Cyberoam User Guide - Sophos

Transcription

Cyberoam User GuideVersion 10Document version 1.0 – 10.6.6.042 - 24/11/2017

Cyberoam User GuideImportant NoticeCyberoam Technologies Pvt. Ltd. has supplied this Information believing it to be accurate and reliable at the time of printing, butis presented without warranty of any kind, expressed or implied. Users must take full responsibility for their application of anyproducts. Cyberoam Technologies Pvt. Ltd. assumes no responsibility for any errors that may appear in this document.Cyberoam Technologies Pvt. Ltd. reserves the right, without notice to make changes in product design or specificatio ns.Information is subject to change without notice.USER’S LICENSEUse of this product and document is subject to acceptance of the terms and conditions of Cyberoam End User LicenseAgreement (EULA) and Warranty Policy for Cyberoam UTM Appliances.You will find the copy of the EULA at http://www.cyberoam.com/documents/EULA.html and the Warranty Policy for CyberoamUTM Appliances at http://kb.cyberoam.com.RESTRICTED RIGHTSCopyright 1999 - 2015 Cyberoam Technologies Pvt. Ltd. All rights reserved. Cyberoam, Cyberoam logo are trademark ofCyberoam Technologies Pvt. Ltd.Corporate HeadquartersCyberoam House,Saigulshan Complex, Opp. Sanskruti,Beside White House, Panchwati Cross Road,Ahmedabad - 380006, GUJARAT, INDIA.Tel: 91-79-66216666Fax: 91-79-26407640 Website: www.cyberoam.comPage 1 of 500

Cyberoam User GuideContentPreface . 6Introduction. 10Administrative Interfaces . 11Web Admin Console . 11Command Line Interface (CLI) Console . 11Cyberoam Central Console (CCC) . 12Web Admin Console . 13Web Admin Language . 13Supported Browsers . 14Login procedure . 15Log out procedure . 16Menus and Pages. 17Page . 19Icon bar . 20List Navigation Controls . 21Tool Tips . 21Status Bar . 21Common Operations. 22Getting Started . 24Dashboard . 26Alert Messages Doclet . 26Appliance Information Doclet . 27System Usage Doclet . 27System Status Doclet . 28Recent Web Viruses Detected Doclet . 28Recent Mail Viruses Detected Doclet . 29Gateway Status Doclet . 29Recent Malware Alerts Doclet . 30License Information Doclet . 31Recent FTP Viruses Detected Doclet . 31Recent IPS Alerts Doclet . 31Today Usage Summary Doclet . 32DoS Attack Status Doclet. 32Web Traffic Analysis Doclet . 33HA Details Doclet . 33System . 35Administration . 35Settings . 36Appliance Access . 40Administrator Profiles. 42Profile Parameters . 43Access Denied Page . 44Password . 45Central Management . 46API . 49Configuration . 51Time . 51Notification . 53Messages . 57Configuring Web Proxy Settings . 66Enabling and Configuring Parent Proxy. 67Configuring Captive portal . 68Theme . 72Maintenance . 73Backup & Restore. 73Page 2 of 500

Cyberoam User GuideFirmware . 76Licensing . 78Services . 81Updates. 83Import Export . 85SNMP . 87SNMP terms . 87Agent Configuration . 88Community . 89V3 User . 91Certificate . 92Certificate . 93Certificate Authority . 99Certificate Authority Parameters . 101Certificate Revocation List (CRL) . 104Adding a new CRL. 105Diagnostics . 106Tools . 106System Graph . 110Packet Capture. 118Connection List. 125Consolidated Troubleshoot Report (CTR) . 128Objects . 129Hosts . 130IP Host . 130IP Host Group. 134MAC Host . 136FQDN Host. 138FQDN Host Group . 140Country Host . 142Country Host Group . 145Services . 147Services . 147Service Group . 150Schedule. 152Schedule . 152File Type . 154Network . 156Interface. 156Interface . 157VLAN . 169Link Aggregation Group . 175IP Tunnel . 179Zone. 182Wireless WAN. 186Status. 187Settings . 188Gateway . 193Gateway . 194Static Route . 204Unicast . 204Multicast . 206Source Route . 209Dynamic Route . 211RIP . 212OSPF . 217BGP . 224PIM-SM . 226Routing Information . 227DNS . 240Page 3 of 500

Cyberoam User GuideDNS Host Entry . 243Address Assignment for IPv6 Devices . 245Router Advertisement . 246DHCP . 251DHCP Server. 252DHCP Lease . 257DHCP Relay . 258ARP-NDP . 260Neighbors . 261Dynamic DNS . 266Identity . 269Authentication . 270Authentication Server . 271Configuring External Authentication Server . 2731. Configuring Active Directory Server Settings . 2732. Configure LDAP Authentication Settings . 2853. Configure RADIUS Server Settings . 2894. Configure TACACS Server Settings . 292Firewall. 294Configuring Authentication for VPN Traffic .

Part XII QoS This part covers how to configure and manage bandwidth through QoS policy that allocates and limits the maximum bandwidth usage of the user and controls web and network traffic. Part XIII Logs & Reports T