet cable to connect with the computer directly , or 1 straight-through Ethernet cable to connect with the computer through a hub or switch • 2 straight-through Ethernet cables, one for each required network connection • 1 computer with a SS[...]

  • Page 26

    GB-Ware Firewall Product Guide 22 match the network address scheme. Then you may add the firewall to your network and connect remotely (by web or GBAdmin) through your normal network. 1) Use a crossover Ethernet cable to connect a computer to the fire- wall’s first network interface card. Alternately , use straight-through cables to connect yo[...]

  • Page 27

    3 – Configuration 23 T emporary Network Configuration for Connection with Fir ewall Defaults - Mac OS X 3) Reboot your computer if necessary to put your new network configu - ration into effect. Note Please refer to the GNAT Box System Softwar e User’ s Guide for specific information about editing network information. Making a Serial Connect[...]

  • Page 28

    GB-Ware Firewall Product Guide 24 Configuring Y our Firewall Y ou will need to configure your firewall to match your network scheme before installing it. Requirements If using a web browser , you will need: • an SSL-compatible, frames-enabled web browser • a temporary peer network connection between the firewall and a computer (first con?[...]

  • Page 29

    3 – Configuration 25 On Macintosh computers, GT A does not recommend using Microsoft Internet Explorer for Macintosh (Mac IE 5). OpenSSL encryption, used by the firewall, is known to be incompatible with Mac IE 5, and your browser will not allow you to continue past the security alert screen. If you must use Mac IE 5, install the firewall using[...]

  • Page 30

    GB-Ware Firewall Product Guide 26 Entering the Default User ID and Passwor d Caution GT A recommends changing the default user ID and password to prevent unauthorized access. Entering Y our Network Information GB-W are requires entry of the serial number and activation code. Click on Basic Configuration and expand the menu, then select F eatures .[...]

  • Page 31

    3 – Configuration 27 Caution Closing the browser without clicking SA VE will cause the entered data to be lost, and your firewall will remain in default configuration. Y ou will need to re-connect to the firewall and re-enter the network information. 2) Once you have completed the network configuration, apply the changes by clicking SA V E . [...]

  • Page 32

    GB-Ware Firewall Product Guide 28 Using CIDR-based or Slash (/) Notation CIDR (Classless Inter-Domain Routing) aggregates routes so that one IP address represents thousands served by a backbone provider . GNA T Box System Software uses CIDR-based notation as the default for subnet masks, instead of dotted decimal (e.g. 255.255.255.0) notation. Inst[...]

  • Page 33

    3 – Configuration 29 Caution Failure to change the default password is a serious security weakn ess. G T A r ecomm ends cha nging the defaul t user ID and password to prevent unauthorized access. Configuration Using GBAdmin If your computer ’ s operating system is Microsoft W indows, you can choose to configure your firewall by using the GBAd[...]

  • Page 34

    GB-Ware Firewall Product Guide 30 GBAdmin Network Information W indow Entering Y our Network Information GB-W are requires entry of the serial number and activation code. Click on Basic Configuration and expand the menu, then select F eatures . Enter the serial number and activation code, then click the SA V E button then the OK button. The firew[...]

  • Page 35

    3 – Configuration 31 Caution Closing GBAdm in without clic king SA VE will cause the entered data to be lost, and your firewall will remain in default configuration. Y ou will need to re-connect to the firewall and re-enter the network information. 2) Once you have completed the Network Informa tion form, apply the changes by clicking SA V E .[...]

  • Page 36

    GB-Ware Firewall Product Guide 32 1) On your computer , open terminal emulator software such as T era T erm or Microsoft HyperT erminal and enter the following settings for a new connection: E MULA TION VT -100 P ORT Computer serial (COM) port connected to the firewall via a DB-9 cable B AUD R A TE 38400 D A T A / B IT R A TE 8 P ARITY None S TOP [...]

  • Page 37

    3 – Configuration 33 2) If you specified the video console version during installation and your hardware was configured correctly , and the system did not encounter any problems, the Setup Wizard should now appear . Video Console Navigation There are three modes on the video console: log messages, the main inter- face and statistics. V iew log [...]

  • Page 38

    GB-Ware Firewall Product Guide 34 Note If you cancel the Setup Wizard, go to Basic Configuration then Features to enter your serial number and activation code. Next, enter your initial configuration information in Basic Configuration then N etwo rk Information . Y our firewall will not be functional until these steps are performed, either by hand[...]

  • Page 39

    3 – Configuration 35 Run DHCP? 6c. IP Address Y ou will reach this option if you rejected use of dynamic IP address services. Enter the static IP address and subnet mask of the exter - nal network interface. The IP address for the external network interface should be a valid ISP-registered IP address if you will be connecting your firewall to th[...]

  • Page 40

    GB-Ware Firewall Product Guide 36 ment Numbers Authority (IANA) has specified network addresses in RFC 1918 that are designated exclusively for internal networks. IANA Private Network IP Address Rules Quantity of Addresses Available Network Class IP Address Range 1 A 10.0.0.0 - 10.255.255.255 16 B 172.16.0.0 - 172.31.255.255 256 C 192.168.0.0 - 19[...]

  • Page 41

    3 – Configuration 37 Accessing Y our GT A Firewall After completing the initial configuration in the setup wizard, your GT A firewall should be active and functioning in default security mode (all internal users are allowed outgoing connections, and no unsolicited connec- tions are allowed in). After testing connectivity , you can now perform a[...]

  • Page 42

    GB-Ware Firewall Product Guide 38[...]

  • Page 43

    4 – T roubleshooting 39 4 T roubleshooting T roubleshooting Basics GT A Support recommends the following guidelines as a starting point when troubleshooting network problems: • Start with the simplest case of locally attached hosts. • Use IP addresses, not names. Y our problem could be DNS. • Work with one network segment at a time. • V e[...]

  • Page 44

    GB-Ware Firewall Product Guide 40 • Have you added a static route on the firewall to tell it which router is used to reach the Internet? Have you set the router ’s default route to be the firewall? Have you set the default route for hosts on the problem network to be the router or firewall? • Is the wrong IP address assigned to the hosts o[...]

  • Page 45

    4 – T roubleshooting 41 Note Distinguish between crossover cables and straight-through cables by comparing the connection ends. On a straight-through cable, the wire order matches; on a crossover cable, the first three of the four wires are in reverse order . 6a. How do I install the parallel port hardware key block? The parallel port hardware k[...]

  • Page 46

    GB-Ware Firewall Product Guide 42 Installation of the USB Key Block 3. Enter the GB-W are serial number and activation code in the Basic Configuration then F eatures section of the GB-W are web interface or wizard. Note If the hardware key block is not recognized once you have booted the system, and the serial number and activation code are both e[...]

  • Page 47

    4 – T roubleshooting 43 1 1. The warning message “Initializing runtime slice 2 failed; No space left on device” is displayed. 1. The Compact Flash card is too small; GT A only supports GT A-certi- fied Compact Flash cards. 2. The Compact Flash card no longer functions correctly; contact GT A or a GT A Channel Partner for hardware warranty . [...]

  • Page 48

    GB-Ware Firewall Product Guide 44 13. How do I revert to my previous configuration after a version upgrade? The firewall’s Compact Flash or hard drive memory is in two sections (“slices”); one contains the current software version plus any saved configu- ration, the other contains the previous software version and configuration. A new fi[...]

  • Page 49

    4 – T roubleshooting 45 1. If you have more than one CD-ROM drive installed, either discon- nect the additional CD-ROM drives and retry , or verify that the installation CD-ROM drive is detected first in the boot sequence, before other CD-ROM drives in the IDE controller ports. 2. Connect a different CD-ROM drive and retry . 3. T ry installing G[...]

  • Page 50

    GB-Ware Firewall Product Guide 46[...]

  • Page 51

    4 – T roubleshooting 47 Appendix Installing the Compact Flash Card If you are installing your GB-W are firewall on a Compact Flash card, use these instructions to install the Compact Flash card for your firewall. The instructions assume that the Compact Flash IDE adapter is being installed in the intended firewall; modification is necessary t[...]

  • Page 52

    GB-Ware Firewall Product Guide 48 Warning Improper grounding can damage your system or Compact Flash card, and may cause physical injury or death. Never service your GB-W are system while it is plugged in or powered on! Assembling the Compact Flash IDE Adapter 1) Insert the four white nylon mounting posts into the mounting holes in the adapter boar[...]

  • Page 53

    4 – T roubleshooting 49 (Refer to the motherboard’ s user guide if you cannot locate the IDE controller ports.) Locating the Primary IDE Contr oller Port Mounting the Compact Flash Card Mount the adapter board securely inside the firewall’ s case; find a place where the components fit easily and securely , and where the IDE cable can easil[...]

  • Page 54

    GB-Ware Firewall Product Guide 50 Connecting the IDE Cable Insert one end of the IDE cable into the primary IDE controller port with the red-striped side of the cable lined up with pin #1 of the IDE controller port. Insert the other end of the IDE cable into the IDE port of the adapter board with the red-striped side of the IDE cable nearest to the[...]

  • Page 55

    4 – T roubleshooting 51 Note Those upgrading from GNA T Box System Software version 2.x or lower should record all configuration data and use it as a guide to enter new configuration data manually . Y ou may use the web interface to print the configuration or manually record it. 1) Once you have installed GB-W are on a Compact Flash card or ha[...]

  • Page 56

    GB-Ware Firewall Product Guide 52 4) GBAdmin will connect to the GB-W are firewall and prompt you for the user ID and password selected during installation; when suc- cessfully authenticated, GBAdmin will load the GB-W are configura - tion. 5) Merge the old configuration with the GB-W are firewall configuration. Click File then Merge . A warni[...]

  • Page 57

    4 – T roubleshooting 53 Note If your NIC is not listed, it’s possible that you are upgrading from an older version in which that NIC was supported. Please contact support with any questions. If you are placing the configuration on new hardware with different NICs, you will need to select your cards. 10) Save the configuration to the firewall[...]

  • Page 58

    GB-Ware Firewall Product Guide 54[...]

  • Page 59

    Index 55 Index Symbols 4-pin power port 52. A activation code 34, 41, 47. adapter board 49. ADSL 5. asterisk. See wildcard symbol. auto-detect IDE 45. B Baud Rate 43. boot 39, 44. browsers Internet Explorer ii. C cable 40, 41, 43. cable modem 34. case-sensitive 43. compact flash 10, 16, 42. installation 49. Compaq 45. components 5, 51. COM port 43[...]

  • Page 60

    GB-Ware Firewall Product Guide 56 log 43. Login 26. login 43. lost 43. lost 43. lower case 43. M mailing list 8. memory 43, 44. memory slice 16, 43. Microsoft 40. modem 6, 43. mounting posts 49, 50. N network configuration 40. Note 9, 23. notes & warnings 4, 5, 6, 10, 35. warning 50. null-modem 43. number , serial 34. O online help 40. P parit[...]