Cyberoam V7 User Guide User Guide

PDF

নথি

বিজ্ঞাপন

User Guide

Version 7

Document version 7411-1.0-23/02/2006

Cyberoam User Guide

IMPORTANT NOTICE

Elitecore has supplied this Information believing it to be accurate and reliable at the time of printing, but is presented without warranty of any kind, expressed or implied. Users must take full responsibility for their application of any products. Elitecore assumes no responsibility for any errors that may appear in this document.

Elitecore reserves the right, without notice to make changes in product design or specifications. Information is subject to change without notice.

SOFTWARE LICENSE

The software described in this document is furnished under the terms of Elitecore’s software license agreement.

Please read these terms and conditions carefully before using the software. By using this software, you agree to be bound by the terms and conditions of this license. If you do not agree with the terms of this license, promptly return the unused software and manual (with proof of payment) to the place of purchase for a full refund.

LIMITED WARRANTY

Software: Elitecore warrants for a period of ninety (90) days from the date of shipment from Elitecore: (1) the media on which the Software is furnished will be free of defects in materials and workmanship under normal use; and (2) the Software substantially conforms to its published specifications except for the foregoing, the software is provided AS IS. This limited warranty extends only to the customer as the original licenses. Customers exclusive remedy and the entire liability of Elitecore and its suppliers under this warranty will be, at Elitecore or its service center’s option, repair, replacement, or refund of the software if reported (or, upon, request, returned) to the party supplying the software to the customer. In no event does Elitecore warrant that the Software is error free, or that the customer will be able to operate the software without problems or interruptions.

DISCLAIMER OF WARRANTY

Except as specified in this warranty, all expressed or implied conditions, representations, and warranties including, without limitation, any implied warranty or merchantability, fitness for a particular purpose, noninfringement or arising from a course of dealing, usage, or trade practice, and hereby excluded to the extent allowed by applicable law.

In no event will Elitecore or its supplier be liable for any lost revenue, profit, or data, or for special, indirect, consequential, incidental, or punitive damages however caused and regardless of the theory of liability arising out of the use of or inability to use the product even if Elitecore or its suppliers have been advised of the possibility of such damages. In the event shall Elitecore’s or its suppliers liability to the customer, whether in contract, tort

(including negligence) or otherwise, exceed the price paid by the customer. The foregoing limitations shall apply even if the above stated warranty fails of its essential purpose.

In no event shall Elitecore or its supplier be liable for any indirect, special, consequential, or incidental damages, including, without limitation, lost profits or loss or damage to data arising out of the use or inability to use this manual, even if Elitecore or its suppliers have been advised of the possibility of such damages.

RESTRICTED RIGHTS

Elitecore Technologies Ltd. Information supplies by Elitecore Technologies Ltd. Is believed to be accurate and reliable at the time of printing, but Elitecore Technologies assumes no responsibility for any errors that may appear in this documents. Elitecore Technologies reserves the right, without notice, to make changes in product design or specifications. Information is subject to change without notice

CORPORATE HEADQUARTERS

Elitecore Technologies Ltd.

904 Silicon Tower,

Off. C.G. Road,

Ahmedabad – 380015, INDIA www.cyberoam.com

Cyberoam User Guide

Guide Sets _________________________________________________________________________ 5

Technical Support ___________________________________________________________________ 6

Typographic Conventions _____________________________________________________________ 7

Preface ______________________________________________________________________ 8

Guide Organization __________________________________________________________________ 9

Cyberoam Basics ____________________________________________________________ 10

Benefits of Cyberoam _______________________________________________________________ 10

Accessing Cyberoam________________________________________________________________ 10

Log on & log off from the Cyberoam Web Interface ______________________________________ 11

Getting Started ________________________________________________________________________ 15

Dashboard_________________________________________________________________________ 19

Management __________________________________________________________________________ 20

Setting up Users _____________________________________________________________ 20

Define Authentication _______________________________________________________________ 20

Define User ________________________________________________________________________ 22

Setting up Groups ___________________________________________________________ 31

Setting up Host Groups ______________________________________________________ 36

Traffic Discovery ____________________________________________________________ 37

Live Connections report _____________________________________________________________ 37

Today’s Connection History __________________________________________________________ 44

Firewall ____________________________________________________________________ 115

DoS Settings______________________________________________________________________ 121

Bypass DoS Settings_______________________________________________________________ 124

Walled Garden ____________________________________________________________________ 126

Manage Data _____________________________________________________________________ 128

Restrict Management Console Access________________________________________________ 134

Cyberoam User Guide

Reset Console Password ___________________________________________________________ 136

Client Services ____________________________________________________________________ 137

Customize Access Deny messages __________________________________________________ 142

Upload Corporate logo _____________________________________________________________ 143

Customize Login message __________________________________________________________ 144

HTTP Proxy Management____________________________________________________ 145

Manage HTTP Proxy _______________________________________________________________ 145

Configure HTTP Proxy _____________________________________________________________ 146

Define External Cache _____________________________________________________________ 148

Routing Policy_____________________________________________________________________ 150

Services ___________________________________________________________________ 152

Monitoring Bandwidth Usage ________________________________________________ 153

Migrate Users ______________________________________________________________ 158

Migration from PDC server __________________________________________________________ 158

Migration from External file__________________________________________________________ 159

Customization________________________________________________________________________ 161

Schedule ___________________________________________________________________ 161

Define Schedule___________________________________________________________________ 161

Manage Schedule _________________________________________________________________ 163

Delete Schedule ___________________________________________________________________ 165

Application Protocols _______________________________________________________ 166

Manage Standard Application protocol________________________________________________ 166

Define Custom Application protocol __________________________________________________ 168

Manage Custom Application protocol _________________________________________________ 170

Delete Custom Application protocol __________________________________________________ 172

Categories _________________________________________________________________ 173

Web Category_____________________________________________________________________ 174

File Type Category ________________________________________________________________ 183

Application Protocol Category _______________________________________________________ 187

Product Licensing & Updates ________________________________________________ 193

Product Version information _________________________________________________________ 193

Upgrade Cyberoam ________________________________________________________________ 194

Module license ____________________________________________________________________ 195

Company information ______________________________________________________________ 196

Download __________________________________________________________________ 197

Clients ___________________________________________________________________________ 197

Print Manager _____________________________________________________________________ 198

Documentation ____________________________________________________________________ 199

Appendix A – Web Categories _______________________________________________ 200

Appendix B – Application Protocol Categories ________________________________ 203

Appendix C - Interpreting Bandwidth usage graphs for Multiple Gateways ______ 205

Total Data transfer Graph ___________________________________________________________ 205

Gateway wise Composite Total Data transfer: _________________________________________ 205

Appendix D – Mail server deployment scenarios ______________________________ 206

Case 1 - Mail server hosted in DMZ __________________________________________________ 206

Case 2 - Mail server hosted externally at ISP and users individually accessing their mailboxes 211

Case 3 - Mail server hosted externally at ISP and internal intrapop server accessing the mailbox

and users accessing the internal POP3/SMTP server ___________________________________ 216

Case 4 - Mail server hosted internally and IP address is forwarded _______________________ 221

Menu wise Screen and Table Index ___________________________________________ 228

Cyberoam User Guide

Guide Sets

Guide Describes

Installation & Registration Guide Installation & registration process

User Guide

Part I – Getting Started

Part II – Management

Detailed statistics – Reports

How to start using Cyberoam

Management and Customization of Cyberoam

Detailed reports

Console Guide

Windows Client Guide

Linux Client Guide

HTTP Client Guide

Console Management

Installation & configuration of Cyberoam Windows

Client

Installation & configuration of Cyberoam Linux

Client

Installation & configuration of Cyberoam HTTP

Client

Analytical Tool Guide

Cyberoan - LDAP Integration guide

Cyberoam – ADS Integration

Guide

Cyberoam – PDC Integration

Guide

Data transfer Management

Guide

Using the Analytical tool for diagnosing and troubleshooting common problems

Configuration for integrating LDAP with Cyberoam for external authentication

Configuration for integrating ADS with Cyberoam for external authentication

Configuration for integrating PDC with Cyberoam for authentication

Configuration and Management of user based data transfer policy

Mail Management Configuration and Management of Mail server

Multi Link Manager User Guide Configuration of Multiple Gateways, load balancing and failover

VPN Management Implementing and managing VPN

Configuring and implementing anti virus solution Cyberoam Anti Virus

Implementation Guide

Cyberoam Anti Spam

Implementation Guide

Configuring and implementing anti spam solution

Printer Usage Management

Guide

Printer Installation and

Configuration Guide

Configuration and Management of user based printing quota policy

Installation and Configuration of Elitecore Print

Manager

Cyberoam User Guide

Technical Support

You may direct all questions, comments, or requests concerning the software you purchased, your registration status, or similar issues to Customer care/service department at the following address:

Corporate Office eLitecore Technologies Ltd.

904, Silicon Tower

Off C.G. Road

Ahmedabad 380015

Gujarat, India.

Phone: +91-79-26405600

Fax: +91-79-26407640

Web site: www.elitecore.com

Cyberoam contact:

Technical support (Corporate Office): +91-79-26400707

Email: [email protected]

Web site: www.cyberoam.com

Visit www.cyberoam.com

for the regional and latest contact information.

Cyberoam User Guide Contents

Typographic Conventions

Material in this manual is presented in text, screen displays, or command-line notation.

Item

Server

Client

User

Username

Part titles

Convention

Bold and shaded font typefaces

Example

Machine where Cyberoam Software - Server component is installed

Machine where Cyberoam Software - Client component is installed

The end user

Username uniquely identifies the user of the system

Report

Topic titles Shaded font typefaces

Introduction

Subtitles Bold & Black typefaces

Notation conventions

Navigation link Bold typeface

Group Management → Groups → Create it means, to open the required page click on Group management then on Groups and finally click Create tab

Lowercase italic type

Name of a particular parameter / field / command button text

Cross references

Hyperlink in different color

Enter policy name, replace policy name with the specific name of a policy

Click Name to select where Name denotes command button text which is to be clicked refer to Customizing User database Clicking on the link will open the particular topic

Notes & points to remember

Bold typeface between the black borders

Note

between the black borders

Prerequisite details

Cyberoam User Guide Preface

Preface

Welcome to the user’s guide of Cyberoam, eLitecore Technologies Ltd.’s integrated Internet

Security Solution.

Congratulations on the purchase of integrated Internet Security Solution - ‘Cyberoam’ and welcome to the Cyberoam family.

This Guide helps you manage and customize Cyberoam to meet your organization’s various requirements including creating groups and users and assigning policies to control internet and printer access.

Default Cyberoam Web Interface Username is ‘cyberoam’ and password is ‘cyber’.

It is recommended that you change the default password immediately after installation to avoid unauthorized access.

Cyberoam User Guide Preface

Guide Organization

This Guide provides information regarding the administration, maintenance, and customization of

Cyberoam.

How do I search for relevant content?

For help on how to perform certain task use

Contents

For help on a specific menu or screen function use

Menu wise – Screen and Table Index

This Guide is organized into three parts:

Part I – Getting started

It describes how to start using Cyberoam after successful installation and registration successfully.

Part II Management

It describes how to define groups and users to meet the specific requirements of your

Organization. It also describes how to manage and customize Cyberoam.

1. Define Authentication process.

2. Manage Groups and Users. Describes how to add, edit and delete Users and User Groups

3. Manage & Customize Policies. Describes how to define and manage Surfing Quota policy,

Access Time policy, Internet Access policy, Bandwidth policy, Data transfer policy and

Printing Quota policy

4. Manage Host groups. Describes how to add, edit and delete host groups

5. Manage Cyberoam server

6. Manage Cache server

Part III Customization

Customize Services, Schedules and Categories. Describes how to create and manage Categories,

Schedules and Services

Upgrade Cyberoam

Cyberoam User Guide Cyberoam Basics

Cyberoam Basics

Cyberoam’s integrated Internet security solution is purpose-built to meet the unified threat management needs of corporate, government organizations and educational institutions. It also provides assistance in improving Bandwidth management, increasing Employee productivity and reducing legal liability associated with undesirable Internet content access.

Benefits of Cyberoam

1. Boost Employee productivity by a. Blocking access to the sites like Gaming, Shopping, news, Pornography

2. Conserve bandwidth by a. Controlling access to non-productive site access during working hours b. Controlling rate of uploading & downloading of data

3. Load balancing over multiple links a. Improved User response time d. Reduced bandwidth bottlenecks

4. Conserve Printer usage

5. Enforce acceptable Internet use, printer use and mailing policies

6. Comprehensive, easy-to-use reporting tool enabling the IT managers to compile reports on

Internet and other resources usage and consumption patterns

Accessing Cyberoam

Two ways to access Cyberoam:

1. Web based Administration console

• Used for policy configuration

• Managing users, groups and policies

• Managing System resources like printer, mail server

• Managing Firewall rules

• Managing Bandwidth

• Viewing bandwidth graphs as well as reports

2. Text based Administration/telnet console

• Used for Network and System configuration (setting up IP Addresses, setting up gateway)

• Managing Cyberoam application a) Using Console Interface via remote login utility – TELNET b) Direct Console connection - attaching a keyboard and monitor directly to Cyberoam server

Accessing the Web Interface

Cyberoam Web Interface (GUI) access requires Microsoft Internet Explorer 5.5 or above and

Display settings as True color (32 bits)

Note

Cyberoam Web Interface access requires Internet Explorer 5.5 or above and Display settings as True color (32 bits)

If you have logged on for the first time & not yet registered Cyberoam, refer to Installation guide for registration.

Change the default password, the first time you log on. Refer to Manage Users, Change Personal details

Cyberoam User Guide Cyberoam Basics

Accessing Console via remote login utility - TELNET

Access Cyberoam Console with the help of TELNET utility. To use TELNET, IP Address of the

Cyberoam server is required.

To start the TELNET utility:

Click Start, and then click Run

In Open, type TELNET xxx.xxx.x.xxx

Click OK, opens a console login window and prompts to enter Password

Default password for Cyberoam TELNET console is “admin”.

Screen - Console access

Screen - Console login screen

Log on & log off from the Cyberoam Web Interface

The Log on procedure verifies validity of user and creates a session until the user logs off.

Log on procedure

To get the log in window, open the browser and type IP Address in browser’s URL box. A dialog box appears prompting you to enter username and password to log on. Use the default user name

‘cyberoam’ and password ‘cyber’ to log on if you are logging in for the first time.

Asterisks are the placeholders in the password field.

Log on Methods

HTTP log on

To open unencrypted login page, in the browser’s Address box, type http://<IP address of Cyberoam>

Cyberoam User Guide Cyberoam Basics

Screen - HTTP login screen

HTTPS log on

Cyberoam provides secured communication method which encrypts the User log on information and which prevents unauthorized users from viewing the user information. For this, Cyberoam uses https protocol.

The secure Hypertext Transfer Protocol (HTTPS) is a communication protocol designed to transfer encrypted information between computers over the World Wide Web. HTTPS is http using a

Secure Socket Layer (SSL). A secure socket layer is an encryption protocol invoked on a Web server that uses HTTPS.

HTTPS protocol opens a secure hypertext transfer session with the specified site address.

To open login over secure HTTP, type https://<IP address of Cyberoam>

Cyberoam User Guide Cyberoam Basics

Screen - HTTPS login

Screen Elements Description

Login

User name

Password

Log on to

Specify user login name.

If you are logging on for the first time after installation, please use default username ‘cyberoam’

Specify user account Password

If you are logging on for the first time after installation, please use default password ‘cyber’

To administer Cyberoam, select ‘Web Admin Console’

Logs on to Web Admin Console

Click Login

Refer to Installation Guide for more details.

Table - Login screen elements

Cyberoam User Guide Cyberoam Basics

Screen - Registration screen

If Registration page opens, use Online or Manual registration process for registering the copy of

Cyberoam. Refer to Installation guide - Registration for detail on registration process.

Web console Authorization and Access control

By default, Cyberoam has four types of user groups:

Administrator group

Administrator group User can create, update and delete system configuration & user information.

Administrator can create multiple administrator level users.

Manager group

Manager group User can only view the reports.

User group

User group User is the user who accesses the resources through Cyberoam.

Clientless group

User group User who can bypass Cyberoam Client login to access resources. Cyberoam itself takes care of login of this level user.

For Administrators and Managers, IP address based access restriction/control can be implemented. Refer to Access Configuration to implement.

Log out procedure

To avoid un-authorized users from accessing Cyberoam, log off after you have finished working. This will end the session and exit from Cyberoam.

Management

Cyberoam User Guide

Getting Started

Setting up Users

Once you have configured network and registered the copy of Cyberoam, you can start using

Cyberoam.

1. Start monitoring

Once you have installed and placed Cyberoam, default policy is automatically applied which will allow complete network traffic to pass through Cyberoam. This will allow you to monitor user activity in your Network based on default policy.

2. View Cyberoam Reports

Monitor your Network activities using Cyberoam Reports.

To view Reports, log on to Cyberoam Reports from Web Management Console using following

URL: http://<Internal IP Address>

To log on, use default username ‘cyberoam’ and password ‘cyber’.

Screen – Reports Log on screen

View your organization’s surfing pattern from Web Surfing

ÆOrganization wise report

Management

Cyberoam User Guide Setting up Users

Screen – Web surfing reports

View your organization’s general surfing trends from Trends

Æ Web Trends report

View your organization’s Category wise surfing trends from Trends

Æ Category Trends report

Screen – Trends report

3. Discover Network Application Traffic (Only if ‘Traffic Discovery’ add-on module is registered)

Detect your network traffic i.e. applications and protocols accessed by your users.

To view traffic pattern of your network, log on to Cyberoam Web Management Console using following URL: http://<Internal IP Address>

To log on, use default username ‘cyberoam’ and password ‘cyber’.

View amount of network traffic generated by various applications from Traffic Discovery

Æ Live

Connections

ÆApplication wise

Management

Cyberoam User Guide Setting up Users

Screen – Traffic Discovery

4. Configure for User name based monitoring

As Cyberoam monitors and logs user activity based on IP address, all the reports generated are also IP address based. To monitor and log user activities based on User names, you have to configure Cyberoam for integrating user information and authentication process.

Integration will identify access request based on User names and generate reports based on

Usernames.

If your Network uses Active Directory Services and users are already created in ADS, configure

Cyberoam to communicate your ADS. Refer to Cyberoam – ADS Integration guide for more details.

If your Network uses Windows Domain Controller, configure for Cyberoam to communicate with

Windows Domain Controller. Refer to Cyberoam – PDC Integration guide for more details.

5. Customize

You can create additional policies to meet your organization’s requirement.

Cyberoam allows you to:

7. Control individual user surfing time by defining Surfing quota policy. Refer to Policy

Management-Surfing Quota policy for more details.

8. Schedule Internet access for individual users by defining Access time policy. Refer to

Policy Management-Access time policy for more details.

9. Control web access by defining Internet Access policy. Refer to Policy Management-

Management

Cyberoam User Guide Setting up Users

Internet Access policy for more details.

10. Allocate and restrict the bandwidth usage by defining Bandwidth policy. Refer to Policy

Management-Bandwidth policy for more details.

11. Limit total as well as individual upload and/or download data transfer by defining data transfer policy. Refer Data transfer policy for more details. You will be able to define Data transfer policy only if ‘Data transfer Management’ add-on module is registered.

12. Restrict printer usage by defining Printing Quota policy. Refer to Policy Management-

Printing Quota policy for more details. You will be able to define Printing policy only if

‘Printing Policy’ add-on module is registered.

Note

You can change the default policy as per your organization’s requirement. Refer to Policy Management

– Internet Access Policy for more details.

Management

Cyberoam User Guide Setting up Users

Dashboard

As soon as you logon to the Web based Administration Console, Cyberoam Dashboard is displayed.

Dashboard provides one complete solution to many analytical needs. Using the "dashboard" concept of information presentation, Cyberoam makes it easy to view access data from multiple perspectives, allowing management to identify patterns and potential areas of risk and productivity loss. It will empower organizations to plan, understand, integrate and leverage strategy all from a single page report.

The goal of dashboard is to provide fast access to monitor and analyze employee Internet usage.

As a result, managers gain an unprecedented ability to report on and manage a wide specturm of the data and applications that employees use during their working hours.

Dashboard is the answer to – ‘Why can't Cyberoam automatically show me things that will help me with what I'm doing, instead of making me search around for them?’

Dashboard is divided into following section:

1. HTTP Traffic Analysis

2. User Surfing pattern

3. Usage Summary

4. System Resources

5. Recent Mail Viruses detected

6. Recent HTTP Viruses detected

7. Installation Information

8. System Status

9. DoS attack status

10. Recent IDP Alerts

Setting up Users

Management

Cyberoam User Guide

Management

Setting up Users

Define Authentication

Cyberoam provides policy-based filtering that allow defining individual filtering plans for various users of your organization. You can assign individual policies to users (identified by IP address), or a single policy to number of users (Group).

Cyberoam detects users as they log on to Windows domains in your network via client machines.

Cyberoam can be used with a Windows Domain controller or Active Directory.

To filter Internet requests based on policies assigned, Cyberoam must be able to identify a user making a request.

When the user attempts to access, Cyberoam requests a user name and password and authenticates the user's credentials before giving access. User level authentication can be performed using the local user database on the Cyberoam, an External ADS server, LDAP or

Windows Domain Controller.

Integrate with ADS, LDAP or Domain Controller if external authentication is required.

If your network uses an Active Directory service, configure Cyberoam to communicate with ADS.

Refer to Cyberoam - ADS Integration Guide for details.

If your network uses a Windows Domain controller, configure Cyberoam to communicate with

Domain controller. Refer to Cyberoam - PDC Integration for details.

If your Network uses LDAP, configure for Cyberoam to communicate with LDAP server. Refer to

Cyberoam – LDAP Integration for details.

Cyberoam can prompt for user identification if your network does not use Windows environment.

Refer to Cyberoam Authentication for details.

Cyberoam Authentication

When Cyberoam is installed in Non PDC environment, it is necessary to create users and groups in Cyberoam.

Before users log on to Cyberoam, Administrator has to create all the users in Cyberoam, assign them to a Group and configure for Cyberoam authentication. Refer to Define Group and Define

User for details on creating groups and users.

When user attempts to log on, Cyberoam server performs authentication i.e. User is authenticated directly by the Cyberoam server.

Management

Cyberoam User Guide Setting up Users

Select

User Æ Authentication Settings to open configuration page

Screen – Cyberoam Authentication

Screen Elements Description

Configure Authentication & Integration parameters

Integrate with

Default Group

Update button

Select Cyberoam as the authentication server

Allows to select default group for users

Click Default Group list to select

Updates and saves the configuration

Table – Cyberoam Authentication screen elements

Cyberoam User Guide

Define User

Setting up Users

Define User

User

Users are identified by an IP address or a user name and assigned to a group. All the users in a group inherit all the group policies. Refer to Policy Management to define new policies.

User types

Cyberoam supports three types of Users:

1. Normal

2. Clientless

3. Single Sign on

Normal User has to logon to Cyberoam. Requires Cyberoam client (client.exe) on the User machine or user can use HTTP Client component and all the policy-based restriction can be applied.

Clientless Does not require Cyberoam client component (client.exe) on the User machines.

Symbolically represented as User name (C)

Single Sign on If User is configured for Single sign on, whenever User logs on to Windows, he/she is automatically logged to the Cyberoam. Symbolically represented as User name (S)

Use the below given decision matrix to decide which type of the user should be created.

Decision matrix for creation of User

Feature Normal User Clientless User Single Sign on User

User Login required

Type of Group

Normal

Clientless

Apply Login restriction

Apply Surfing Quota policy

Apply Access Time policy

Yes

Apply Bandwidth policy Yes

Apply Internet Access policy Yes

Yes

Apply Printing Quota policy

(Only if ‘Printing Policy’

Yes Yes Yes

add-on module is

registered)

Apply Data Transfer policy

(Only if ‘Data Transfer

Yes No Yes

Management’ add-on

module is registered)

Table - Create User - Decision matrix

Cyberoam User Guide

Setting up Users

Define User

Add a User

Prerequisite

• Group created – for Normal Users only

Select

User Æ User Æ Add User to open add user page

Screen - Add User

Screen Elements

User Information

Name

Description

Username

Specify name of the User

Allows maximum of 30 characters

Can be any combination of A – Z, a – z, ‘_’, 0 – 9

Specify a name that uniquely identifies user & used for logging

Allows maximum of 30 characters

Can be any combination of A – Z, a – z, ‘_’, 0 – 9

Confirm Password

Windows

Allows maximum of 15 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Specify password again for conformation

Should be same as typed in the Password field

Domain Displays Authentication Server IP Address

Cyberoam User Guide

Setting up Users

Define User

Screen Elements

Controller

Only if Authentication is done by Windows

Domain Controller

User Type

Description

Specify the user group type. Depending on user group type default web console access control will be applied. Refer to Web console

Authorization and Access control for more details.

Available option:

Administrator

Manager

User

Clientless

Click User type list to select

Refer to Add Clientless User on how to create clientless user simultaneous login(s) user allowed

OR Specify number of concurrent logins allowed to the user

Unlimited

Allows unlimited concurrent logins to the user

The setting specified will override the setting specified in client preference.

For example,

If in Client preferences, the number of concurrent logins allowed is 5 and here you have specified 3, then this particular user will be allowed to login from 3 machines concurrently and not from 5 machines.

Mail Quota size

(Only if ‘Mail

Management’ add-on module is registered)

Specify Mail box size (in MB) for the user

User will not be able to receive mails if the mail box size exceeds the specified size

Mail quota size specified will override the global Mail quota size specified in Mail services

For example,

If global Mail quota size specified in Mail services is 10 MB and here you have specified 3 MB, then the mail box size for this particular user will be 3 MB only and not 10 MB.

Group Information

Group

View details link

Specify in Group in which user is to be added. User will inherit all the group policies.

Click Group list to select

Open a new Window and displays details of the selected Group

Refer to View Group details table for more details

Login Restriction

Select any one option Allows to apply login restriction

Available options

1) All Nodes

Allows Users to login from all the nodes in the network

Cyberoam User Guide

Setting up Users

Define User

Screen Elements Description

Personal details link Allows to enter personal details of the user

Personal information

Only if Personal details link is clicked

Birth date Specify date of birth of user

Click Calendar to select date

Email Specify Email Id of User

Add button

2) Group Nodes only

Allows Users to login only from the nodes assigned to the group

3) Selected Nodes only

Allows Users to login from the selected nodes only. Refer to Apply

Login Node Restriction for details. Nodes from which the User is allowed login can be specified after creating the user also.

Click to select

Review button

Adds user

Click to add

Opens a new page and displays the user details for reviewing.

Review details before adding to make sure details entered are correct.

Click to review

Click Submit to add user

Table - Add User screen elements

View Group details table

Screen Elements

Group name

Surfing Quota policy

Access Time policy

Internet Access policy

Bandwidth policy

Description

Displays name of the Group

Displays name of the Surfing Quota policy assigned to the group

Displays name of the Access Time policy assigned to the group

Displays name of the Internet Access policy assigned to the group

Displays name of the Bandwidth policy assigned to the group

Displays name of the Data Transfer policy assigned to the group

Data transfer policy

Option available only if

‘Data Transfer

Management’ add-on module is registered

Printing Quota policy

Option available only if

‘Printing policy’ add-on module is registered

Allotted time (HH:mm)

Expiry date

Used minutes

Displays name of the Printing Quota policy assigned to the group

Displays total allotted surfing time to User

Displays User policy Expiry date

Displays total time used by the user in minutes

At the time of creation of user, it will be displayed as 0:0

Cyberoam User Guide

Close button

Apply Login Node Restriction

Setting up Users

Closes window

Define User

Table - View Group details screen elements

Screen Elements

Select Node(s) button

Only if the option ‘Selected

Node(s) Only’ is selected

Host Group name

Description

Opens a new page and allows to select the node

Click to select the Node for restriction

Host group from which the Node/IP address is to be added

Click Host Group name list to select

OK button

Cancel button

Multiple nodes can also be selected

Click to apply restriction

Cancels the current operation

Table - Apply Login Node Restriction screen elements

Cyberoam User Guide

Add Clientless users

Setting up Users

Add Clientless users

Clientless Users are the Users who can bypass Cyberoam Client login to access resources. It is possible to add a single clientless user as well as more than one clientless user at a time.

When you add multiple clientless users, users are represented by IP addresses and not by the

User name.

Add multiple clientless users

Creates Clientless users with given IP addresses as their username. Change the Username of the clientless users if required.

Prerequisite

• Clientless Group created

Select

User Æ Clientless Users Æ Add Multiple Clientless Users to open create user page

Screen - Add multiple Clientless users

Screen Elements

Host Group Details

Host Group name

Description

Specify name of Host group

Allows maximum of 50 characters

Cyberoam User Guide

Setting up Users

Add Clientless users

Screen Elements Description

Is Host group public

Bandwidth policy

Description

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Public IP address is routable over the Internet and do not need

Network Address Translation (NAT)

Click to Select, if IP Addresses assigned to the Users are public

IP Addresses

By default, group bandwidth policy is applied to the user but you can override this policy.

Specify Bandwidth Policy to be applied.

Click Bandwidth Policy list to select

Click View details link to view details of the policy

Specify full description

Allows maximum of 250 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Machine details

From – To

Machine name

Select Group

Group

Create button

Specify range of IP Address that will be used by Users to login

Specify Machine name

Specify Group in which User is to be added

Click Group list to select

Adds multiple Clientless Users

Table - Add multiple Clientless users screen elements

Cyberoam User Guide

Add single Clientless user

Add Clientless users

Add Single Clientless User

Prerequisite

• Group

• Host group created

Select

User Æ Clientless Users Æ Add Single Clientless User to open create user page

Screen - Add single Clientless user

Screen Elements Description

User Information

Name Specify name of the User

Allows maximum of 30 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Username Specify a unique name used for logging

Allows maximum of 30 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Activate on Creation Specifies whether user should be logged in automatically after registration

Options:

Yes – Automatically logs in as soon as registered successfully i.e. becomes a live user

Cyberoam User Guide

Screen Elements Description

Add Clientless users

Add Single Clientless User

No – User is registered but is in De-active mode. Activate user before first log in. Refer to Activate Clientless User for more details

Displays User type User type

User Group Information

Group Specify Group in which User is to be added

View details link

Click Group list to select

Open a new window and displays details of the selected group

Click to view details

Login Restriction

Allowed Login from

IP Address

Specifies IP address from where User can login

Click Select Node, opens a new window and allows to select IP

Address

Refer to Select Node table for more details

Personal details link Allows to enter the personal details of the user

Personal information

Only if Personal details link is clicked

Birth date Specify date of birth of User

Cancel button

Use Popup Calendar to enter date

Specify Email Id of User

Registers a clientless user

Cancels current operation

Table - Create single Clientless user screen elements

Select Node table

Screen Elements

Host Group name

Description

Allows to select the Host group

Click Host Group name list to select

Apply Restriction button User will be allowed to login from the selected node only.

Click to apply login restriction

Close button Closes window

Table - Select Node screen elements

NOTE

Duplicate Usernames cannot be created

Make sure that subnets or individually defined IP addresses do not overlap

Create Group before assigning it to a User. Refer to Create Groups to create new groups

Setting up Groups

Cyberoam User Guide

Setting up Groups

Add a New Group

Group

Group is a collection of users having common policies and a mechanism of assigning access of resources to a number of users in one operation/step.

Instead of attaching individual policies to the user, create group of policies and simply assign the appropriate Group to the user and user will automatically inherit all the policies added to the group.

This simplifies user configuration.

A group can contain default as well as custom policies.

Various policies that can be grouped are:

1. Surfing Quota policy which specifies the duration of surfing time and the period of subscription

2. Access Time policy which specifies the time period during which the user will be allowed access

3. Internet Access policy which specifies the access strategy for the user and sites

4. Bandwidth policy which specifies the bandwidth usage limit of the user

5. Data Transfer policy which specifies the data transfer quota of the user (only if ‘Data

Transfer policy’ add-on module is registered)

6. Printing Quota policy which specifies the printing quota of the user (only if ‘Printer Policy’ add-on module is registered)

Refer to Policy Management for more details on various policies.

Group types

Two types of groups:

1. Normal

2. Clientless

Normal A user of this group need to logon to Cyberoam using the Cyberoam Client to access the

Internet

Clientless A user of this group need not logon to Cyberoam using the Cyberoam Client to access the Internet. Access control is placed on the IP Address. Symbolically represented as Group

name (C)

Use the below given decision matrix to decide which type of group will best suited for your network configuration.

Decision matrix for creation of Group

Feature

Logon into Cyberoam required

Type of User

Normal

Clientless

Apply Login restriction

Apply Surfing Quota policy

Apply Access Time policy

Apply Bandwidth policy

Normal Group Clientless Group

Yes

Setting up Groups

Cyberoam User Guide Add a New Group

Apply Internet Access policy

Apply Printing Quota policy (Only if ‘Printing

Policy’ add-on module is registered)

Yes Yes

Apply Data transfer policy (Only if ‘Data

Transfer Management’ add-on module is registered)

Yes No

Table - Group creation - Decision matrix

Add a New Group

Prerequisite

• All the policies which are to be added to the Group are created

• Host group created if login is to be restricted from a particular Node/IP Address

Select

Group Æ Add Group to open add group page

Screen - Create Group

Setting up Groups

Cyberoam User Guide Add a New Group

Screen Elements

Create Group

Group name

Description

Group type

Surfing Quota Policy

Only if Group type is ‘Normal’

Access Time Policy

Only if Group type is ‘Normal’

Specify Group name. Choose a name that best describes the Group.

Allows maximum of 30 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Specify type of Group

Click Group type to select

Select Normal if Group members are required to log on using

Cyberoam Client

Select Clientless if Group members are not required to log on using

Cyberoam Client

Specify Surfing Quota Policy for Group

Click Surfing Quota Policy list to select

By default, ‘Unlimited policy’ is assigned to the ‘Clientless’

Group type

Refer to Surfing Quota Policy for more details

Specify Access Time policy for Group

Click Access Time Policy list to select

By default, ‘Unlimited policy’ is assigned to ‘Clientless’ Group type

Refer to Access Time Policy for more details policy

Bandwidth Policy

Data Transfer policy

Available only if

‘Data transfer

Management’ addon module is registered

Printing Quota policy

Available only if

‘Printing policy’ add-on module is registered

Login Restriction

Click Internet Access policy list to select

Refer Internet Access policy for details

Specify Bandwidth Policy for Group

Click Bandwidth Policy list to select

Refer Bandwidth Policy for details

Specify data transfer policy for Group

Click Data Transfer policy list to select

Refer Data Transfer Policy for details

Specify Printing Quota policy for Group

Click Printing Quota policy list to select

Refer Printing Quota Policy for details

Setting up Groups

Cyberoam User Guide

Screen Elements Description

Add a New Group option Group

Available options

1) Allowed login from all nodes

Allows Users defined under the Group to login from all the nodes

2) Allowed login from the selected nodes

Allow Users defined under the Group to login from the selected nodes only.

Specifies IP address from where User can login

Click Select Node, opens a new window and allows to select IP

Address

Refer to Select Node table for more details Refer to Apply Login

Node restriction for more details

Click to select

Opens a new page and allows to select the node

Click to select the Node

Select Node button

Only if ‘Allowed

Login from selected node’ option is selected for Login restriction

Create button

Cancel button

Creates Group

Cancels the current operation and returns to the Manage Group page

Table - Create Group screen elements

Note

It is not necessary to add user at the time of the creation of Group. Users can be added even after the creation the group.

Setting up Groups

Cyberoam User Guide

Apply Login Node Restriction

Screen – Apply Login Node Restriction

Add a New Group

Screen Elements Description

Host Group name Host group from which the Node/IP address is to be added

Click Host Group name list to select

Select User will be allowed to login from the selected nodes only.

Click to select Node

Multiple nodes can also be selected

OK button

Cancel button

Applies login restriction and closes the window

Click to apply restriction

Cancels the current operation

Table - Apply Login Node Restriction screen elements

Setting up Host Groups

Cyberoam User Guide

Setting up Host Groups

Create a new Host Group

Host group is a collection of a single IP addresses or range of IP addresses. Add IP addresses/Nodes at the time of creation of Host group or after the creation.

Create a new Host Group

Prerequisite

• Bandwidth policy created

Select

Group Æ Host Group Æ Add Host Group

Screen - Create Host group

Screen Elements Description

Host Group Details

Host Group name Specify name of Host group

Allows maximum of 50 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Is Host group Public IP address is routable over the Internet and do not need Network public Address Translation (NAT)

Click to Select, if the IP Addresses assigned to Users are Public IP addresses

Bandwidth policy Specify Bandwidth Policy for host group

Click Bandwidth Policy list to select

Click View details link to view details of the policy

Description Specify full description

Allows maximum of 250 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Machine details

From – To

Machine name

Create button

Specify range of IP Address that will be used by Users to login

Specify machine name

Add a new Host group

Table - Add Host group screen elements

Cyberoam User Guide Traffic Discovery

Traffic Discovery

"Network security" is controlling who can do what on your network. And control is all about detecting and resolving any activity that doesnot align with your organization's policies.

Traffic discovery provides a comprehensive, integrated tool to tackle all your Network issues. It performs network traffic monitoring by aggregating the traffic passing through Cyberoam. It helps in determining the amount of network traffic generated by Application, IP address or User.

View your network's traffic statistics, including protocol mix, top senders, top broadcasters, and error sources. Identify and locate bandwidth hogs and isolate them from the network if necessary.

Analyze performance trends with baseline data reports.

The discovered traffic pattern is presented in terms of

• Application

• User

• LAN IP Address

Apart from details of live connection’s traffic pattern, Cyberoam also provides current date’s connection history.

Live Connections report

Application wise

Application wise Live Connections displays list of Applications running on the network currently. It also displays which user is using the application currently and total data transferred using the application.

Select

Traffic Discovery Æ Live Connections Æ Application wise

Screen – Application wise Live connections

Cyberoam User Guide

Screen Elements

Application Name

Traffic Discovery

Description

Applications running on network

Click Total Connections to view the connection details for selected Application. Refer to Connection details for selected

Application

Click to view list of Users using respective Applications

Click Total Connections to view the connection details for selected Application. Refer to Connection details for selected

Application

Click to view WAN IP Address wise Connection details for selected Application

Click to view Destination Port wise Connection details for selected Application

Data Transfer details

Upload Transfer

Download Transfer

Displays data uploaded using the Application

Displays data downloaded using the Application

(Kbit/sec)

Downstream Bandwidth

(Kbits/sec)

Connection Details

Displays downstream bandwidth used by Application

LAN Initiated

WAN Initiated

Displays number of connections initiating/requesting the

Application

Click to view the connection details for the respective Application for each connection

Displays number of connections initiated by LAN IP Address for the Application

Displays number of connections initiated by WAN IP Address for the Application

Table – Application wise Live connections screen elements

Cyberoam User Guide

Connection details for selected Application

Traffic Discovery

Report columns

Established Time

LAN IP Address

LAN PORT

WAN IP Address

WAN PORT

Description

Time when connection was established

LAN IP Address from which the connection for the application was established

LAN port through which connection was established for the application

WAN IP Address to which connection was established

WAN port to which connection was established for the application

Upload Transfer

Download Transfer

Data uploaded using the Application

Data downloaded using the Application

Upstream Bandwidth Upstream bandwidth used by Application

Downstream Bandwidth Downstream bandwidth used by Application

Connection details for selected LAN IP Address and Application

Report columns

Established Time

LAN IP Address

LAN Port

WAN IP Address

WAN Port

Description

Time when connection was established

LAN IP Address from which the connection for the application was established

LAN port through which connection was established for the application

WAN IP Address to which connection was established

WAN port to which connection was established for the application

Upload Transfer

Download Transfer

Data uploaded using the Application

Data downloaded using the Application

Upstream Bandwidth Upstream bandwidth used by Application

Downstream Bandwidth Downstream bandwidth used by Application

Cyberoam User Guide

WAN IP Address wise Connection details for selected Application

Traffic Discovery

Report columns Description

WAN IP Address

Total Connections

LAN Initiated

WAN Initiated

WAN IP Addresses to which Connection was established by the selected Application

Number of connections established to the WAN IP Address

Number of connections initiated from LAN

Number of connections initiated from WAN

Upload Transfer

Download Transfer

Data uploaded during the connection

Data downloaded during the connection

Upstream Bandwidth Upstream bandwidth used by Application

Downstream Bandwidth Downstream bandwidth used by Application

Destination Port wise Connection details for selected Application

Report columns Description

Destination Port Destination ports to which Connection was established by the selected Application

Number of connections established through the destination port Total Connections

LAN Initiated

WAN Initiated

Upload Transfer

Download Transfer

Number of connections initiated from LAN

Number of connections initiated from WAN

Data uploaded during the connection

Data downloaded using the connection

Upstream Bandwidth Upstream bandwidth used by Application

Downstream Bandwidth Downstream bandwidth used by Application

Cyberoam User Guide Traffic Discovery

User wise

User wise Live Connections displays which user is using which Application and is consuming how much bandwidth currently.

Select

Traffic Discovery Æ Live Connections Æ User wise

Screen Elements

User Name

Screen – User wise Live connections

Description

Network Users requesting various Applications

Click Total Connections to view the connection details for selected

User.

Click to view list of Applications used by the respective users

Click Total Connections to view the connection details for selected

User and Application

Click to view WAN IP Addresses wise Connection details for selected User

Click to view Destination ports wise Connection details for selected User

Data Transfer details

Upload Transfer

Download Transfer

Displays data uploaded by the User

Displays data downloaded by the User

(Kbit/sec)

Downstream Bandwidth

(Kbits/sec)

Connection Details

Total Connections

Displays downstream bandwidth used by User

LAN Initiated

WAN Initiated

Displays number of connections initiated by the User

Click to view connection details initiated by the User for each connection

Displays number of connections initiated from LAN IP Address by the User

Displays number of connections initiated from WAN IP Address by the User

Table – User wise Live connections screen elements

Cyberoam User Guide Traffic Discovery

LAN IP Address wise

LAN IP Address wise Live Connections displays list of Applications currently accessed by LAN IP

Address.

Select

Traffic Discovery Æ Live Connections Æ LAN IP Address wise

Screen –LAN IP Address wise Live connections

Screen Elements

LAN IP Address

Description

LAN IP Address requesting various Applications

Click Total Connections to view the connection details for selected LAN IP Address.

Click to view list of Applications requested by the respective

LAN IP Address

Click Total Connections to view the connection details for selected LAN IP Address and Application

Click to view WAN IP Addresses wise Connection details for selected LAN IP Address

Click to view Destination ports wise Connection details for selected LAN IP Address

Data Transfer details

Upload Transfer

Download Transfer

Displays data uploaded from the LAN IP Address

Displays data downloaded from the LAN IP Address

(Kbit/sec)

Downstream Bandwidth

(Kbits/sec)

Connection Details

Total Connections

Displays downstream bandwidth used by the LAN IP Address

Displays number of connections initiated by the LAN IP Address

Cyberoam User Guide Traffic Discovery

Screen Elements Description

LAN Initiated

WAN Initiated

Click to view connection details initiated by the LAN IP Address for each connection

Displays number of connections initiated from LAN IP Address

Displays total number of connections initiated from WAN IP

Address

Table –LAN IP Address wise Live connection screen elements

Apart from the live connection details, details of the connections that are closed can be also be viewed. The details for all the connections that are closed during last 24 hours are shown. You can also select the history duration.

Traffic Discovery

Cyberoam User Guide

Today’s Connection History

Application wise

It displays list of Applications accessed during the selected duration and by user and/or LAN IP

Address.

Select

Traffic Discovery Æ Today’s Connection History Æ Application wise

Screen – Today’s Connection History – Application wise

Screen Elements Description

Select Start time and Stop time

Start time & Stop time Select the history duration

Refresh Data button Click to refresh the data after the start time or stop time is changed to get the latest data

Application Name Applications running on network

Click Total Connections to view the connection details for selected Application. Refer to Connection details for selected

Application

Click to view list of users using respective Applications

Click Total Connections to view the connection details for selected LAN IP Address and Application. Refer to Connection details for selected LAN IP Address and Application

Click to view WAN IP Address wise Connection details for selected Application

Click to view Destination Port wise Connection details for selected Application

Data Transfer details

Upload Transfer

Download Transfer

Displays data uploaded using the Application

Displays data downloaded using the Application

Traffic Discovery

Cyberoam User Guide Today’s Connection History

Screen Elements Description

(Kbit/sec)

Downstream Bandwidth

(Kbits/sec)

Connection Details

Displays downstream bandwidth used by Application

LAN Initiated

WAN Initiated

Displays number of connections initiating/requesting the

Application

Click to view the connection details for the respective Application for each connection

Displays number of connections initiated by LAN IP Address for the Application

Displays number of connections initiated by WAN IP Address for the Application

Table – Today’s Connection History – Application screen elements

Traffic Discovery

Cyberoam User Guide

User wise

Today’s Connection History

It displays list of Users who has logged on to network during the selected duration and accessed which applications.

Select

Traffic Discovery Æ Today’s Connection History Æ User wise

Screen – Today’s Connection History – User wise

Screen Elements Description

Select Start time and Stop time

Start time & Stop time Select the history duration

Refresh Data button Click to refresh the data after the start time or stop time is changed to get the latest data

User Name Network Users requesting various Applications

Click Total Connections to view the connection details for selected User.

Click to view list of Applications used by the respective users

Click Total Connections to view the connection details for selected User and Application

Click to view WAN IP Addresses wise Connection details for selected User

Click to view Destination ports wise Connection details for selected User

Data Transfer details

Upload Transfer

Download Transfer

Displays data uploaded by the User

Displays data downloaded by the User

Traffic Discovery

Cyberoam User Guide

Screen Elements Description

Today’s Connection History

(Kbit/sec)

Downstream Bandwidth

(Kbits/sec)

Connection Details

Total Connections

LAN Initiated

WAN Initiated

Displays downstream bandwidth used by User

Displays number of connections initiated by the User

Click to view connection details initiated by the User for each connection

Displays number of connections initiated from LAN IP Address by the User

Displays number of connections initiated from WAN IP Address by the User

Table – Today’s Connection History – User wise screen elements

Traffic Discovery

Cyberoam User Guide

LAN IP Address wise

Today’s Connection History

It displays list of Applications accessed during the selected duration by each LAN IP Address.

Select

Traffic Discovery Æ Today’s Connection History Æ LAN IP Address wise

Screen – Today’s Connection History – LAN IP Address wise

Screen Elements Description

Select Start time and Stop time

Start time & Stop time Select the history duration

Refresh Data button Click to refresh the data after the start time or stop time is changed to get the latest data

LAN IP Address LAN IP Address requesting various Applications

Click Total Connections to view the connection details for selected LAN IP Address.

Click to view list of Applications requested by the respective

LAN IP Address

Click Total Connections to view the connection details for selected LAN IP Address and Application

Click to view WAN IP Addresses wise Connection details for selected LAN IP Address

Click to view Destination ports wise Connection details for selected LAN IP Address

Data Transfer details

Upload Transfer

Download Transfer

Displays data uploaded from the LAN IP Address

Displays data downloaded from the LAN IP Address

(Kbit/sec)

Downstream Bandwidth

(Kbits/sec)

Connection Details

Displays downstream bandwidth used by the LAN IP Address

Traffic Discovery

Cyberoam User Guide Today’s Connection History

Screen Elements Description

Total Connections

LAN Initiated

WAN Initiated

Displays number of connections initiated by the LAN IP Address

Click to view connection details initiated by the LAN IP Address for each connection

Displays number of connections initiated from LAN IP Address

Displays total number of connections initiated from WAN IP

Address

Table – Today’s Connection History – LAN IP Address wise screen elements

Policy Management

Cyberoam User Guide

Policy Management

Surfing Quota policy

Cyberoam allows controlling access to various resources with the help of Policy.

Cyberoam allows defining following types of policies:

1. Control individual user surfing time by defining Surfing quota policy. See Surfing Quota policy for more details.

2. Schedule Internet access for individual users by defining Access time policy. See Access time policy for more details.

3. Control web access by defining Internet Access policy. See Internet Access policy for more details.

4. Allocate and restrict the bandwidth usage by defining Bandwidth policy. See Bandwidth policy for more details.

5. Limit total as well as individual upload and/or download data transfer by defining data transfer policy. Refer Data Transfer Management User Guide for more details. You will be able to define Data transfer policy only if ‘Data transfer Management’ add-on module is registered. Refer Installation and Registration User Guide for more details on how to register.

6. Restrict printer usage by defining Printing Quota policy. Refer Printing Policy for more details. You will be able to define Printing Quota Policy only if ‘Printing Policy’ add-on module is registered. Refer Installation and Registration User Guide for more details on how to register.

Cyberoam comes with several predefined policies. These predefined policies are immediately available for use until configured otherwise.

Cyberoam also lets you define customized policies to define different levels of access for different users to meet your organization’s requirements.

Policy Management

Cyberoam User Guide

Surfing Quota policy

Surfing quota policy defines the duration of Internet surfing time. Surfing time duration is the allowed time in hours for a Group or an Individual User to access Internet.

Surfing quota policy:

• Allocates Internet access time on cyclic or non-cyclic basis

• Single policy can be applied to number of Groups or Users

Cyberoam comes with several predefined policies. These predefined policies are immediately available for use until configured otherwise. Cyberoam also lets you define customized policies to define different levels of access for different users to meet your organization’s requirements.

Create Surfing Quota policy

Select

Policies Æ Surfing Quota Policy Æ Create policy to open the create page

Screen - Create Surfing Quota policy

Screen Elements Description

Create Surfing Quota policy

Name Specify policy name. Choose a name that best describes the policy

Allows maximum of 40 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Cycle type

Cycle hours

Only if cycle type is not ‘Non

Specify cycle type

Available options

Daily – restricts surfing hours up to cycle hours defined on daily basis

Weekly – restricts surfing hours up to cycle hours defined on weekly basis

Monthly – restricts surfing hours up to cycle hours defined on monthly basis

Yearly – restricts surfing hours up to cycle hours defined on yearly basis

Non-cyclic – no restriction

Specify upper limit of surfing hours for cyclic type policies

At the end of each Cycle, cycle hours are reset to zero i.e. for

Policy Management

Cyberoam User Guide Surfing Quota policy

Screen Elements Description cyclic’

‘Weekly’ Cycle type, cycle hours will to reset to zero every week even if cycle hours are unused

Allotted Days

Unlimited Days

(hours:minutes)

Unlimited Time

Restricts surfing days

Specify total surfing days allowed to limit surfing hours

Does not restrict surfing days and creates Unlimited Surfing Quota policy.

Click to select i.e. restricts total surfing time to allotted time

Specify surfing time in Hours & minutes

Select if you do not want to restrict the total surfing time

Click to select time with group members or not members

Click to share

Policy Description Specify full description of the policy

Allows maximum of 255 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Create button Creates policy

Table - Create Surfing Quota policy screen elements

Note

Policies with the same name cannot be created

Policy Management

Cyberoam User Guide Surfing Quota policy

Update Surfing Quota policy

Select

Policies → Surfing Quota policy → Manage policy and click Policy name to be modified

Screen - Update Surfing Quota policy

Screen Elements Description

Edit Surfing Quota policy

Name

Cycle Type

Displays policy name, modify if required

Displays Cycle type, modify if required

Cycle Hours

Allotted Days

Unlimited Days

Allotted time

Unlimited time

Shared allotted time with group members

Displays allotted Cycle hours

Displays allotted days, modify if required

Displays allotted time in hours, minutes, modify if required

Policy Description

Update button

Cancel button

Displays whether the total allotted time is shared among the group members or not, modify if required

Displays description of the policy, modify if required

Updates and saves the policy

Cancels the current operation and returns to Manage Surfing

Quota policy page

Table - Update Surfing Quota policy screen elements

Note

The changes made in the policy become effective immediately on updating the changes.

Policy Management

Cyberoam User Guide

Delete Surfing Quota policy

Surfing Quota policy

Prerequisite

• Not assigned to any User or Group

Select

Policies → Surfing Quota policy → Manage policy to view list of policies

Screen - Delete Surfing Quota policy

Screen Elements Description

Del

Select All

Delete button

Select policy for deletion

Click Del to select

More than one policy can also be selected

Select all the policies for deletion

Click Select All to select all the policies

Deletes all the selected policies

Table - Delete Surfing Quota policy screen elements

Policy Management

Cyberoam User Guide

Access Time policy

Access time is the time period during which user can be allowed/denied the Internet access. An example would be “only office hours access” for a certain set of users.

Access time policy enables to set time interval - days and time - for the Internet access with the help of schedules. See Schedules for more details.

A time interval defines days of the week and times of each day of the week when the user will be allowed/denied the Internet access.

Two strategies based on which Access time policy can be defined:

Allow strategy By default, allows access during the schedule

Deny strategy By default, disallows access during the schedule

Create Access Time policy

Prerequisite

created

Select

Policies Æ Access Time Policy Æ Create policy to open create policy page

Screen - Create Access Time policy

Screen Elements Description

Access Time policy details

Name

Schedule

Specify policy name. Choose a name that best describes the policy to be created

Allows maximum of 50 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Specify policy schedule

Users will be allowed/disallowed access during the time specified in the schedule.

Click Schedule list to select

Policy Management

Cyberoam User Guide Access Time policy

Screen Elements Description

Click View details link to view the details of selected schedule

Refer to Define Schedule on how to create a new schedule selected Schedule

Description

Create button

Allow – Allows the Internet access during the scheduled time interval

Disallow - Does not allow the Internet access during the scheduled time interval

Click to select

Specify full description of policy

Allows maximum of 255 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Creates policy

Table - Create Access Time policy screen elements

Note

Policies with the same name cannot be created

Access Time policy

Cyberoam User Guide

Update Access Time policy

Select

Policies → Access Time policy → Manage policy and Click Policy name to be modified

Screen - Update Access Time policy

Screen Elements Description

Access Time policy details

Name Displays policy name, modify if required

Schedule Displays selected policy schedule

To modify,

Click Schedule list and select new schedule

Click View details link to view details of the selected schedule

Strategy for selected Displays Schedule strategy

Schedule

Description

Save button

Cancel button

Cannot be modified

Displays description of the policy, modify if required

Saves the modified details

Cancels current operation and returns to Manage Access Time policy

Table - Update Access Time policy screen elements

Note

The changes made in the policy become effective immediately on saving the changes.

Access Time policy

Cyberoam User Guide

Delete Access Time policy

Prerequisite

• Not assigned to any User or Group

Select

Policies → Access Time policy → Manage policy to view the list of policies

Screen - Delete Access Time policy

Screen Elements Description

Del

Select All

Delete button

Select policy for deletion

Click Del to select

More than one policy can also be selected

Select all the policies for deletion

Click Select All to select all the policies

Deletes all the selected policies

Table - Delete Access Time policy screen elements

Cyberoam User Guide Internet Access policy

Internet Access policy

Internet Access policy controls user’s web access. It helps to manage web access specific to the organization’s need. It specifies which user has access to which sites or applications and allows defining policy based on almost limitless parameters like:

1. Individual users

2. Groups of users

3. Time of day

4. Location/Port/Protocol type

5. Content type

6. Bandwidth usage (for audio, video and streaming content)

When defining a policy, you can deny or allow access to an entire application category, or to individual file extensions within a category. For example, you can define a policy that blocks access to all audio files with .mp3 extensions.

Two basic types of Internet Access policy:

1. Default Allow

2. Default Disallow

Default Allow

By default, allows user to view everything except the sites and files specified in the web categories

E.g. To allow access to all sites except Mail sites

Default Disallow

By default, prevents user from viewing everything except the sites and files specified in the web categories

E.g. To disallow access to all sites except certain sites

Default Internet Access policy

Even after the successful installation and registration of Cyberoam, it so happens that not a single user is able to access Internet. This happens because Cyberoam does not allow access to the users without logging on to the Cyberoam i.e. all the access requests are dropped. To avoid this situation, until all the users are created/migrated as per the requirement and policies are created, default policy can be applied. Even in case of ADS or Windows Domain Controller integration, default policy can be applied.

Applying default policy allows all the users to surf without login depending on the default policy applied i.e. if the default policy is ‘Deny MSN Chat only’ then all the users can surf but MSN chat will not be allowed. Access denied page is displayed if user tries to access the denied sites.

All the web surfing reports generated are IP address based and not Username based, as user has actually not logged on to Cyberoam.

Cyberoam User Guide Internet Access policy

Set Default Internet Access policy

Select

Policies Æ Internet Access Policy Æ Default Policy to open the policy page

Screen - Default Internet Access policy

Screen Elements Description

Default Internet Access Policy

Policy

View details link

Update button

In Internet Access Policy list, click to select

Opens a new window and displays details of the selected policy

Click Close to close the window

Defines default Internet Access policy

Table - Default Internet Access policy screen elements

Cyberoam User Guide Internet Access policy

Create a new Internet Access policy

Select

Policies Æ Internet Access Policy Æ Create Policy to open the create policy page

Screen - Create Internet Access policy

Cyberoam User Guide Internet Access policy

Screen Elements Description

Internet Access policy details

Name

Using Template

Policy Type

Only for ‘Blank’ option in Using

Template field

Specify policy name. Choose a name that best describes the policy to be created

Allows maximum of 60 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Select a template if you want to create a new policy based on an existing policy and want to inherit all the categories restrictions from the existing policy

Select ‘Blank’ template, if you want to create a fresh policy without any restrictions. After creation you can always customize the category restrictions according to the requirement.

Select default policy type

Available options

Allow – Allows access to all the Internet sites except the sites and files specified in the Categories

Deny – Allows access to only those sites and files that are specified in the Categories

Description

Reporting

Create button

Specify full description of policy

Allows maximum of 255 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

By default, Internet usage report is generated for all the users. But

Cyberoam allows to bypass reporting of certain users.

Click ‘Off’ to create Bypass reporting Internet access policy. Internet usage reports will not include access details of all the users to whom this policy will be applied.

Click ‘On’ to create policy which will include access details of all the users in Internet usage reports to whom this policy is applied.

Creates policy and allows to add Category restriction

Refer to Add Category for more details

Internet Access policy Rules

Add button Allows to define Internet Access policy rules and assign Web, File

Type and Application Protocol Categories to Internet Access policy

Click to add

Refer to Add Internet Access policy rule for more details

Save button Saves policy

Members button

Cancel button Cancels the current operation and return to Manage Internet Access policy page

Table - Create Internet Access policy screen elements

Note

Policies with the same name cannot be created

Cyberoam User Guide

Add Internet Access policy rule

Internet Access policy

Screen – Add Internet Access policy rule

Screen Elements Description

Rule details

Select Category Displays list of custom Web, File Type and Application Protocol

Categories

Select Categories to be assigned to policy.

In Web Category list, click to select

In File Type list, click to select

In Application Protocol list, click to select

Use Ctrl/Shift and click to select multiple Categories

If ‘Webcat Engine’ add-on module is registered, all the default categories will also be listed and can be for restriction.

Strategy Allows/Disallows access to the selected Categories during the period defined in the schedule

Click Strategy box to see options and select

During Schedule Allows/Disallows access to the selected Categories according to the strategy defined during the period defined in the schedule

Allow/Disallow will depend on the strategy selected

Click Schedule box to see options and select

View details link Opens a new window and displays details of the selected schedule

Add button

Cancel button

Click to view

Click Close to close the window

Add rule to Internet Access policy

Click to add rule

Cancels the current operation

Table – Add Internet Access policy rule screen elements

Cyberoam User Guide Internet Access policy

Update Internet Access policy

Select

Policy Æ Internet Access policy Æ Manage Policy and click policy name to be modified

Screen - Update Internet Access policy

Screen Elements Description

Internet Access policy details

Name Displays policy name

Cannot be modified

Policy Type Displays policy type

Cannot be modified

Description

Reporting

Displays policy description, modify if required

By default, Internet usage report is generated for all the users. But

Cyberoam allows to bypass reporting of certain users.

Click ‘Off’ to create Bypass reporting Internet access policy.

Internet usage reports will not include access details of all the users to whom this policy will be applied.

Click ‘On’ to create policy which will include access details of all the users in Internet usage reports to whom this policy is applied.

Internet Access policy Rules

Displays list of Categories assigned to policy

In Category Name column,

represents Web Category

represents File Type Category

Cyberoam User Guide Internet Access policy

Add button

Delete button

MoveUp button

Only when more than one rule is defined

MoveDown button

Only when more than one rule is defined

Update button

Only when more than one rule is defined

Save button

Show Policy members button

Cancel button

represents Application Protocol Category

represents Default Category

represents Customized i.e. User defined Category

Allows to define a new rule

Click to add

Refer to Add Internet Access policy rule for more details

Allows to delete the selected rule(s)

Refer to Delete Internet Access policy rule for more details

Moves the selected rule one step up

Click rule that is to be moved one-step up. This will highlight selected rule.

Click MoveUp to move the selected rule one step upwards

Moves the selected rule one step down

Click rule, which is to be moved one-step down. This will highlight selected rule.

Click Move Down to move the selected rule one step downwards

Saves the modified sequence of the rules

Saves the modifications

Opens a new page and displays list of policy members

Cancels the current operation and returns to Manage Internet

Access policy page

Table - Update Internet Access policy screen elements

Delete Internet Access policy rule

Screen - Delete Internet Access policy rule

Screen Elements

Del

Description

Select rule to be deleted

Click Del to select

Cyberoam User Guide Internet Access policy

Select All

Delete button

More than one rule can also be selected

Selects all rules for deletion

Click Select All to select all rules for deletion

Delete(s) selected rules

Table - Delete Internet Access policy rule screen elements

Note

Do not forget to update after changing the order

Cyberoam User Guide policyDelete Internet Access policy

Delete Internet Access policy

Internet Access

Prerequisite

• Not assigned to any User or Group

Select

Policies Æ Internet Access policy Æ Manage Policy

Screen - Delete Internet Access policy

Screen Elements Description

Del

Select All

Delete button

Select policy for deletion

Click Del to select

More than one policy can also be selected

Selects all policies for deletion

Click Select All to select all policies for deletion

Delete(s) selected policies

Table - Delete Internet Access policy screen elements

Policy Management

Cyberoam User Guide

Bandwidth policy

Bandwidth is the amount of data passing through a media over a period of time and is measured in terms of kilobytes per second (kbps) or kilobits per second (kbits) (1 Byte = 8 bits).

The primary objective of bandwidth policy is to manage and distribute total bandwidth on certain parameters and user attributes. Bandwidth policy allocates & limits the maximum bandwidth usage of the user and controls web and network traffic.

Policy can be defined/created for:

1. Host Group

2. User

It restricts the bandwidth of a host group i.e. all the users defined under the host group share the allocated bandwidth.

It restricts the bandwidth of a particular user.

3. IP address

It restricts the bandwidth for a particular IP address.

Host Group based bandwidth policy

Policy restricts the bandwidth for a host group i.e. all the users defined under the host group will share the allocated bandwidth.

User based bandwidth policy

Policy restricts the bandwidth for a particular user. There are two types of bandwidth restriction

• Strict

• Committed

Strict

In this type of bandwidth restriction, user cannot exceed the defined bandwidth limit. Two ways to implement strict policy:

• Total (Upstream + Downstream)

• Individual Upstream and Individual Downstream

Implementation on Bandwidth specified Example

Total

(Upstream +

Downstream)

Total bandwidth is 20 kbps and upstream and downstream combined cannot cross 20 kbps

Individual Upstream Individual bandwidth i.e.

Downstream

Upstream and Downstream bandwidth is 20 kbps then either cannot cross 20 kbps

Table - Implementation types for Strict - Bandwidth policy

Strict policy – Bandwidth usage

Bandwidth usage

Individual

Shared

Bandwidth specified

For a particular user

Shared among all the users who have been assigned this policy

Table - Bandwidth usage for Strict - Bandwidth policy

Policy Management

Cyberoam User Guide

Committed

Bandwidth policy

In this type of bandwidth restriction, user is allocated the guaranteed amount of bandwidth and user can draw bandwidth up to the defined burstable limit, if available.

It enables to assign fixed minimum and maximum amounts of bandwidth to users. By borrowing excess bandwidth when it is available, users are able to burst above guaranteed minimum limits, up to the burst-able rate. Guaranteed rates also assure minimum bandwidth to critical users to receive constant levels of bandwidth during peak and non-peak traffic periods.

Guaranteed represents the minimum guaranteed bandwidth and burstable represents the maximum bandwidth that a user can use, if available.

Two ways to implement committed policy:

• Total (Upstream + Downstream)

• Individual Upstream and Individual Downstream

Implementation on Bandwidth specified Example

Total Guaranteed bandwidth

(Upstream +

Downstream)

Burstable bandwidth

Individual Upstream Individual Guaranteed and

Downstream separate for both

Guaranteed bandwidth is 20 kbps then upstream and downstream combined will get 20 kbps guaranteed (minimum) bandwidth

Burstable bandwidth is 50 kbps then upstream and downstream combined can get up to 50 kbps of bandwidth

(maximum), if available

Individual guaranteed bandwidth is 20 kbps then upstream and downstream get 20 kbps guaranteed (minimum) bandwidth individually

Individual brustable bandwidth is 50 kbps then upstream and downstream get maximum bandwidth up to 50 kbps, if available individually

Table - Implementation types for Committed - Bandwidth policy

Committed policy – Bandwidth usage

Bandwidth usage

Individual

Shared

Bandwidth specified

For a particular user

Shared among all the users who have been assigned this policy

Table - Bandwidth usage for Committed - Bandwidth policy

Policy Management

Cyberoam User Guide Bandwidth policy

IP address based bandwidth policy

Policy restricts the bandwidth for a particular IP address. It is similar to the User based policy with the same type of restrictions on Implementation type & Bandwidth usage.

Create Bandwidth policy

Select

Policies Æ Bandwidth Policy Æ Create policy to open the create policy pane

Screen - Create Bandwidth policy

Common Screen Elements

Screen Elements Description

Bandwidth Policy Details

Name

Description

Specify policy name. Choose a name that best describes the policy to be created

Allows maximum of 50 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Specify full description of policy

Allows maximum of 250 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Create button

Cancel button

Creates policy

Cancels the current operation

Table - Create Bandwidth policy - Common screen elements

Note

Policies with the same name cannot be created

Bandwidth policy

Cyberoam User Guide

Create Host Group based bandwidth policy

Select

Policies Æ Bandwidth Policy Æ Create policy to open the create policy page

Screen - Create Host group based Bandwidth policy

Screen Elements Description

Bandwidth Policy Details

Policy based on

Total Bandwidth (in KB)

Click Host Group to create host group based policy

Specify maximum amount of total bandwidth, expressed in terms of kbps.

Specified bandwidth will be shared by all the users of the host group

Maximum bandwidth limit is 4096 kbps

Table - Create Host group based Bandwidth policy screen elements

Bandwidth policy

Cyberoam User Guide Create User/IP address based Strict bandwidth policy

Create User/IP address based Strict bandwidth policy

Screen - Create User/IP based Strict Bandwidth policy

Screen Elements Description

Bandwidth Policy Details

Policy based on

Policy Type

Based on the selection creates policy for User or IP address

Click User to create User based policy

Click IP Address to create IP Address based policy

Based on the selection bandwidth restriction will be applied

In Strict type of bandwidth restriction, user cannot exceed the defined bandwidth limit

In Committed type of bandwidth restriction, user is allocated the guaranteed amount of bandwidth and can draw bandwidth up to the defined burst-able limit, if available.

Implementation on Specify implementation type of Bandwidth restriction

Click Total to implement bandwidth restriction on the Total usage

Total bandwidth

(Only for ‘TOTAL’ implementation type)

Upload Bandwidth

(Only for

‘INDIVIDUAL’ implementation type)

Download Bandwidth

(Only for

‘INDIVIDUAL’ implementation type)

Bandwidth usage

Click Individual to implement bandwidth restriction on the Individual

Upstream and Individual Downstream bandwidth usage

Specify maximum amount of Total bandwidth, expressed in terms of kbps

Minimum bandwidth allowed is 2 kbps and maximum is 4096 kbps

Specify maximum amount of Upstream Bandwidth, expressed in terms of kbps

Minimum bandwidth allowed is 2 kbps and maximum is 4096 kbps

Specify maximum amount of Downstream Bandwidth, expressed in terms of kbps

Minimum bandwidth allowed is 2 kbps and maximum is 4096 kbps

Specify whether the Bandwidth allocated is for particular user or shared among all the policy users

Table - Create User/IP based Strict Bandwidth policy screen elements

Bandwidth policy

Cyberoam User Guide Create User/IP address based Committed bandwidth policy

Create User/IP address based Committed bandwidth policy

Screen - Create User/IP based Committed Bandwidth policy

Screen Elements

Bandwidth Policy Details

Policy based on

Policy Type

Implementation on

Description

Creates policy based on the selection

Click User to create User based policy

Click IP Address to create IP address based policy

Based on the selection bandwidth restriction will be applied

In Strict type of bandwidth restriction, user cannot exceed the defined bandwidth limit

In Committed type of bandwidth restriction, user is allocated the guaranteed amount of bandwidth and can draw bandwidth up to the defined burst-able limit, if available.

Click Committed to apply committed policy

Specify implementation type for Bandwidth restriction

Click Total to implement bandwidth restriction on Total

Click Individual to implement bandwidth restriction on Individual

Upstream and Individual Downstream bandwidth

Burstable (Max)

(Only for ‘TOTAL’ implementation type)

expressed in terms of kbps

Minimum bandwidth allowed is 2 kbps and maximum is 4096 kbps

Burstable (Max) Upload Bandwidth, expressed in terms of kbps

Bandwidth

(Only for ‘INDIVIDUAL’ implementation type)

Minimum bandwidth allowed is 2 kbps and maximum is 4096 kbps

Burstable(Max) Download

Bandwidth

(Only for ‘INDIVIDUAL’ implementation type)

Bandwidth, expressed in terms of kbps

Minimum bandwidth allowed is 2 kbps and maximum is 4096 kbps

Bandwidth usage Specify whether bandwidth specified is for a particular User or

Shared among all the policy users

Table - Create User/IP based Committed Bandwidth policy screen elements

Bandwidth policy

Cyberoam User Guide

Update Bandwidth policy

Need to update Bandwidth Policy

1. Add/remove schedule based details to User/IP address based policy

2. Add/remove IP addresses attached to the IP address based policy

3. Update bandwidth values

Select

Policies → Bandwidth policy → Manage policy and click Policy name to be updated

Screen - Update Bandwidth policy

Common Screen Elements

Screen Elements Description

Bandwidth Policy details

Name Displays Bandwidth policy name, modify if required

Description

Update button

Cancel button

Displays policy description, modify if required

Updates and saves the policy

Cancels current operation and returns to the Manage

Bandwidth policy page

Table - Update Bandwidth policy Common screen elements

Bandwidth policy

Cyberoam User Guide Update Host group based bandwidth policy

Update Host group based bandwidth policy

Screen - Update Host group based Bandwidth policy

Screen Elements Description

Bandwidth Policy Details

Show members link Opens a new browser window and displays bandwidth restriction details and the member host groups of the policy

Click Close to close the window

Policy based on Displays type of policy

Cannot be modified

Default values to be applied all the time

Implementation on Displays Implementation type of the policy

Cannot be modified

Total Bandwidth (in KB) Displays total bandwidth for the group, modify if required

Maximum bandwidth limit is 4096 kbps

Table - Update Host group based Bandwidth policy screen elements

Bandwidth policy

Cyberoam User Guide

Update User based Bandwidth policy

Screen - Update User based Bandwidth policy

Screen Elements Description

Bandwidth Policy Details

Show members link

Policy based on

Opens a new browser window and displays bandwidth restriction details, schedule details and the members/users of the policy

Click Close to close the window

Displays type of policy

Cannot be modified

Default values to be applied all the time

Implementation on Displays implementation type of policy

Cannot be modified

Total Bandwidth

(Only for ‘TOTAL’ implementation type)

Upload Bandwidth (in KB)

(Only for ‘STRICT’ policy type and ‘INDIVIDUAL’ implementation type)

Download Bandwidth (in KB)

(Only for ‘STRICT’ policy type and ‘INDIVIDUAL’ implementation type)

Displays total bandwidth assigned, modify if required

Modify Upstream bandwidth value

Modify Downstream bandwidth value

Bandwidth policy

Cyberoam User Guide Update User based Bandwidth policy

Screen Elements Description

Guaranteed – Brustable Upload

Bandwidth (in KB)

(Only for ‘COMMITTED’ policy type and ‘INDIVIDUAL’ implementation type)

Modify Upstream bandwidth value

Guaranteed – Brustable Download

Bandwidth (in KB)

(Only for ‘COMMITTED’ policy type and ‘INDIVIDUAL’ implementation type)

Policy type

Modify Downstream bandwidth value

Update button

Displays policy type i.e. committed or strict

Cannot be modified

Updates the changes made in ‘Bandwidth restriction details’ and ‘Default values to be applied all the time’

Add details button Allows to attach schedule to override default bandwidth restriction

Click Add details

Refer to Attach Schedule details for more details

Table - Update User based Bandwidth policy screen elements

Attach Schedule details

Strict

Screen – Assign Schedule to User based Strict Bandwidth policy

Screen Elements Description

Bandwidth Policy Schedule wise details

Name

Policy Type

Implementation on

Displays policy name

Displays Type of bandwidth restriction

Click Strict to apply strict policy

Specify whether bandwidth restriction implementation is on Total or

Upstream & downstream individually

For Total

Total Bandwidth - Specify maximum amount of Total bandwidth, expressed in terms of kbps

For Individual

Upload Bandwidth - Specify maximum amount of Upstream bandwidth,

Bandwidth policy

Cyberoam User Guide Update User based Bandwidth policy

Screen Elements Description

Schedule

View details link

Add button

Cancel button expressed in terms of kbps

Download Bandwidth - Specify maximum amount of Downstream bandwidth, expressed in terms of kbps

Specify Schedule

Click Schedule list to select

Opens the new browser window and displays the details of the schedule selected

Click Close to close the window

Assigns schedule

Cancels the current operation

Table – Assign Schedule to User based Strict Bandwidth policy screen elements

Committed

Screen - Assign Schedule to User based Committed Bandwidth policy

Screen Elements Description

Bandwidth Policy Schedule wise details

Name

Policy Type

Displays policy name

Displays Type of bandwidth restriction

Click Committed to apply committed policy

Implementation on Specify whether bandwidth restriction implementation is on Total or Upstream

& downstream individually

For Total

Guaranteed(Min) Bandwidth - Specify minimum guaranteed amount of Total bandwidth, expressed in terms of kbps

Brustable(Max) Bandwidth - Specify maximum amount of Total bandwidth, expressed in terms of kbps

For Individual

Bandwidth policy

Cyberoam User Guide Update User based Bandwidth policy

Screen Elements Description

Schedule

View details link

Add button

Cancel button

Guaranteed(Min) Upload Bandwidth - Specify minimum guaranteed amount of

Upstream bandwidth, expressed in terms of kbps

Brustable(Max) Upload Bandwidth - Specify maximum amount of Upstream bandwidth, expressed in terms of kbps

Guaranteed(Min) Download Bandwidth - Specify minimum guaranteed amount of Downstream bandwidth, expressed in terms of kbps

Brustable(Max) Download Bandwidth - Specify maximum amount of

Downstream bandwidth, expressed in terms of kbps

Specify Schedule

Click Schedule list to select

Opens new browser window and displays the details of the schedule selected

Click Close to close the window

Assigns schedule to the bandwidth policy

Cancels the current operation

Table – Assign Schedule to User based Committed Bandwidth policy screen elements

Remove Schedule details

Screen - Remove Schedule from User based Bandwidth policy

Screen Elements Description

Select Select Schedule detail(s) for deletion

Click Select to select

More than one schedule details can also be selected

Select All Select all details for deletion

Click Select All to select all details

Remove Detail button Removes the selected schedule detail(s)

Table - Remove Schedule from User based Bandwidth policy screen elements

Bandwidth policy

Cyberoam User Guide Update IP address based bandwidth policy

Update IP address based bandwidth policy

Screen - Update IP address based Bandwidth policy

Screen Elements

Bandwidth Policy Details

Name

Policy Based on

Description

Displays policy name, modify if required

Displays policy based on

Cannot be modified

Default values to be applied all the time

Implementation on Displays implementation type

Cannot be modified

Displays total bandwidth assigned, modify if required Total Bandwidth

Only if Implemented on ‘Total’ &

Policy type is ‘Strict’

Upload bandwidth

Only if Implemented on ‘Individual’

& Policy type is ‘Strict’

Download bandwidth

Only if Implemented on ‘Individual’

& Policy type is ‘Strict’

Guaranteed Upload bandwidth

Only if Implemented on ‘Individual’ and Policy type is ‘Committed’

Burstable Upload bandwidth

Only if Implemented on ‘Individual’ and Policy type is ‘Committed’

Guaranteed Download bandwidth

Displays Upload bandwidth assigned, modify if required

Displays Guaranteed Upload bandwidth assigned, modify if required

Displays Burstable Upload bandwidth assigned, modify if required

Displays Guaranteed Download bandwidth assigned,

Bandwidth policy

Cyberoam User Guide

Cancel button

Add IP Address button

Update IP address based bandwidth policy

Screen Elements

Only if Implemented on ‘Individual’ and Policy type is ‘Committed’

Burstable Download bandwidth

Only if Implemented on ‘Individual’ and Policy type is ‘Committed’

Policy type

Update button

Description

modify if required

Displays Burstable Download bandwidth assigned, modify if required

Cannot be modified

Updates the changes made in ‘Bandwidth restriction details’ and ‘Default values to be applied all the time’

Cancels the current operation and returns to the

Manage Bandwidth policy page

Allows to attach schedule to override default bandwidth restriction

Click Add details

Refer to Attach Schedule details for details

Assigns policy to IP Address

Click Add IP Address

Refer to Add IP Address for details

Add IP Address

Screen – Add IP address to IP address based Bandwidth policy

Screen Elements Description

Host group name

Select

Select Host group from which IP address is to be added

Click Host Group name list to select

Selects IP address(s) to be added

Click Select to select

More than one IP address can also be selected

Selects all IP addresses Select All

Apply Restriction button Applies bandwidth restriction to the specified IP addresses

Click Apply restriction

Cancel button Cancels current operation

Table - Add IP address to IP address based Bandwidth policy screen elements

Bandwidth policy

Cyberoam User Guide Update IP address based bandwidth policy

Remove IP Addresses from IP Address based bandwidth policy

Screen - Remove IP address from IP address based Bandwidth policy screen elements

Screen Elements Description

Select

Select All

Select IP address to be removed

Click Select to select

More than one IP address can also be selected

Selects all IP addresses

Click Select All to select all the IP addresses

Remove IP Address button Removes selected IP addresses

Table - Remove IP address from IP address based Bandwidth policy screen elements

Note

The changes made in the policy become effective immediately on saving the changes.

Bandwidth policy

Cyberoam User Guide

Delete Bandwidth policy

Prerequisite

• Bandwidth policy not attached to any host group, user or IP address

Select

Policies → Bandwidth policy → Manage policy to view the list of policies

Screen - Delete Bandwidth policy

Screen Elements Description

Del

Select All

Delete button

Select policy for deletion

Click Del to select

More than one policy can also be selected

Selects all polices for deletion

Click Select All to select all policies

Deletes selected policies

Table - Delete Bandwidth policy screen elements

Group Management

Cyberoam User Guide

Group Management

Manage Group

Updation of Group is required to

• Change Surfing time policy applied

• Change Access time policy applied

• Change Internet Access policy applied

• Change Bandwidth policy applied

• Change Data transfer policy applied (Only if ‘Data Transfer Management’ add-on module is registered)

• Change Printing policy applied (Only if ‘Printing Policy’ add-on module is registered)

• Change the login restriction for the users of the group

• Add new users to the group

Select

Group Æ Manage Group and click the Group to be modified

Screen - Manage Group

Screen Elements

Group Information

Group Name

Description

Displays Group name, modify if required

Members button

Surfing Quota policy Displays currently attached Surfing Quota policy to the Group

Group Management

Cyberoam User Guide

Screen Elements

Change policy button

Only for ‘Normal’

Group type

Manage Group

Description

Click to change the attached Surfing Quota policy

Opens a new window and allows to select a new Surfing Quota policy

Click Change policy

Click Select to select from available policy

Click Done to confirm the selection

Click Cancel to cancel the operation

Surfing quota policy, Time allotted & Expiry date changes accordingly

(HH:mm)

Expiry date

Cannot be modified

Displays Expiry date of the Surfing Quota policy

Cannot be modified

(HH:mm)

Only if Surfing

Quota policy is

Non-Cyclic

Period Cycle

Only if Surfing

Quota policy is

Non-Cyclic

Used Surfing Time

Access Time policy

Only for ‘Normal’

Group type

Displays type of cycle

Cannot be modified

Displays total time used by the Group members

Cannot be modified

Displays currently attached Access Time policy to the Group

To change

Click Access Time policy list to select

Click View details to view the details of the policy policy

Bandwidth policy

Printing Quota policy

Available only if

‘Printing Policy’ add-on module is registered

Data Transfer policy

Available only if

‘Data Transfer

Management’ addon module is registered

Login Restriction

To change

Click Internet Access policy list to select

Click View details to view the details of the policy

Displays currently attached Bandwidth policy to the Group

To change

Click Bandwidth policy list to select

Click View details to view the details of the policy

Displays currently attached Printing Quota policy to the Group

To change

Click Printing Quota policy list to select

Click View details to view the details of the policy

Displays currently attached Data Transfer policy to the Group

To change

Click Data Transfer policy list to select

Click View details to view the details of the policy

Group Management

Cyberoam User Guide

Screen Elements Description

Display login restriction applied to the Group members

Manage Group

Restriction button

Save button

Add Members

Renew Data Transfer

(Only if Data transfer policy is

Non-cyclic and shared)

Cancel button

Refer to Change Login Restriction for more details

Saves the modified details

Allows to add members to the group

Click to add

Refer to Add Group Members for details

Renews data transfer policy of all the group memebers

Cancels the current operation

Table - Manage Group screen elements

Note

Any changes made are applicable to all the group members

Add Group Member(s)

Screen – Add Group Member

Screen Elements Description

Select Group

Username/Name starting with (* for All)

Search button

Add button

Close button

Members from the selected group will be transferred to the current group

Click to select the Group

Search user

Specify username or * to display all the users

Search user from the selected Group

Displays list of users in the selected Group

Click Add to select the user to be added

More than one user can also be selected

Adds selected user(s) to the group

Closes the window and returns to Edit Group page

Table – Add Group Member screen elements

Group Management

Cyberoam User Guide

Update Group

Need may arise to change the Group setting after the creation of Group.

Manage Group

To Click

Show Group Members Show Group Members button

Refer to View Group members for details

Change Policy button Change Surfing Quota Policy

Only for ‘Normal’ Group type

Change Access Time Policy

Change Internet Access policy

Access Time Policy list

Internet Access policy list

Change Bandwidth Policy

Change Data transfer policy (Only if ‘Data

transfer Management’ add-on module is

registered)

Bandwidth Policy list

Data transfer policy list

Change Printing Policy (Only if ‘Printing

Policy’ add-on module is registered)

Printing policy list

Change Login Restriction Change Login Restriction button

Table - Need to Update group

Show Group Members

Screen - Show Group Members

Screen Elements Description

Group name

Total members

User Name

Employee Name

Allotted Time

Expiry Date

Used Time

Close button

Displays Group name

Displays Total Group members/users

User name

Name with which the Employee logs in

Employee name

Total Allotted time to the user

Refer to Access Time policy for details

Expiry date of the policy attached to the User

Refer to Surfing time policy for details

Total time used by the User

Closes the window

Table - Show Group Members screen elements

Group Management

Cyberoam User Guide

Change Login Restriction

Manage Group

Screen - Change Login Restriction

Screen Elements Description

Login Restriction

Displays the current login restriction

Click to change the current restriction

Save button Saves if the restriction is changed

Cancel button

Select Node(s) button

Only if the option ‘Allowed login from selected nodes’ is selected

Cancels the current operation

Click to select the Node for restriction

IP address

Machine name

Allowed from

Apply Restriction button

Cancel button

Displays IP address

Displays Machine name if given

Click to select

Multiple nodes can be selected

Applies the login restriction for the group members i.e. Group members will be able to login from the above selected nodes only

Cancels the current operation

Table - Change Login Restriction screen elements

Group Management

Cyberoam User Guide

Delete Group

Prerequisite

• No Group members defined

Select

Group Æ Manage Group and view the list of Groups

Manage Group

Screen - Delete Group

Screen Elements Description

Del

Select All

Select Group(s) for deletion

Click Del to select

More than one Group can also be selected

Selects all the Groups

Click Select All to select all the Groups for deletion

Delete Group button Delete the selected Group(s)

Table - Delete Group screen elements

Management

Cyberoam User Guide

User Management

Search User

Use to search the User

Select

User Æ Search User

User Management

Screen - Search User

Screen Elements

Search User

Enter Username

Search User button

Description

Specify Search criteria

Searches all types of users based on the entered criteria

Click to search

Table - Search User screen elements

Search criteria Result

Mark

Details of the user ‘Mark’

Details of all the users whose User name or Name contains ‘a’

8 Details of all the users whose User name or Name contains ‘8’

Table - Search User – Result

Management

Cyberoam User Guide

Live User

Use Live users page to

• view list of all the currently logged on Users

• modify user details

• send message to any live user

• disconnect any live user

Select

User Æ Manage Live Users

Live User

Screen – Manage Live Users

Report Columns

Current System time

User name

Click to change the display order

Description

Displays currently connected total users (Normal,

Clientless, and Single sign on client Users)

Displays current system time in the format - Day, Month

Date,HH:MM

Displays name with which user has logged in

Click User name link to View/Update user details

Connected from

Click to change the display order

Public IP

Click Name link to view Group and policies details attached to the User

Displays IP address of the machine from which user has logged in

Send Message button

Disconnect button

Displays Public IP address if User has logged in using public IP address

Displays login time Start time

Click to change the display order

Time (HH:mm)

Upload Data transfer

Click to change the display order

Download Data transfer

Click to change the display order

Bandwidth (bits/sec)

Select

Displays total time used in hours and minutes

Displays Data uploaded

Displays Data downloaded

Displays Bandwidth used

Select User for sending message or disconnecting

More than one User can be selected

Sends message to the selected User(s)

Disconnects the selected User(s)

Table – Manage Live User screen elements

Management

Cyberoam User Guide

Manage User

Update User

Manage Normal & Single Sign on Client Users

Select

User Æ User Æ Manage Active to view the list of Users and click User name to be modified

Select

User Æ User Æ Manage Deactive to view the list of Users and click User name to be modified

Manage Clientless Users

Select

User Æ Clientless Users Æ Manage Clientless Users to view list of Users and click User name to be modified

Need may arise to change the User setting after the creation of User.

To Click

Change the personal details or password of the User

View User Accounts details

Change the User Group

Change Access Time Policy assigned to the User

Change Internet Access Policy assigned to the User

Change Bandwidth Policy assigned to the

User

Change Printing Quota policy assigned to the User

Available only if ‘Printing Policy’ addon module is registered

Change Data Transfer policy assigned to the User

Available only if ‘Data Transfer

Management’ add-on module is registered

Change Login Restriction of the User

Edit personal details/Change Password

Refer to Change Personal details for more details

User My Account

Refer to User My Account for more details

Change Group

Refer to Change Group for more details

Access Time policy list

Refer to Change Individual Policy for more details

Internet Access policy list

Refer to Change Individual Policy for more details

Bandwidth policy list

Refer to Change Individual Policy for more details

Printing Quota policy list

Refer to Change Individual Policy for more details

Data Transfer policy list

Refer to Change Individual Policy for more details

Change Login restriction button

Refer to Change Login Restriction for more details

Table - Need to Update User

Management

Cyberoam User Guide Manage User

Screen - Manage User

Screen Elements Description

Personal Information

Username Displays username with which the user logs on

Cannot be modified

Edit Personal details/Change Allows to change the User’s personal details and login

Password button password

Click Edit Personal details to change

Refer to Personal details table for more details

Birth date

User My Account button

Windows Domain Controller

Only if Authentication is done by Windows Domain Controller

Cannot be modified

Displays Birth date of User

Displays Email ID of User

Click to view/update the my account details

Refer to User My Account

Displays Authentication server address, modify if required

Management

Cyberoam User Guide Manage User

Screen Elements Description

User type

Number of simultaneous login(s) allowed

Mail quota size

Policy Information

Group

Change Group button

Displays User type

Cannot be modified

Displays whether simultaneous login is allowed or not, modify if required

Displays allotted mail quota, modify if required

Time Allotted to User (HH:mm)

User Policy Expiry Date

Time used (HH:mm)

Period time

Period Cycle

Cycle Time used

Access Time Policy

Internet Access policy

Bandwidth policy

Printing Quota policy

Available only if ‘Printing policy’ add-on module is registered

Displays Group in which User is defined

Allows to change Group of the User

Opens a new window and allows to select a new Group

Displays total time allotted to User in the format Hours:

Minutes

Cannot be modified

Displays Expiry date

Cannot be modified

Displays total time used by the User in the format

Hours: Minutes

Cannot be modified

Displays allowed total cycle hours

Displays cycle type

Displays cycle time used

Displays currently assigned Access Time policy to the

User, modify if required

To view the details of the policy

Click View details

Refer to Change Individual Policy on how to change the assigned policy

Displays currently assigned Internet Access policy to the User

To view the details of the policy

Click View details

Refer to Change Individual Policy on how to change the assigned policy

Displays currently assigned Bandwidth policy to the

User

To view the details of the policy

Click View details

Refer to Change Individual Policy on how to change the assigned policy

Displays currently assigned Printing Quota policy to the

User

To view the details of the policy

Click View details

Refer to Change Individual Policy on how to change the

Management

Cyberoam User Guide Manage User

Screen Elements Description

Total pages printed

Option available only if

‘Printing policy’ add-on module is registered

Data Transfer policy

Available only if ‘Data Transfer

Management’ add-on module is registered

assigned policy

Displays total number of pages printed by the User

Cannot be modified

Displays currently assigned Data Transfer policy to the

User

To view the details of the policy

Click View details

Refer to Change Individual Policy on how to change the assigned policy

Login Restriction

Change login restriction button

Save button

Re-apply Current policy button

Cancel button

Display currently applied login restriction to the User

Click to change user login restriction applied

Refer to Change User Login restriction for details

Saves the modified details

Reapplies all the current policies at the time of renewal

Cancels the current operation

Table - Manage User screen elements

Change Personal details

Screen - Change User Personal details

Screen Elements Description

Personal Information

Username

Name

Displays the name with which user has logged in

User name, modify if required

New password Type the new password

Re-enter New password Re-enter new password

Should be same as typed in new password

Management

Cyberoam User Guide Manage User

Screen Elements Description

Birth date

User type

Update button

Cancel button

Displays birth date, modify if required

Use Popup Calendar to change

Displays Email ID of the user, modify if required

Displays User type, modify if required

Updates the changes made

Cancels the current operation and returns to Edit User page

Table - Change User personal details screen elements

User My Account

User My Account gives details like Personal details, Internet and Printer usage of a particular user.

User can change his/her password using this tab.

Administrator and User both can view these details.

1. Administrator can view details of various users from

User → User → Manage Active and click Username whose detail is to be checked. Click User My Account, it opens a new browser window.

Screen - User My Account

2. Normal Users can view their MyAccount details from task bar.

In the task bar, double click the Cyberoam client icon and click My Account. It opens a new window and prompts for MyAccount login Username and Password.

Screen - User My Account

Opens a new window with following sub modules: Personal, Client, Account status, Logout

Management

Cyberoam User Guide

Personal

Allows viewing and updating password and personal details of the user

Change Password

Select

Personal → Change Password

Manage User

Screen - Change Password

Screen Elements Description

Change Password

Username

Current Password

Displays the name with which user has logged in

Type the current password

New password Type the new password

Re-enter New password Re-enter new password

Should be same as new password

Update Update the changes made

Table - Change password screen elements

Change Personal details

Select

Personal → Personal Detail

Screen - Change Personal details

Screen Elements Description

Personal Information

Username Displays the name with which user logs in

Cannot be modified

Name

Birth Date

Update

Displays User name, modify if required

Displays birth date

Use Popup Calendar to change

Displays Email ID of the user

Cannot be modified

Update the changes made

Table - Change Personal details screen elements

Management

Cyberoam User Guide

Account status

Allows viewing Internet & Printer usage of the user

Internet Usage

Manage User

Screen - Internet Usage Status

Screen Elements Description

Policy Information

Username

Group

Displays the name with which user has logged in

Displays the name of the User Group

Time allotted to User Displays total surfing time allotted to the user in the Surfing

(HH:mm) time policy

Expiry date Displays Expiry date

Time used by User Displays total time used by the User

(HH:mm)

Usage Information

Only if ‘Data Transfer Management’ add-on module is registered

Upload Data transfer Displays allotted, used and remaining upload data transfer

Allotted upload data transfer is configured from Data transfer policy

Download Data transfer Displays allotted, used and remaining download data transfer

Allotted download data transfer is configured from Data transfer policy

Total Data transfer Displays allotted, used and remaining total data transfer

Allotted total data transfer is configured from Data transfer policy information for month

Submit button

Select Year

Click to view the Internet usage report for the selected period

Table - Internet Usage screen elements

Report displays IP address from where user had logged in, session start and stop time, total used time, data uploaded and downloaded during the session and total data transferred during the session.

Management

Cyberoam User Guide

Printer usage

Manage User

Screen - Printer Usage

Screen Elements Description

Policy Information

Username Displays the name with which user has logged in

Group

Total pages printed by the

User

Displays name of the User Group

Pages allotted to the User Displays total printer usage allowed to the User in Printing

Quota policy

Displays total pages printed by the User information for month

Submit button

Select Year

Click to view the Printer usage report for the selected period

Table - Printer Usage screen elements

Report displays IP address from which user had logged in, time when printer was used, total number of pages printed and name of the document printed.

Note

User My Account can be access from login screen also.

Single Sign on and Clientless Users can access their My Account from login screen only.

Change Group

Screen - Change Group

Screen Elements

Policy Information

Change Group button

Description

Opens a new window and displays list of Groups

Management

Cyberoam User Guide

Select

Done button

Cancel button

Click to change the User group

Click to select

Adds User to the Group

Cancels the current operation

Table - Change Group screen elements

Change Individual Policy

Manage User

Screen Elements Description

Policy Information

Access Time policy

Internet Access policy Specify Internet Access policy. It overrides the assigned Group

Internet Access policy.

Click Internet Access policy list to select

Bandwidth policy Specify Bandwidth policy. It overrides the assigned Group

Bandwidth policy

Click Bandwidth policy list to select

Printing Quota policy

Available only if

‘Printing policy’ addon module is registered

Data Transfer policy

Available only if ‘Data

Transfer

Management’ add-on module is registered

Specify Access Time policy. It overrides the assigned Group

Access time policy.

Click Access policy list to select

Specify Printing Quota policy. It overrides the assigned Group

Printing Quota policy

Click Printing Quota policy list to select

Specify Data Transfer policy. It overrides the assigned Group

Data Transfer policy

Click Data Transfer policy list to select

Save Saves the changes

Table - Change Individual policy

Change User Login Restriction

Screen - Change User Login Restriction

100

Management

Cyberoam User Guide

Screen Elements

Login restriction

Description

Manage User button

Allowed login from all the nodes

Allows user to login from all the nodes of the Network

Allowed login from Group node(s)

Allows Users to login only from the nodes assigned to the group

Allowed login from selected node(s)

Allows user to login from the selected nodes only

To select node

Click Select node

Select a Host Group from the host Group name list

Click Select to select the IP addresses to be added to the policy

Click Select All to select all IP addresses

Click OK to assign policy to the selected IP Addresses

Click Close to cancel the operation

Save button

Cancel button

Saves the above selection

Cancel the current operation

Table - Change User Login Restriction screen elements

101

Management

Cyberoam User Guide

Delete User

User can be deleted from Active list as well as from Deactive list

To delete active user, click

User → User → Manage Active

Manage User

Screen - Delete Active User

To delete de-active user, click

User → User → Manage Deactive

Screen - Delete Deactive User

To delete Clientless user, click

User → Clientless User → Manage Clientless User

Screen - Delete Clientless User

Screen Elements

Select

Select All

Delete button

Description

Select User to be deleted

Click Select to select

More than one user can also be selected

Selects all the users for deletion

Click Select All to select all

Deletes all the selected User(s)

Table - Delete User screen elements

102

Management

Cyberoam User Guide

Deactivate User

Manage User

User is de-activated automatically in case he has overused one of the resources defined by policies assigned. In case, need arises to de-activate user manually, select

User → User →

Manage Active

Screen - Deactivate User

Screen Elements Description

Select

Select All

Deactivate button

Select User to be deactivated

Click Select to select

More than one user can be selected

Select all the users

Deactivates all the selected User(s)

Table - Deactivate User screen elements

View the list of deactivated users by

User → User → Manage Deactive

103

Management

Cyberoam User Guide Manage User

Activate User

To activate normal and Single sign on Client user, click

User → User → Manage Deactive

To activate Clientless user, click

User → Clientless Users → Manage Clientless Users

Screen - Activate Normal User

Screen - Activate Clientless User

Screen Elements Description

Select

Select All

Activate button

Select User to be activated

Click Activate to select

More than one user can be selected

Selects all the users

Click Select All to select

Activates all the selected User(s)

Table - Activate User screen elements

104

Management

Cyberoam User Guide

Host Group Management

Search Node

Use Search Node Tab to search the Node/IP address based on: IP address OR MAC address

Select

Group Æ Host Group Æ Search Node

Screen - Search Node

Example Search criteria Result

‘1’

‘192’

‘192.9.203.203 ‘

‘b’

‘4C’

‘B7’ list of nodes whose address contains ‘1’ list of nodes whose address contains ‘192’ node whose address is ‘192.9.203.203’ list of nodes whose address contains ‘B’ list of nodes whose address contains ‘4C’ list of nodes whose address contains ‘B7’

Table - Search Node results

105

Management

Cyberoam User Guide

Update Host Group

Host Group Management

Select

Group Æ Host Group Æ Manage Host Group and click host group name to be modified

Screen - Update Host group

Screen Elements Description

Host group Details

Host group name

Is host group Public

Bandwidth policy

Description

Show Nodes link

Update button

Cancel button

Displays Host group name, modify if required

Displays whether host group is of public IP addresses or not

Displays bandwidth policy attached, modify if required

Click View details link to view bandwidth restriction details and policy members

Displays description of the Host group, modify if required

Displays IP addresses defined under the Host group. Allows to

Add or Delete node

Click Show nodes

Click Add Node

Refer to Add node for more details

Click Delete Node

Refer to Delete node for more details

Updates and saves the details

Cancels the current

Table - Update Host group screen elements

106

Management

Cyberoam User Guide

Add Node

Host Group Management

Screen - Add Node

Screen Elements

Machine details

IP address

Range link

Machine name

Create button

Cancel button

Description

IP address of the Node to be added to the host group

Click to add range of IP Address

From – To - IP addresses to be included in the host group

Specify machine name

Adds the nodes to the host group

Cancels the current operation

Table - Add Node screen elements

107

Management

Cyberoam User Guide

Delete Node

Prerequisite

• Not assigned to any User

Host Group Management

Screen - Delete Node

Screen Elements Description

Select

Select All

Delete button

Select the IP address of the node for deletion

Click Select to select

More than one node can also be selected

Selects all the nodes for deletion

Click Select All to select all the nodes

Deletes the selected Node(s)

Table - Delete Node screen elements

108

Management

Cyberoam User Guide

Delete Host Group

Prerequisite

• IP address from Group not assigned to any User

Select

Group Æ Host Group Æ Manage Host Group

Host Group Management

Screen - Delete Host group

Screen Elements Description

Del

Select All

Select the Host group(s) for deletion

Click Del to select

More than one host group can also be selected

Select all the host groups for deletion

Click Select All to select all the host groups for deletion

Delete Host Group button

Delete the selected host group(s)

Table - Delete Host group screen elements

109

System Management

Cyberoam User Guide

System Management

Configure Network

Network setting consists of Interface Configuration, DHCP Configuration and DNS Configuration.

Configure Network from Console and update if required, from GUI. For details, refer to the

Installation Guide for Network.

The first step is to specify DNS (Domain Name Server), update DHCP if required and update

Interface Configuration if required from Console.

To configure, follow the steps:

Note

Before you configure network, make sure that you have the correct information and any needed IP addresses. If you configure incorrectly, the server will not be able to connect to the network (Internal or external)

Configure DNS

A Domain Name Server translates domain names to IP addresses. You can configure domain name server for your network as follows.

At the time of installation, you configured the IP address of a single primary DNS server. You can change this primary DNS server any time and also define additional DNS servers.

Select

System Æ Configure Network Æ Configure DNS

Screen – Configure DNS

110

System Management

Cyberoam User Guide Configure Network

Screen Elements Description

DNS List

Add button

Displays list of Domain name servers

List order indicates preference of DNS. If more than one

Domain name server exists, query will be resolved according to the order specified.

Allows to add IP address of Domain Name Server

Multiple DNS server can be defined

Click Add

Type IP address

Click OK

Remove button

Move Up button

Allows to remove IP address of Domain Name Server

Click IP address to select

Click Remove

Changes the order of server when more than one DNS server defined

Moves the selected Server one step up

Click IP address which is to be moved up

Click MoveUp

Move Down button Changes the order of server when more than one DNS server is defined

Moves the selected Server one step down

Click IP address which is to be moved down

Click Move Down

Save button Updates the DNS details and order, if modified

Click Save

Redirect DNS traffic to local DNS Server

redirection

Click Enable to redirect

Table - Configure DNS

To add multiple DNS repeat the above-described procedure. Use Move Up & Move Down buttons to change the order of DNS. If more than one Domain name server exists, query will be resolved according to the order specified.

111

System Management

Cyberoam User Guide

Configure DHCP

Configure Network

Dynamic Host Configuration Protocol (DHCP) is a protocol that assigns a unique IP address to a device, releases and renews the address as device leaves and re-joins the network. The device can have different IP address every time it connects to the network.

In other words, it provides a mechanism for allocating IP address dynamically so that addresses can be re-used.

Select

System → Configure Network → Configure DHCP

Screen - Configure DHCP

Screen Elements Description

DHCP Details

Network Interface

Interface IP

Netmask

IP address

From – To

Displays Network Interface i.e. Internal or External

Displays IP address assigned to Interface

Displays Netmask

Displays IP address range for clients, modify if required

The DHCP server assigns an available IP address in the range to the client upon request

Domain name

Subnet Mask

Gateway

Displays domain name for the specified subnet, modify if required

Displays subnet mask for the client/network, modify if required

Displays IP address of Gateway, modify if required

Domain name server Displays IP address of Domain name server, modify if required

Update DHCP button Updates the modified details

Table - Configure DHCP screen elements

112

System Management

Cyberoam User Guide

View Interface details

Configure Network

Use to view the Interface configuration

Select

System Æ Configure Network Æ View Interface details

Screen – Cyberoam as Gateway - View Interface details

Screen – Cyberoam as Bridge - View Interface details

Screen Elements Description

Internal Interface name

IP address

Net mask

Displays list of all the Internal Interface(s)

Internal Interface connects server with clients.

By default, eth0 is termed as Internal Interface

Displays IP address of Internal Interface

Displays Net mask

Displays list of all External Interface(s)

External Interface name External Interface connects server to the external network

By default, eth1 is termed as External Interface

IP address

Net mask

Displays IP address of External Interface

Displays Net mask

Table – View Interface details screen elements

113

System Management

Cyberoam User Guide

Manage Gateway

Gateway routes traffic between the networks and if gateway fails, communication with outside

Network is not possible. In this case, organization and its customers are left with significant downtime and financial loss.

By default, Cyberoam supports only one gateway. However, since organizations opt for multiple gateways to cope with gateway failure problems, Cyberoam also provides an option for supporting multiple gateways. However, simply adding one more gateway is not an end to the problem.

Optimal utilization of all the gateways is also necessary.

Cyberoam not only supports multiple gateways but also provides a way to utilize total bandwidth of all the gateways optimally.

At the time of installation, you configured the IP address for a default gateway. You can change this configuration any time and configure for additional gateways. You can configure for additional

Gateways only if Multiple Gateway add-on module is registered.

To view the Gateway details, select

System Æ Gateway Æ Manage Gateway(s)

Screen – Gateway Configuration

Screen Elements Description

Gateway Details

Gateway Name Displays Gateway name address

Save button

Cancel button

IP address of a device Cyberoam uses to reach devices on different

Network, typically a router

Saves the modified details

Click to save

Cancels the current operation and returns to Manage Gateway page

Click to cancel

Table - Gateway Configuration screen elements

114

System Management

Cyberoam User Guide

Firewall

Manage Gateway

A firewall protects the network from unauthorized access and typically guards the Internal network against malicious access; however, firewalls may also be configured to limit the access of Internal users.

The purpose of a firewall is to keep people on the Internet from accessing data on Internal

Network. Firewall defines certain rules that determine what traffic should be allowed in or out of the

Internal network. One can restrict access to certain IP addresses or domain names, or block certain traffic by blocking the TCP/IP ports used.

Firewall inspects both inbound and outbound Network traffic to determine, based on the configured

Rules, whether to allow the traffic or not.

Cyberoam has the above-described basic features of a firewall. Refer to Define Firewall rule to define rules.

Define Firewall rule

Select

Firewall Æ Create Firewall rule

Screen - Create Firewall rule

115

System Management

Cyberoam User Guide Manage Gateway

Screen Elements Description

Source and Destination Information

Source Domain Source Domain name, IP address or Network for which rule is to be name/IP Address defined. Generally Source address is the Internal Network address

Specify source information

Destination

Domain name/IP

Address

Destination Domain name or IP address for which the rule is to be defined.

Generally Destination address is the External address

Specify destination information

Rule type Rule can be defined for port or application traffic

Specify rule type

Select Application or Port

Applications

(Only for Application based rule)

Click Application list to select

Port details

(Only for Port based rule)

Source Port Specify source port address. Range of ports can be specified using ‘:’ e.g.

20:25

Port Type Specify whether the rule should be applied to the traffic from the source port or not

Select Include or Exclude

Destination Port Specify destination port address. Range of ports can be specified using ‘:’ e.g. 20:25

Port Type Specify whether rule should be applied to the traffic from the destination port or not

Select Include or Exclude

Network Protocol

(Only for Port based rule)

All Protocols

Rule Action

Action

All protocols

Specify what action to take for the traffic

Click Select Action list to select

Accept – Allow access

Drop – Denies access, rejects all the packets without informing the source

Proxy – Allow access

Reject – Denies access, rejects all the packets and denied access message is send to the source

Port forwarding – Allows access through forwarded port. To define port refer to ‘Only for Port forwarding’

SNAT – Allows access but after changing source IP addressi.e. source IP address is substituted by the specified IP address in packets routed from the local network to the Internet.

Masquerade (Only if Cyberoam is installed in bridge mode) – Allows

116

System Management

Cyberoam User Guide Manage Gateway

Screen Elements Description

access but after masquerading ie. source (private) IP address is substituted by the IP address of the interface connected to the Internet in packets routed from the local network to the Internet.

Network Protocol

(Only for Port based rule and when Rule Action is ‘Port Forwarding’)

Address

Forwarded Port Port to which request is to be forwarded

Description

Description

Save button

Specify full description of the rule

Allows maximum of 255 characters

Can be any combination of A-Z, a-z,’_’, 0-9

Saves the rule

Table - Create Firewall rule screen elements

117

System Management

Cyberoam User Guide Manage Gateway

Firewall Rules Examples

Source IP address/Domain name

Source

Port

Action - Accept/Proxy

* *

Destination IP address/Domain name

Destination

Port

Result

* *

192.168.1.242 * *

192.168.1.242 * 242.128.34.54 *

Access from all the IP addresses to all the IP addresses

All IP addresses are allowed to access yahoo.com

192.168.1.242 is allowed access all the

IP addresses

192.168.1.242 is allowed to access

242.128.34.54

Action – Deny

* * * *

192.168.1.242 * *

192.168.1.242 * 242.128.34.54 *

Access to all is denied

(want to stop access temporarily due to some technical reasons)

All the IP addresses are denied access to hotmail.com

192.168.1.242 is denied the access to all

192.168.1.242 is denied the access to

242.128.34.54

Action - Port forwarding

Forwarded IP – 192.168.1.58

Port – 80

* * 242.128.34.54 9090 All the connections to port 9090 should be redirected to port 80 on

192.168.1.58

Table - Firewall rules - Result

118

System Management

Cyberoam User Guide Manage Gateway

Change Firewall Rule order

Rules are ordered by their priority. When the rules are applied, they are processed from the top downwards and the first suitable rule found is applied.

Hence, while adding multiple rules, it is necessary to put specific rules before general rules.

Otherwise, a general rule might allow a packet that you specifically have a rule written to deny later in the list. When a packet matches the rule, the packet is immediately dropped or forwarded without being tested by the rest of the rules in the list.

Example of Firewall rule order for DROP action

Rule 1 – Source IP address: 192.168.1.76

Destination: www.yahoo.com

Action: Drop

Rule 2 – Source: *

Destination: www.yahoo.com

Action: Allow

Here if the order is changed i.e. Rule 2 precedes Rule 1 then Host 192.168.1.76 will be able to access www.yahoo.com

even though the DROP rule is specified.

Select

Firewall Æ Manage Firewall Rules

Click the rule whose order is to be changed

Click Moveup to move the selected rule one step up

Click MoveDown to move the selected rule one step down

Click Update to save the order

Screen – Change Firewall Rule order

119

System Management

Cyberoam User Guide

Delete Firewall Rule

Select

Firewall Æ Manage Firewall Rules

Manage Gateway

Screen - Delete Firewall rule

Screen Elements Description

Select

Select All

Delete button

Select rule for deletion

Click Select to select

More than one rule can also be selected

Select all rules

Click Select All to select all rules

Deletes all the selected rules

Click to delete

Table - Delete Firewall rule screen elements

120

System Management

Cyberoam User Guide

DoS Settings

Manage Gateway

Cyberoam provides several security options that cannot be defined by the firewall rules.

Cyberoam provides protection from several kinds of "Denial of Service attacks". These attacks disable computers and circumvent security.

Denial of Service (DoS) attack is the type of attack on a Network that brings network to its knees by flooding it with useless traffic and in which a user or organization is deprived of the services of a resource they would normally expect to have. The nature of the DoS attacks is to deny something from users or other machines/processes by the way of destructing/modifying data, by bringing down the system, or by overloading the system's servers (flooding) to the extent that service to authorized users is delayed or prevented. Many of the DoS attacks exploit the limitations in the

TCP/IP protocols.

Denial of Service attacks normally stem from external sources (such as via the Internet); or from disaffected or disgruntled employees who bear a grudge towards the company.

SYN Flood In this attack, huge amount of connections are send so that the backlog queue overflows. The connection is created when the victim host receives a connection request and allocates for it some memory resources. A SYN flood attack creates so many half-open connections that the system becomes overwhelmed and cannot handle incoming requests any more.

User Datagram Protocol (UDP) Flood This attack links two systems. It hooks up one system's

UDP character-generating service, with another system's UDP echo service. Once the link is made, the two systems are tied up exchanging a flood of meaningless data.

TCP attack This attack sends huge amount of TCP packet than the host/victim computer can handle.

ICMP attack This attack sends huge amount of packet/traffic than the protocol implementation can handle to the host/victim computer.

Drop Source Routed Packets This will block any source routed connections or any packets with internal address from entering your network.

Click Apply Flag to enable.

Disable ICMP redirect packet An ICMP redirect packet is used by routers to inform the hosts what the correct route should be. If an attacker is able to forge ICMP redirect packets, he or she can alter the routing tables on the host and possibly weaken the security of the host by causing traffic to flow via another path.

Set the flag to disable the ICMP redirection

ARP Flooding This attack sends ARP requests to the server at a very high. Because of this server is overloaded with requests and will not be able to respond to the valid requests. Cyberoam protects by dropping such invalid ARP requests.

121

System Management

Cyberoam User Guide Manage Gateway

Source threshold

Source threshold is the total number of connections/packet rate allowed to a particular user at a given time.

When the source threshold value exceeds, all the excess packets from the particular source only are dropped. Source threshold value is applicable on each client/IP address/user and not on the entire network traffic. For example, if source threshold is 2500 packets/minute and the network is of 100 users then the applicable packet rate is 2500 per user and not 2500 for 100 users.

Destination threshold

Destination threshold is the total number of connections/packet rate allowed from a particular user at a given time.

When the destination threshold value exceeds, all the excess packets from the particular destination only are dropped. Destination threshold value is applicable on each client/IP address/user and not on the entire network traffic. For example, if destination threshold is 3800 packets/minute and the network is of 100 clients then the applicable packet rate is 3800 per client and not 3800 for 100 clients.

Lockdown period

When the threshold is crossed, Cyberoam detects it as an attack. Cyberoam provides DoS attack protection by dropping all the excess packets from the particular source/destination. Cyberoam will continue to drop the packets until the attack subsides. Because Cyberoam applies threshold value per IP address, traffic from the particular source/destination will only be dropped while the rest of the network traffic will not be dropped at all i.e. traffic from the remaining IP addresses will not be affected at all.

Lockdown period = time taken to subside the attack + 30 seconds

Cyberoam will re-allow the traffic from the blocked source/destination only after 30 seconds once the attack subsides. For example, if it takes 40 seconds to subside the attack then the traffic from the said source/destination will be allowed only after 70 seconds.

Configuring high values will degrade the performance and too low values will block the regular requests. Hence, it is very important to configure appropriate values for both source and destination IP address.

122

System Management

Cyberoam User Guide

Configure DoS Settings

Select

Firewall → DoS Setting

Manage Gateway

Screen – DoS Settings

Screen Elements Description

Attack type

Source Packets Rate

(packets/minute)

Apply flag

Type of Attack

Click to view the real time updates on flooding. It displays the source IP address - which was used for flooding and IP address which was targeted.

Allowed Packets per minute (Packet rate)

If the packet rate exceeds, it is considered as an attack and the rest of the packets are dropped.

The specified packet rate is applicable to individual IP address i.e. requests per user and not globally to the complete traffic.

Set flag to control allowed number of packets dropped

Destination Packets Allowed Packets per minute (Packet rate)

Rate

(packets/minute) When the packet rate exceeds, all the excess packets are dropped for the next 30 seconds. You can call this the lockdown period which means the traffic from the destination IP address will be blocked for next 30 seconds. Because Cyberoam applies threshold value per IP address, the traffic from rest of the IP addresses is not blocked.

The specified packet rate is applicable to individual IP address i.e. requests per user and not globally to the complete traffic.

Apply flag Set flag to control allowed number of packets

Destination Packets Displays number of packets dropped at destination dropped

Update button Updates Packet rate

Updated details will be applied only after restarting the

Management services from Console

Table – DoS Settings screen elements

123

System Management

Cyberoam User Guide

Bypass DoS Settings

Manage Gateway

Cyberoam allows bypassing the DoS rule in case you are sure that the specified source/destination will never be used for flooding or want to ignore if flooding occurs from the specified source.

Create DoS bypass rule

Select

Firewall → Bypass DoS

Screen – Create DoS bypass rule

Screen Elements Description

Source and Destination Information

Source Domain Source Domain name, IP address or Network on which the DoS rule is not name/IP Address to be applied

Specify source information

Specify * if you want to bypass the complete network

Source Port Specify source port address.

Specify * if you want to bypass all the ports

DoS will not be applied on all the requests from the specified source IP address and port

Destination

Domain name/IP

Address

Destination Domain name or IP address on which the DoS rule is not to be applied

Specify destination information

Specify * if you want to bypass the complete network

Destination Port Specify destination port address.

124

System Management

Cyberoam User Guide Manage Gateway

Screen Elements Description

Specify * if you want to bypass all the ports

DoS will not be applied on all the requests from the specified destination IP address and port

Network Protocol

Create button

Select protocol whose traffic is to be bypassed for specified source to destination.

For example,

If you select TCP protocol then DoS rules will not be applied on the TCP traffic from the specified source to destination.

Creates the bypass rule

Table – Create DoS bypass rule screen elements

Delete DoS bypass rule

Select

Firewall → Bypass DoS

Screen – Delete DoS bypass rule

Screen Elements Description

Select

Select All

Delete button

Select rule for deletion

Click Del to select

More than one rule can also be selected

Select all rules

Click Select All to select all rules

Deletes all the selected rules

Click to delete

Table – Delete DoS bypass rule screen elements

125

System Management

Cyberoam User Guide

Walled Garden

Manage Gateway

Walled garden enables you to define free access to specific websites. This subset of the Internet that un-authenticated users can access is called walled garden e.g. it enables you to direct users to the company’s information. Domain, URL, and IP address define each free-access site.

From the Cyberoam perspective, walled gardens open up filters from the internal network to the external network (Internet) so a user on the internal network can access services on the external network without authenticating, hence providing free access to specific sites on the external network that are set up on the walled garden.

Note

To prevent users from navigating outside the walls, configure proxy settings

Traffic will be routed based on the Firewall rule defined for the user if the user proxy settings are not configured

Creating Allowed List

Select

Firewall → Walled Garden

Screen – Walled Garden

Screen Elements Description

Allowed List

Add button

Displays list of allowed Domains, URLs and keywords

Allows to add Domains, URLs and keywords

Click to add

Refer to Add Keywords for details

Delete button

Available only if

Allows to delete entry from the list keyword is added to the list

Table – Walled Garden screen elements

126

System Management

Cyberoam User Guide

Add Keywords

Manage Gateway

Screen – Add Keywords

Screen Elements Description

Add Keywords

Keywords

Add button

Cancel button

Specify Domain names, URLs or keywords which are to be allowed

Domain name: Specify the domain name such as www.elitecore.com

IP address : Specify IP address/addresses of the site(s) which can accessed without authentication

Keywords : Specify Keywords. Users will be able to access all the sites containing the specified keywords without authentication.

Adds Domain names, URLs and keywords to the allowed list

Cancels current operation

Table – Add Keywords screen elements

Delete Keywords

Screen – Delete Keyword

Screen Elements Description

Del

Select All

Delete button

Select Keyword to be deleted

Click Del to select

More than one keyword can also be selected

Selects the complete list

Click Select All to select whole list

Deletes all the selected keywords

Click to delete

Table – Delete Keyword screen elements

127

System Management

Cyberoam User Guide

Manage Data

Backup data

Backup is the essential part of data protection. No matter how well you treat your system, no matter how much care you take, you cannot guarantee that your data will be safe if it exists in only one place.

Backups are necessary in order to recover data from the loss due to the disk failure, accidental deletion or file corruption. There are many ways of taking backup and just as many types of media to use as well.

Cyberoam provides facility of taking regular and reliable data backup. Backup consists of all the policies, logs and all other user related information.

Cyberoam maintains five logs:

Web surfing log This log stores the information of all the websites visited by all the users

User session log Every time the user logs in, session is created. This log stores the session entries of all the users and specifies the login and logout time.

Audit log This log stores the details of all the actions performed the User administrating

Cyberoam. This log will be generated only if ‘Audit logs’ add-on module is registered.

Virus log This log stores the details of malicious traffic requests received.

Mail log This log stores the information of all the mails sent and received by all the users. This log will be generated only if ‘Mail Management’ add-on module is registered.

Set Backup Schedule

Select

System → Manage Data → Set Backup Schedule

Screen – Set Backup schedule

128

System Management

Cyberoam User Guide Manage Data

Screen Elements Description

Backup of Data only (Does not include Logs)

Backup Frequency Backup schedule. Only data backup will be taken.

Select any one

Daily – backup will be send daily

Weekly – backup will be send weekly

Monthly – backup will be send monthly

Never – backup will never be send

In general, it is best to schedule backup on regular basis.

Depending on how much information you add or change will help you determine the schedule

Incremental Backup of Log files only (in CSV format)

Backup process only copies what has changed since the last backup. This creates a much smaller backup file.

Log Select the logs for backup. Backup of log files will be taken in

CSV format.

Available logs for backup:

1. Web surfing

2. Virus

3. Mail

4. Audit (Only of ‘Audit log’ add-on module is registered)

Backup Frequency Select any one

Daily – backup will be send daily

Weekly – backup will be send weekly

Never – backup will never be send

Set Backup Mode

Backup mode Specifies how backup should be taken and send

Select

FTP backup OR

Mail backup

Only for FTP backup

FTP server

User name

Specify IP address of FTP server

Specify User name with which user has to logon to the FTP server

Only for Mail backup

To Mail Id

Save button

Specify email address to which the backup is to be mailed

Saves the configuration

Table – Set Backup Schedule screen elements

129

System Management

Cyberoam User Guide

Backup Data

Select

System → Manage Data → Backup Data

Manage Data

Screen – Backup Data

Screen Elements Description

Backup System Data

(Does not include logs)

Backup button

Download button

Only if backup is taken previously

Download the backup already taken. Also displays date and time of backup

Click Download to download

To download follow the screen instructions

Backup Log (in CSV format)

Logs

Takes the recent backup and allows to download

Click Backup data to take backup

Backup of selected logs will be taken

Select the logs for backup

1. Web surfing

2. Virus

3. Mail

4. Audit

Backup button

Download button

Only if backup is taken

previously

Takes the recent backup of logs and allows to download

Click Backup data to take the recent backup

Download the backup of logs already taken. Also displays date and time of backup

Click Download to download

To download follow the screen instructions

Table – Backup Data screen elements

130

System Management

Cyberoam User Guide Manage Data

Restore Data

With the help of restore facility, restore data from the backup taken. Restoring data older than the current data will lead to the loss of current data.

Select

System → Manage Data → Restore Data

Screen – Restore Data screen

Screen Elements Description

Upload Backup

File to upload

Browse button

Upload button

Specify name of backup file to be uploaded

Select the backup file

Uploads the backup file

Table - Restore Data screen elements

Note

Restore facility is version dependant i.e. it will work only if the backup and restore versions are same e.g. if backup is taken from Cyberoam version 7.4.0.0 then restore will work only for version 7.4.0.0 and not for any other version.

131

System Management

Cyberoam User Guide

Purge

Manage Data

Purging of data means periodic deletion of the data. Cyberoam provides Auto purge and Manual purge facility for deleting log records.

Configure Auto purge Utility

Select

System → Manage Data → Configure Auto purge utility

Screen – Configure Auto purge Utility screen

Screen Elements Description

Purge Frequency

Purge Web surfing logs every

Save button

Popup Notification

Enable Alert Popup

Specify number of days after which web surfing log should be purged automatically

Saves purging schedule configuration

Enabling Popup Notification displays alert popup before purging the logs

Click to enable

Saves popup alert configuration Save button

Download Purged Logs

Only if Logs have been Auto purged

Download button Allows to download the purged log files

Click to download

Delete button Deletes the purged log files

Table – Configure Auto purge Utility screen elements

Note

System will preserve logs only for the specified number of days and automatically purges the logs generated there after.

132

System Management

Cyberoam User Guide

Manual purge

Use manual purge to delete log records manually

Select

System → Manage Data → Purge Logs

Manage Data

Screen – Purge Logs screen

Screen

Elements

Description

Purge

Select log for purging

Web surfing logs

User session logs

Audit logs (only if Audit Log module is Enable)

Till Date Select the date from Calendar till which the selected log(s) is to be purged

Purge button Purges the selected log till the specified date

Click Purge to purge

Table - Purge Logs screen elements

Note

Auto purge option is always on

133

System Management

Cyberoam User Guide

Restrict Management Console Access

You can limit the Administration console access from certain IP addresses only by creating an access control list.

Select

System Æ ACL Æ Access Configuration to open configuration page

Screen – Access Configuration

Screen Elements

Access Restriction

Restriction

Description

Select Yes to enable IP Address Restriction

Select No to disable IP Address Restriction

Enabling restriction will allow only the specified IP addresses to access the management console

Console Access

134

System Management

Cyberoam User Guide Restrict Management Console Access

Screen Elements Description

Allows Access From

IP Address list

Only for Specific IP

Addresses

Specifies whether Administrator and Manager will be able to access Cyberoam Console from all IP Addresses or from specific IP Addresses only

Select All IP Addresses to allow access from all IP addresses

Select Specific IP Addresses to allow access from specific

IP addresses

Specifies from which IP Address Administrator and Manager will be able to access Cyberoam Console

Click Add to add IP address to the list

Click IP Address and Remove to remove IP address from the list

Click Remove All to remove all IP Addresses from list

Web Access

User Type

Allows Access From

IP Address list

Only for Specific IP

Addresses

Save button

Specifies which user has access to Web Administration

Console

Click User type to select

Specifies whether the selected User will be able to access

Cyberoam Console from all IP Addresses or from specific IP

Addresses only

Select All IP Addresses to allow access from all IP addresses

Select Specific IP Addresses to allow access from specific

IP addresses

Specifies from which IP Address selected user will be able to access Web Administration Console

Click Add to add IP address to the list

Click IP Address and Remove to remove IP address from the list

Click Remove All to remove all IP Addresses from list

Saves configuration

Table – Access Configuration screen elements

135

System Management

Cyberoam User Guide

Reset Console Password

You can change Text based Console password from Web based or Text based Console itself. To change password from Console, refer to Console guide.

Select

System → Reset Console Password

Screen - Reset Console Password

Screen Elements Description

Reset Console Password

GUI Admin Password Specify current GUI Admin password i.e. the password with which Administrator has logged on to Web Console Administration module

New password Specify new console password

Confirm New password Type again the same password as entered in the

New password field

Submit button Saves new password

Click Submit

Table - Reset Console Password screen elements

136

System Management

Cyberoam User Guide

Client Services

Client Messages

Message Management tab allows Administrator to send messages to the various users. Messages help Administrator to notify users about problems as well as Administrative alerts in areas such as access, user sessions, incorrect password, and successful log on and log off etc.

Message is send to the User whenever the event occurs.

Message can be up to 256 characters and send to the number of users at a time.

Select

System → Configure Client Settings → Customize Client Message

Screen – Customized Client Messages screen

Screen Elements

Message Key

Description

Message code

Click Message link to customize the message which will be received by user

Click Save to save the changes

Click Cancel to cancel the current operation

Configure Usage to Alert User before Expiration

Only if ‘Data Transfer Management’ add-on module is registered

Usage in transfer is remaining

Remaining usage can be entered in absolute value or in percentage

137

System Management

Cyberoam User Guide Client Services

Data Transfer (MB) Specify remaining data transfer usage when all the users should receive alert.

Eg. Absolute Remaining data transfer usage: 20 MB

User1: Total Data transfer limit (as defined in Data transfer policy):

150 MB

User2: Total Data transfer limit (as defined in Data transfer policy):

640 MB

User1 will receive alert when he is left with 20 MB of data transfer i.e has done total data transfer of 130 MB

User2 will receive alert when he is left with 20 MB of data transfer i.e has done total data transfer of 620 MB

Percentage Remaining data transfer usage: 20%

User1: Total Data transfer limit (as defined in Data transfer policy):

150 MB

User2: Total Data transfer limit (as defined in Data transfer policy):

640 MB

User1 will receive alert when he is left with 30 MB (20% of 150 MB) of data transfer i.e. has done data transfer of 120 MB

User2 will receive alert when he is left with 128 MB (20% of 640

MB) of data transfer i.e. has done data transfer of 512 MB

Cycle Data Transfer

(MB)

Specify remaining cycle data transfer usage when all the users should receive alert.

Cycle data transfer is the upper limit of total data transfer allowed to the user per cycle. User will be disconnected if the limit is reached. It is applicable the users to whom the cyclic data tanfer policies are applied.

Eg. Absolute Remaining cycle data transfer usage: 20 MB

User1: Cycle Total Data transfer limit (as defined in Data transfer policy): 150 MB

User2: Cycle Total Data transfer limit (as defined in Data transfer policy): 640 MB

User1 will receive alert when he is left with 20 MB of data transfer per cycle i.e has done data transfer of 130 MB

User2 will receive alert when he is left with 20 MB of data transfer per cycle i.e has done data transfer of 620 MB

Percentage Remaining cycle data transfer usage: 20%

User1: Cycle Total Data transfer limit (as defined in Data transfer policy): 150 MB

User2: Cycle Total Data transfer limit (as defined in Data transfer policy): 640 MB

User1 will receive alert when he is left with 30 MB (20% of 150 MB) of data transfer per cycle i.e. has done data transfer of 120 MB

User2 will receive alert when he is left with 128 MB (20% of 640

MB) of data transfer per cycle i.e. has done data transfer of 512 MB

Save details button Saves the data transfer alert configuration

Table - Customized Client Message screen elements

138

System Management

Cyberoam User Guide

List of Predefined messages

Messages Description/Reason

Client Services

AlertMessageWithData

DeactiveUser transfer is equal to the configured value.

Value can be configured from Customize Client Messages page.

Refer to Client Messages for more details

Message is sent to the user when the remaining data transfer is equal to the configured value.

Value can be configured from Customize Client Messages page.

Refer to Client Messages for more details

Administrator has deactivated the User and the User will not be able to log on

DisconnectbyAdmin

InvalidMachine

When the administrator disconnects the user from the live users page

Message is sent if User tries to login from the IP address not assigned to him/her

Message is sent when User logs off successfully LoggedoffsuccessfulMsg

LoggedonsuccessfulMsg Message is sent when User logs on successfully

Loggedinfromsomewhereelse Message is sent if User has already logged in from other machine

MaxLoginLimit Message is sent if User has reached the maximum login limit

Message is sent if User is not allowed multiple login MultipleLoginnotallowed

NotAuthenticate

NotCurrentlyAllowed

Someoneloggedin

SurfingtimeExhausted

SurfingtimeExpired

Message is sent if User name or password are incorrect

Message is sent if User is not permitted to access at this time

Access Time policy applied to the User account defines the allowed access time and not allowed access at any other time.

Message is sent if someone has already logged in on that particular machine

Message is sent when User is disconnected because his/her allotted surfing time is exhausted

The surfing time duration is the time in hours the User is allowed

Internet access that is defined in Surfing time policy. If hours are exhausted, User is not allowed to access

Administrator has temporarily deactivated the User and will not be able to log in because User surfing time policy has expired

LiveIPinuse

Nmpoolexceedlimit

Message is sent if connection is requesting a public IP Address from the server that is already in use

Message is sent if the maximum number of IP Addresses in the public host group at any given time has exceeded the limit

Table - List of predefined messages

139

System Management

Cyberoam User Guide

Client preferences

Client Services

Use Client preference to specify

• which page to open every time user logs on to Cyberoam

• whether HTTP client log on page should pop up if user tries to surf without logging in

• port from which Web Administration Console can be accessed

• number of concurrent log on allowed

Select

System → Configure Client Settings → Customize Client preferences

Screen – Customized Client Preferences screen

Screen Elements Description

Open following site after client logs on to the server

URL

Update button

Specify URL which is to be opened every time user logs on

Leave this field blank, if you do not want to open any specific page every time user logs in

Updates configuration

HTTP Client

Pop up HTTP client Whenever User tries to surf without logging, page with a message ‘Cyberoam Access Denied‘ displayed

If HTTP client pop up option is selected, User will get a

HTTP Client pop up along with the ‘Cyberoam Access

Denied' page.

140

System Management

Cyberoam User Guide Client Services

Screen Elements Description

Once User logs on successfully using the HTTP client, user will be able to surf the requested site.

Updates configuration Update button

Web Admin Console

Web Admin Console

Port

Specify Port number on which Web Admin Console is running

Update button

Number of Logins

Updates configuration

Allowed

Unlimited Login

Update button users

Allows unlimited concurrent logins

Updates configuration

Table – Customized Client Preferences screen elements

Note

The preferences set are applicable to all the users by default i.e. By default, all the preferences set will be applicable when the user is created. Refer to Create User, for customizing number of concurrent logins allowed to the particular user.

141

System Management

Cyberoam User Guide

Customize Access Deny messages

Client Services

Use to customize Access deny message for:

• all web categories

• individual web category

• all file type categories

This customized message will be displayed when user tries to access the site which is not allowed.

1. Select

System → Configure → Customize Denied Message

2. Select category for which you want to customize access deny message

Select ‘All Web categories’ to display the same access deny message for all the web categories. The message specified for ‘All Web Categories’ becomes the default message.

Select a particular category for which you want to display a different message

By default, the message specified for ‘All Web Categories’ is displayed.

Disable Use Default Message, if you want to display a different message for a particular category and modify the message

Select ‘All File type category’ to customize the access deny message for all the file type categories

3. In Denied Message, modify the message contents

4. Click Update to save if any changes are made

142

System Management

Cyberoam User Guide

Upload Corporate logo

Client Services

Use to display your company’s logo in all the messages displayed to the user.

1. Select

System → Configure → Customize Denied Message

2. In Top Bar, specify the image which is to be displayed at the top of the message page.

3. In the Bottom Bar, specify the image which is to be displayed at the bottom of the message page

4. Click Upload

Note

Dimension of Image should be 700 * 80 and jpg file only

143

System Management

Cyberoam User Guide

Customize Login message

Client Services

Use to customize login page messages and client login links provided on login page.

1. Select

System → Configure → Customize Login Message

2. Under Client Login Links, select Login Clients which you want to be displayed on Login page.

In the login page, download links are provided so that user can download the required login client. If you do not want user to download a particular login client, deselect the link

In the Login message box, specify the message to be displayed. You can further customize the message by using clientip address, category and URL

3. Enable Blink Message to display blinking message

4. Before saving the configuration, click Preview and see how message will be displayed to the user

5. Click Save to save the configuration

144

HTTP Proxy Management

Cyberoam User Guide

HTTP Proxy Management

Manage HTTP Proxy

Proxy server is a kind of buffer between your computer and the internet resources you are accessing. Proxy server accumulates and saves all those files that are most often requested by other Internet users in a ‘Cache’. The cache of a proxy server may already contain information you need by the time of your request, making it possible for the proxy to deliver it immediately.

Therefore, proxy servers are able to improve the network performance by reducing the access time.

Cyberoam can also act as a HTTP proxy server. All visited static sites are cached on the Cyberoam server hard drive. The advantage of a cache server is that it will cache the static web pages once requested and serve them locally when requested next time.

Cyberoam will act as a HTTP proxy server only if caching is enabled. Refer Enable Cache server to enable caching and Configure Cache to configure the cache server.

Cyberoam also provides the facility to define an External Cache server. Refer Define External

Cache to define External Cache.

Manage HTTP Proxy

Select

HTTP Proxy → Manage HTTP Proxy

Screen - Manage HTTP Proxy

Screen Elements Description

Server Status

Start button

Only if Current Status is ‘Stopped’

Displays current status of Cache server

Click to start Cache server

Cache Server status

Stop button

Only if Current Status is ‘Running’

Restart button

Click to stop Cache server

Click to restart Cache server

Empty Cache

Available only if ‘Cache Management’ add-on module is registered

Deletes any previous cached entities. Empty cache if corruption is found

Click to empty cache

Enable Caching In Proxy Server

Available only if ‘Cache Management’ add-on module is registered

Enable Caching button Enable Caching if you want

1. Proxy server to cache pages

2. To implement URL filtering

145

HTTP Proxy Management

Cyberoam User Guide

Save configuration

Manage HTTP Proxy

Click to Enable

Save the cache server configuration

Table - Manage HTTP Proxy screen elements

Configure HTTP Proxy

Use to

• specify whether to control bandwidth for cached objects

• specify cache size

• configure cache port

• specify cache server start up mode

• configure cache policy

Select

HTTP Proxy → Configure HTTP Proxy

Screen - Configure HTTP Proxy

Screen Elements Description

Bandwidth control configuration for Cached Objects

Available only if ‘Cache Management’ add-on module is registered

control for Cached objects objects

Click ‘Yes’ to bypass bandwidth control

Click ‘No’ restrict bandwidth for cached objects

Save button Save configuration

Cache size

Recommended Cache size (MB)

Cache size (MB)

Recommended size is the optimum size of cache determined based on the memory and the disk size

Cannot be modified

Specify Cache size (in MB)

It is recommended that cache size defined be equal to or more than the recommended size

146

HTTP Proxy Management

Cyberoam User Guide Manage HTTP Proxy

Screen Elements Description

Save button

Startup Configuration

Save cache configuration

Specify mode of server startup

Autostart - Automatically starts the Cache server with the startup of

Cyberoam server

Manual – Administrator has to start Cache server manually

Save startup configuration Save button

HTTP Proxy Port Setting

HTTP Proxy port Specify proxy port to be used

Save button Click to save the port setting

Configure Cache policies

Available only if ‘Cache Management’ add-on module is registered

Displays list of categories for which caching is disabled

Category button

Click Manage Cache category to add and remove categories

Table - Configure HTTP Proxy screen elements

Manage Cache Category

Screen - Manage Cache Category

Screen Elements Description

Categories Available list Displays list of predefined categories

Click to select

>> button Moves the selected category from ‘Categories Available’ list to

‘Selected Categories’ list

Click to move

<< button Removes the selected category from ‘Selected Categories’ list

Click to remove

Selected Categories list List of categories which will not be cached

Ok button Saves configuration

Cancel button Cancels current operation and closes the window

Table - Manage Cache Category screen elements

147

HTTP Proxy Management

Cyberoam User Guide

Define External Cache

Cyberoam allows to use the machine other Cyberoam server for caching. Configure for External

Cache to use another machine for caching. It is also possible to cache only the certain domains in the External cache i.e. the domain defined in the External Cache Configuration will be cached in the

External Cache and rest will be cached in the local server i.e. cyberoam

This reduces load on Cyberoam server.

Select

Cache → External Cache

Screen - Define External Cache

Screen Elements Description

External Cache Configuration

Cache Type Defines Cache type

Local – Uses Cyberoam Server for caching

External – Uses machine other than Cyberoam server for caching

Only for External Cache

IP address IP address of the machine which is to be used for caching

Port Port number of External cache

Save button Saves configuration

Domain’s for the External Cache

Add button Allows to add domain for External caching

Click Add domain for defining caching criteria

Refer to Add domain for details

Table - Define External Cache screen elements

148

HTTP Proxy Management

Cyberoam User Guide

Add Domain – Only for External Cache

Define External Cache

Screen - Add Domain

Screen Elements Description

Add Domain

Domain type

Domains

Add button

Cancel button

Specifies whether domain names are to be included or excluded from caching

Click any one

Include – includes specified domain names in caching

Exclude – excludes specified domain names from caching

Domain names which are to be included/excluded in cache

Adds criteria

Cancels current operation and returns to External Cache page

Table - Add Domain screen elements

Delete Domain – Only for External Cache

Screen - Delete Domain

Screen Elements

Select

Select All

Delete button

Description

Select Domain to be deleted from cache criteria

Click Select to select

More than one domain can also be selected

Select all the Domains

Click Select All to select all the domains

Delete all the selected Domain(s)

Table - Delete Domain screen elements

149

HTTP Proxy Management

Cyberoam User Guide

Routing Policy

Note

This option is not available if Cyberoam is in Bridge mode

Select

Cache → Routing Policy

Routing Policy

Screen - Add Routing policy

Add Network

Screen Elements Description

Add button

Delete button

Displays list of all the routing policies defined

Allows to add Network to the Routing policy

Click Add

Refer to Add Network for details

Allows to delete Network from Routing policy

Click Delete

Refer to Delete Network for details

Table - Add Routing policy screen elements

Screen - Add Network

Screen Elements Description

Add Network

Network Type Specify whether Network is Public or Private

Network ID/Netmask Specify Network whose caching is to be routed through the selected

Interface

Private – Private Network IP addresses are not routable and need

Network Address Translation(NAT)

Public - Public Network IP addresses are routable and do not need

150

HTTP Proxy Management

Cyberoam User Guide Routing Policy

Network Address Translation(NAT)

Show Nodes button Shows list of nodes in the specified Network

Select Interface Specify Interface through which the specified Network traffic is to be routed for caching

Click Select Interface to select

IP Address

Add button

Cancel button

Specify IP address of the Interface

Defines cache routing policy for the specified Network

Cancels current operation and returns to Routing policy page

Table - Add Network screen elements

Delete Network

Screen - Delete Network

Screen Elements

Select

Select All

Delete button

Description

Select Network to be deleted

Click Select to select

More than one network can also be selected

Select all the Networks

Click Select All to select all the networks

Deletes all the selected Network(s)

Table - Delete Network screen elements

151

Management

Cyberoam User Guide

Services

Use Services tab to Start/Stop and Enable/Disable Autostart various configured servers. According to the requirement, one can Start, Stop, Enable or Disable the services.

Types of the servers available:

1. DHCP

2. DNS

3. Mail server

4. IntraPOP server

5. Antivirus server

6. Antispam server

7. Cyberoam server

Select

System → Manage Services

Screen - Manage Services

Screen Elements Description

Service name

Status

Commands

Name of the server

Status of the respective server

Running

– if server is on

Stopped – if server is off

Starts or stops the respective servers

Enables or disables Autostart

Refer to Action table for details

Table - Manage Control Service screen elements

Action table

Button Usage

Start

Stop

Enable Autostart

Disable Autostart

Restart

Only for Cyberoam server

Shutdown

Only for Cyberoam server

Starts the Server whose status is ‘Stopped’

Stops the server whose status is ‘Started’

Automatically starts the configured server with the startup of

Cyberoam server

Disables the Autostart process

Restarts Cyberoam server

All the servers with ‘Enable Autostart’ will restart

Shuts down Cyberoam server and all the servers will be stopped

Table - Manage Control Service – Action

152

Cyberoam Basics

Cyberoam User Guide

Monitoring Bandwidth Usage

Bandwidth is the amount of data passing through a media over a period. In other words, it is the amount of data accessed by the Users. Each time the data is accessed – uploaded or downloaded, the amount is added to the total bandwidth. Because of the limited resource, it needs periodic monitoring.

Bandwidth usage graphical report allows Administrator to monitor the amount of data uploaded or downloaded by the Users. Administrator can use this information to help determine:

•

Whether to increase or decrease the bandwidth limit?

•

Whether all the gateways are utilized optimally?

•

Which gateway is underutilized?

•

What type of traffic is consuming the majority of the Bandwidth?

•

Which inbound/ outbound traffic has consumed the most Bandwidth in the last week/month?

Select

System → View Bandwidth usage

Screen – View Bandwidth Usage

Screen Elements Description

Bandwidth report

Graph type Generates graph

Select any one

Gateway wise – Displays list of Gateways defined, click the Gateway whose data transfer report is to be generated

Host Group wise – Displays list of Host groups defined, click the host group whose data transfer report is to be generated

Total – Generates total (all gateways and host groups) data transfer report.

Also generates Live user report

Gatewaywise breakup - Generates total (all gateways) data transfer report.

Graph period Generates graph based on time interval selected

Click Graph period to select

Table - Bandwidth usage screen elements

153

Cyberoam Basics

Cyberoam User Guide

It generates eight types of graphical reports:

Monitoring Bandwidth Usage

1. Live users - Graph shows time and live users connected to Internet. In addition, shows minimum, maximum and average no. of users connected during the selected graph period.

This will help in knowing the peak hour of the day.

X axis – Hours

Y axis – No. of users

Peak hour – Maximum no. of live users

Screen - Bandwidth usage - Live Users graph

2. Total data transfer – Graph shows total data transfer (upload + download) during the day.

In addition, shows minimum, maximum and average data transfer.

X axis – Hours

Y-axis – Total data transfer (upload + download) in KB/Second

Maximum data transfer

Minimum data

Screen - Bandwidth usage - Total Data transfer graph

154

Cyberoam Basics

Cyberoam User Guide Monitoring Bandwidth Usage

3. Composite data transfer – Combined graph of Upload & Download data transfer. Colors differentiate upload & download data traffic. In addition, shows the minimum, maximum and average data transfer for upload & download individually

X axis – Hours

Y-axis – Upload + Download in Bits/Second

Orange Color - Upload traffic

Blue Color – Download traffic

Screen - Bandwidth usage - Composite Data transfer graph

4. Download data transfer – Graph shows only download traffic during the day. In addition, shows the minimum, maximum and average download data transfer.

X axis – Hours

Y-axis – Download data transfer in Bits/Second

Screen - Bandwidth usage - Download Data transfer graph

155

Cyberoam Basics

Cyberoam User Guide Monitoring Bandwidth Usage

5. Upload data transfer - Graph shows only upload traffic during the day. In addition, shows minimum, maximum and average upload data transfer.

X axis – Hours

Y-axis – Upload data transfer in Bits/Second

Screen - Bandwidth usage - Upload Data transfer graph

6. Integrated total data transfer for all Gateways – Combined graph of total (Upload +

Download) data transfer for all the gateways. Colors differentiate gateways. In addition, shows the minimum, maximum and average data transfer of individual gateway

X axis – Hours

Y-axis – Total (Upload + Download) data transfer in Bits/Second

Orange Color – Gateway1

Blue Color – Gateway2

156

Cyberoam Basics

Cyberoam User Guide Monitoring Bandwidth Usage

7. Integrated Download data transfer of all Gateways – Graph shows only the download traffic of all the gateways during the day. In addition, shows the minimum, maximum and average download data transfer.

X axis – Hours

Y-axis – Download data transfer in Bits/Second

Orange Color – Gateway1

Blue Color – Gateway2

8. Integrated Upload data transfer for all the Gateways - Graph shows only the upload traffic of all the gateways during the day. In addition, shows minimum, maximum and average upload data transfer.

X axis – Hours

Y-axis – Upload data transfer in Bits/Second

Orange Color – Gateway1

Blue Color – Gateway2

157

Cyberoam Basics

Cyberoam User Guide

Migrate Users

Monitoring Bandwidth Usage

Cyberoam provides a facility to migrate the existing users from PDC or LDAP server. Alternately, you can also import user definition from an external file (CSV format file).

If you do not want to migrate users, configure for Automatic User creation. This reduces

Administrator’s burden of creating the same users again in Cyberoam.

Migration from PDC server

All the migrated users will be created under Group type – ‘Normal’ and default policies will be applied. Administrator can change the assigned group or status at the time of migration or later.

After migration, Username will be set as password in Cyberoam.

Select

System Æ Migrate User to open migration page

Step 1: Click Download User Migration Utility link

Screen - Download User Migration Utility

Step 2: Opens the File Download window and prompts to run or save the utility. Select the appropriate option and click OK button

Screen - Save User Migration Utility

Step 3: Opens a new browser window and prompts for the login. Provide the administrator

158

Cyberoam Basics

Cyberoam User Guide Monitoring Bandwidth Usage username and password. E.g. Username: “cyberoam” and password: “cyber”

Step 4: On successful authentication, following screen will be shown. Upload the specified file.

Screen – Upload downloaded User Migration Utility

Step 5: Change the group or status of the user at this stage, if required. To migrate all the users, click Select All or select the individual users and click Migrate Users.

Note

After migration, for Cyberoam login password will be same as the username

Once the users are migrated, configure for single sign on login utility.The configuration is required to be done on the Cyberoam server.

Migration from External file

Instead of creating user again in Cyberoam, if you already have User details in a CSV file then you can upload CSV file.

CSV file should be in the following format:

1. Header (first) row should contain field names. Format of header row: a. Compulsory first field: username b. Optional fields in any order: password, name, groupname, mailquota

2. Subsequent rows should contain values corresponding to the each field in header row

3. Number of fields in each row should be same as in the header row

4. Error will be displayed if data is not provided for any field specified in the header

5. Blank rows will be ignored

6. If password field is not included in the header row then it will set same as username

7. If name field is not included in the header row then it will set same as username

8. If groupname is not included in the header row, administrator will be able to configure group at the time of migration

9. If 'Mail Management' add-on module is registered: a. mailquota can be configured b. if mailquota is not included in the header row, the configured value will be set for individual user

Step 1 Upload CSV file

Select

System Æ Migrate User to open migration page

159

Cyberoam Basics

Cyberoam User Guide Monitoring Bandwidth Usage

Screen – Upload CVS file

Step 2 Change Group or Active status of user at this stage, if required. To migrate all the users, click Select All or select the individual users and click Migrate Users.

Screen - Register migrated users from External file

If migration is successful, Manage Active User page will be displayed with all the migrated users as Active users.

160

Customization

Cyberoam User Guide Schedule

Customization

Schedule

Schedule defines a time schedule for the policy. It specifies the hours during which the policy can be active on each day of the week. You can define a different schedule for each day of the week, or same schedule for every day of the week.

Define Schedule

Select

Policy Settings Æ Schedule Æ Define Schedule to open define schedule page

Screen - Define Schedule

161

Customization

Cyberoam User Guide Schedule

Screen Elements Description

Schedule details

Name

Description

Create button

Specify schedule name. Choose a name that best describes schedule

Allows maximum of 50 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Specify full description of schedule

Allows maximum of 250 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Creates schedule and allows to enter the schedule details

Click Add Schedule Entry details to add details to the schedule

Refer to Add Schedule Entry details for details

Schedule Entry

Add button

Save button

Cancel button

Allows to add Schedule Entry details

Refer to Add Schedule Entry details to add details

Saves schedule

Cancels the current operation and returns to Manage Schedule page

Table - Define Schedule screen elements

Add Schedule Entry details

Screen – Add Schedule Entry details

Screen Elements

Schedule Entry

Description

Start time & Stop time Defines the access hours/duration

Start & stop time cannot be same button

Cancel button weekday to the schedule

Cancels the current operation

Table – Add Schedule Entry details screen elements

162

Customization

Cyberoam User Guide

Manage Schedule

Schedule

Use to modify:

1. Schedule Name

2. Description

3. Add Schedule Entry details

4. Delete Schedule Entry details

Select

Policy Settings Æ Schedule Æ Manage Schedule and click Schedule name to be updated

Screen - Manage Schedule

Screen Elements Description

Schedule details

Schedule name

Schedule description

Schedule Entry

Add button

Delete button

Save button

Cancel button

Displays schedule name, modify if required

Displays schedule description, modify if required

Allows to add the schedule entry details

Refer to ‘Add Schedule Entry details’ for more details

Allows to delete the schedule entry details

Refer to ‘Delete Schedule Entry details’ for more details

Saves schedule

Cancels the current operation and returns to Manage

Schedule page

Table - Manage Schedule screen elements

163

Customization

Cyberoam User Guide

Delete Schedule Entry details

Schedule

Screen – Delete Schedule Entry details

Screen Elements Description

Del

Select All

Delete button

Select Schedule Entry detail to be deleted

Click Del to select Schedule Entry details

More than one Schedule Entry details can also be selected

Selects all the Schedule Entry details

Click Select All to select all the Schedule Entry details

Deletes the selected Schedule Entry detail(s)

Table - Delete Schedule Entry details screen elements

164

Customization

Schedule

Delete Schedule

Select

Policy Settings Æ Schedule Æ Manage Schedule to view the list of Schedules

Screen - Delete Schedule

Screen Elements

Del

Select All

Delete button

Description

Select schedule to be deleted

Click Del to select schedule

More than one schedule can also be selected

Selects all the schedules

Click Select All to select all the schedules

Deletes the selected schedule(s)

Table - Delete Schedule screen elements

165

Customization

Application Protocols

Application protocols represent types of Internet data transmitted via particular protocols or applications.

Application protocols are defined on port type. But, Cyberoam identifies protocol based on signature also and can filter Internet requests based on protocols or applications other than HTTP,

HTTPS or FTP, for example those used for instant messaging, file sharing, file transfer, mail, and various other network operations.

You can also create:

• Customized protocol definitions, if required

• Firewall rule for customized protocol definitions

Cyberoam also provides several standard protocol definitions which can be used for filtering. See

Appendix B for a complete list of protocols provided by Cyberoam which is constantly updated.

Application protocols represent types of Internet data transmitted via particular protocols or applications.

Note

1. Standard Protocol definitions are available only if ‘Application Based Control’ add-on module is registered

2. Only customized protocols can be modified or deleted

Manage Standard Application protocol

Standard protocol definitions are available for use only if ‘Application Based Control’ add-on module is registered. Database of protocol definitions is constantly updated by Cyberoam.

If the module is not registered, page is displayed with the message ‘Application Based Control’ module is not registered.

See Register Add on Modules for registering Application Based Control module. Module can also be registered as ‘Demo’ version if you have yet not purchased but will expire after 15 days of registeration.

Once the module is registered, the standard protocols can be used for filtering.

Select

Policy Settings Æ Application protocols Æ Manage Standard to view the list of default Application protocols.

166

Customization

Screen – Manage Standard Application Protocol

Note

Standard Protocol definitions cannot be deleted or modified

167

Customization

Define Custom Application protocol

Select

Policy Settings Æ Application protocol Æ Define Custom to open define page

Screen - Define Custom Application protocol

Screen Elements Description

Custom Application Protocol

Name

Application Description

Specify Application protocol name

Allows maximum of 60 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Specify full description of Application

Allows maximum of 255 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Create button Creates a new Application protocol

168

Customization

Screen Elements Description

Add protocol details, if a new Application protocol is defined successfully.

Application Protocol details

Add button Click to add protocol details

Refer to ‘Add Application protocol details’ to add details

Update button

Cancel button

Updates the protocol definition

Cancels the current operation and returns to Manage

Custom Application protocol page

Table – Add new Custom Application protocol screen

Add Application Protocol Details

Screen - Add Custom Application Protocol Details screen

Screen Elements Description

Application protocol Details Management

Protocol

Source Port

Allows to select port type for the Application protocol

Options 1)ICMP 2) TCP 3) UDP

Click to select

Assign source port number

Destination Port

Add button

Cancel button

Assign destination port number

Adds port definition for the protocol

Cancels the current operation

Table - Add Custom Application Protocol Details screen elements

169

Customization

Manage Custom Application protocol

Use to modify:

1. Description

2. Add Application Protocol details

3. Delete Application Protocol details

Select

Policy Settings Æ Application protocol Æ Manage Custom to view the list of custom Application protocols. Click Application protocol to be modified

Screen - Update Custom Application Protocol screen

Screen Elements Description

Custom Application Protocol

Name Displays Application protocol name, modify if required

Application Description Displays Application protocol description, modify if required

Application Protocol Details

Add button Allows to add protocol details

Click to add

Refer to Add Application Protocol Details to add details

Delete button

Update button

Cancel button

Allows to delete protocol details

Click to delete

Refer to Delete Application Protocol Details to delete details

Updates the modified details

Cancels the current operation

Table - Update Application Protocol screen elements

170

Customization

Delete Application Protocol Details

Screen – Delete Application Protocol Details

Screen Elements Description

Del

Select All

Select Application protocol details for deletion

More than one Application protocol details can be selected

Click to select

Allows to select all the Application protocols details for deletion

Click to select

Deletes all the selected Application protocol detail(s)

Click to delete

Table - Delete Custom Application Protocol Details screen elements

171

Customization

Delete Custom Application protocol

Select

Policy Settings Æ Application protocol Æ Manage Custom Application

protocol to view the list of custom application protocols.

Screen - Delete Application protocol screen

Screen Elements Description

Del

Select All

Delete button

Select the Application protocol for deletion

More than one Application protocol can be selected

Click to select

Allows to select all the Application protocols for deletion

Click to select

Deletes all the selected Application protocol(s)

Click to delete

Table - Delete Application Protocol screen elements

172

Categories

Cyberoam User Guide

Categories

Web Category

Cyberoam’s content filtering capabilities prevent Internet users from accessing non-productive or objectionable websites that take valuable system resources from your network at the same time prevents hackers and viruses that can gain access to your network through their Internet connections.

Cyberoam lets you prevent Internet users from accessing URLs that contain content the company finds objectionable. Cyberoam’s Categories Database contains categories covering Web page subject matter as diverse as adult material, astrology, games, job search, and weapons. It is organized into general categories, many of which contain collections of related Internet sites with specific content focus. In other words, database is a collection of site/host names that are assigned a category based on the major theme or content of the site.

Categories Database consists of three types:

Web category – Grouping of Domains and Keywords. Default web categories are available for use only if ‘Webcat Engine’ add-on module is registered.

File Type category – Grouping of File extensions

Application protocol – Grouping of protocols. Standard protocol definitions are available for use only if ‘Application Based Control’ add-on module is registered.

Apart from the default categories provided by Cyberoam, custom category can also be created if required. Creating custom category gives increased flexibility in managing Internet access for your organization. After creating a new category, it must be added to a policy so that Cyberoam knows when to enforce it and for which groups/users.

173

Categories

Cyberoam User Guide

Web Category

Web category is the grouping of Domains and Keywords used for Internet site filtering. Domains and any URL containing the keywords defined in the Web category will be blocked.

Each category is grouped according to the type of sites. Categories are grouped into four types and specifies whether accessing sited specified those categories is considered as productive or not:

• Neutral

• Productive

• Non-working

• Un-healthy

For your convenience, Cyberoam provides a database of default Web categories. You can use these or even create new web categories to suit your needs. To use the default web categories, the add-on module Webcat Engine should be registered.

Depending on the organization requirement, allow or deny access to the categories with the help of policies by groups, individual user, time of day, and many other criteria.

Custom web category is given priority over default category while allowing/restricting the access.

Search URL

Use Search URL to search whether the URL is categorized or not. It searches the specified URL and displays Category name under which the URL is categorized and category description.

When a custom category is created with a domain/URL which is already categorized in default category then the custom category overrides the default category and the search result displays custom category name and not the default category name.

Select

Categories Æ Web Category Æ Search URL

Screen – Search URL

174

Categories

Cyberoam User Guide Web Category

Manage Default Web Category

Default Web categories are available for use only if ‘Webcat Engine’ add-on module is registered.

Database of web categories is constantly updated by Cyberoam.

If the module is not registered, page is displayed with the message ‘Webcat Engine module is not registered’. See Register Add on Modules for registering Webcat Engine module. Module can also be registered as ‘Demo’ version if you have yet not purchased but will expire after 15 days of registeration.

Once the module is registered, the default categories can be used in Internet Access for filtering.

Select

Categories Æ Web Category Æ Manage Default to view list of default Web

Categories

Screen - Manage Default Web Category

Note

Default Web categories cannot be modified or deleted.

Custom web category is given the priority over the default category while allowing/restricting access.

175

Categories

Cyberoam User Guide

Create Custom Web category

Web Category

Select

Categories Æ Web Category Æ Create Custom to open create page

Screen - Create Custom Web Category

Screen Elements Description

Create Custom Web Category

Name Specify Web category name

Allows maximum of 60 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

176

Categories

Cyberoam User Guide Web Category

Screen Elements Description

Description

Category type

Create button

Specify full description

Allows maximum of 80 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Categories are grouped into four types and specifies whether accessing sites specified in those categories is considered as productive or not:Neutral, Productive, Non-working, Un-healthy

Select category type

Creates a new custom Web Category. Web Category configuration is incomplete until domain names or keywords are attached

Domain Management

Add button Use to define domains for the web category. Depending on the user’s

Internet access policy, accessing specified domain(s) will be allowed or denied.

Click to add

Refer to Add Domain(s) for more details

Keywords Management

Add button Use to define keywords for the web category. Depending on the user’s

Internet access policy, accessing sites with the specified keyword(s) will be allowed or denied.

Click to add

Refer to Add Keyword(s) for details

Update button

Cancel button

Saves the web category

Cancels the current operation and returns to View Web Category page

Table - Create Web Category screen elements

Note

Custom category name cannot be same as default category name.

Add Domain

Screen - Add Domain

177

Categories

Cyberoam User Guide Web Category

Screen Elements Description

Domains Management

Domains Specify domains for the category. Depending on the Internet access policy and schedule strategy any site falling under the specified domain will be allowed or blocked access.

Add Domain button Assigns domains to the web category

Cancel button Cancels the current operation

Table - Add Domain screen elements

Note

Domains can be added at the time of creation of web category or whenever required.

Add Keyword

Screen - Add keyword

Screen Elements Description

Keywords Management

Keywords Specify domains for the category. Depending on the Internet access policy and schedule strategy any site falling under the specified domain will be allowed or blocked access

Add button Assigns keywords to the Web Category

Cancel button Cancels the current operation

Table - Add keyword screen elements

Note

Keywords can be added at the time of creation of web category or whenever required.

178

Categories

Cyberoam User Guide

Manage Custom Web Category

Web Category

Use to modify:

1. Description

2. Add Domains

3. Delete Domains

4. Add Keywords

5. Delete Keywords

Select

Categories Æ Web Category Æ Manage Custom to view the list of Web categories and click Web Category to be modified

Screen - Manage Custom Web category

Screen Elements Description

Update Custom Web Category

Name Displays name of the web category, modify if required

Category type

Domain Management

Add button Allows to add domain name(s) to the web category

Click to add

Refer to Add Domains for details

Delete button

Categories are grouped into four types and specifies whether accessing sites specified in those categories is considered as productive or not:Neutral, Productive, Non-working, Un-healthy

Select category type

Allows to remove domain name(s) from the web category

Click to remove

Refer to Delete Domains for details

179

Categories

Cyberoam User Guide Web Category

Screen Elements Description

Keywords Management

Add button Allows to add keyword(s) to the web category

Click to add

Refer to Add Keywords for details

Delete button Allows to remove keywords from the web category

Click to remove

Refer to Delete Keywords for details

Update button

Cancel button

Modifies and saves the updated details

Click to Update

Cancels the current operation and returns to the Manage Custom

Web Category page

Table - Update Custom Web category screen elements

Delete Domain

Screen – Delete Domain

Screen Elements Description

Select

Select All button

Delete button

Click all the domains required to be removed

Allows to select all the domains for deletion

Click Select All to select all domains

Remove(s) domains from the web category

Click to remove

Table – Delete Domain screen elements

180

Categories

Cyberoam User Guide

Delete Keyword

Web Category

Screen - Delete keyword

Screen Elements Description

Select

Select All button

Delete button

Click all the keywords required to be removed

Allows to select all the keywords for deletion

Click Select All to select all keywords

Remove(s) keywords from the web category

Click to remove

Table - Delete keywords screen elements

181

Categories

Cyberoam User Guide

Delete Web Category

Web Category

Prerequisite

• Not attached to any Policy

Select

Categories Æ Web Category Æ Manage Custom to view the list of Web

Categories.

Screen - Delete Custom Web Category

Screen Elements Description

Del

Select All

Delete button

Select web category to be deleted

More than one web category can be selected

Click to select

Allows to select all the web categories for deletion

Click to select

Deletes all the selected web categories

Click to delete

Table - Delete Custom Web Category screen elements

182

Categories

Cyberoam User Guide

File Type Category

File type is a grouping of file extensions. Cyberoam allows filtering Internet content based on file extension. For example, you can restrict access to particular types of files from sites within an otherwise-permitted category.

For your convenience, Cyberoam provides several default File Types categories. You can use these or even create new categories to suit your needs.

Depending on the organization requirement, allow or deny access to the categories with the help of policies by groups, individual user, time of day, and many other criteria.

Manage Default File Type Category

Cyberoam provides five default File Type categories which cannot be modified or deleted.

Select

Categories Æ File Type Category Æ Manage Default to view the list of default

File Type Categories. Click the Category to view extensions included in the Category.

Screen – Manage Custom File Type Category

183

Categories

Cyberoam User Guide

Create Custom File Type Category

File Type Category

Select

Categories Æ File Type Category Æ Create Custom to open the create page

Screen - Create Custom File Type Category

Screen Elements Description

Custom File Type details

Name Assign name to File Type Category

Allows maximum of 60 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

File Extensions

Description

Create button

Cancel button

Specify file extensions to be included in the File Type

Categories

Cyberoam User Guide

Manage Custom File Type Category

File Type Category

Use to modify:

1. File Extensions

2. Description

Select

Categories Æ File Type Category Æ Manage Custom to view the list of File

Type Categories and click File Type Category to be modified.

Screen - Manage Custom File Type Category

Screen Elements Description

Update Custom File Type Category

Name

File Extensions

Displays name of the File Type Category, modify if necessary

Displays file extension(s) added to the Category, modify if required

Description

Update button

Cancel button

Displays description of Category

Modifies and saves the updated details

Click to Update

Cancels the current operation and returns to the Manage

Custom File Type Category page

Screen - Manage Custom File Type Category

185

Categories

Cyberoam User Guide

Delete Custom File Type Category

File Type Category

Prerequisite

• Not attached to any Policy

Select

Categories Æ File Type Category Æ Manage Custom to view the list of File

Type Categories created

Screen - Delete Custom File Type Category

Screen Elements

Del

Select All button

Delete button

Description

Click all the File Types required to be deleted

Allows to select all the File Types for deletion

Click Select All to select all File Types

Delete(s) the File Type Category

Click to delete

Table - Delete Custom File Type screen elements

186

Categories

Application Protocol Category

Application Protocol Category is the grouping of Application Protocols used for filtering Internet content.

You can also filter Internet requests based on protocols or applications other than HTTP, HTTPS or FTP, for example those used for instant messaging, file sharing, file transfer, mail, and various other network operations.

For your convenience, Cyberoam provides a database of default Application Protocol categories.

To use the default Application Protocol categories, the add-on module ‘Application Based Control’ should be registered.

You can also create:

• Customized Application protocol category, if required

• Firewall rule based on customized Application protocol category

Manage Default Application Protocol Category

Default Application protocol categories are available for use only if ‘Application Based Control’ add-on module is registered. Database of protocol category is constantly updated by Cyberoam.

If the module is not registered, page is displayed with the message ‘Application Based Control’ module is not registered.

Once the module is registered, the default protocol categories can be used in Internet Access for filtering.

Default Application protocol category cannot be modified or deleted.

Select

Categories Æ Application Protocol CategoryÆ Manage Default to view the list of default Application protocols Categories

Screen - Manage Default Application Protocol Category

187

Categories

Create Custom Application Protocol Category

Select

Categories Æ Application Protocol Category Æ Create Custom to open the create page

Screen - Create Custom Application Protocol Category

Screen Elements Description

Custom Application Protocol Category

Name

Description

Specify name to Application Protocol Category

Allows maximum of 60 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Specify full description

Allows maximum of 80 characters

Can be any combination of A – Z, a – z, ‘_’, 0 - 9

Create button Creates a new custom Application Protocol Category

Application Protocol details

188

Categories

Screen Elements Description

Add button

Update button

Cancel button

Use to assign application protocols to Category for blocking.

Select application protocol you want to include in a Category.

Cyberoam gives access to the Category based on the

Schedule.

Allows to add application protocol(s) to Category

Click to add

Refer to Add Custom Application Protocol details for more details

Saves Application Protocol Category

Cancels the current operation and returns to View Custom

Application Protocol Category page

Table – Create Custom Application Category screen elements

Note

Custom category name cannot be same as default category name.

Add Custom Application Protocol Details

Screen – Add Custom Application Protocol Category details

Screen Elements Description

Custom Application Protocol details

Application Select Application Protocols that are to be grouped in the

Category.

Custom and Default both can be grouped in a single

Application Protocol Category

Address

Add button

Cancel button

Groups the application protocols in the Category

Cancels the current operation

Table – Add Custom Application Protocol Category details

189

Categories

Manage Custom Application Protocol Category

Use to modify:

1. Description

2. Add Application Protocol details

3. Delete Application Protocol details

Select

Categories Æ Application Protocol Category Æ Manage Custom to view the list of custom Application Protocol Categories. Click Application Protocol Category to be modified.

Screen – Manage Custom Application Protocol Category

Screen Elements Description

Update Custom Application Protocol Category

Name Displays name of Application Protocol Category, modify if necessary

Application Protocol Details

Add button

Delete button

Allows to add Application Protocol(s) to Category

Click to add

Refer to Add Custom Application Protocols for details

Allows to remove Application Protocol(s) from Category

Click to remove

Refer to Delete Custom Application Protocol for details

Update button

Cancel button

Modifies and saves the updated details

Click to Update

Cancels the current operation and returns to the Manage Custom

Application Protocol Category page

Table – Manage Custom Application Protocol Category screen elements

190

Categories

Delete Custom Application Protocol Category details

Screen – Delete Application Protocol Category details

Screen Elements Description

Del

Select All button

Delete button

Click Application Protocol(s) required to be deleted

Allows to select all Application Protocol(s) for deletion

Click Select All to select all Application

Protocol(s)

Delete(s) Application Protocol(s)

Click to delete

Table – Delete Application Protocol Category screen elements

191

Categories

Delete Custom Application Protocol Category

Prerequisite

• Not attached to any Policy

Select

Categories Æ Application Protocol Category Æ Manage Custom to view the list of Application Protocol Categories created

Screen - Delete Custom Application Protocol Category

Screen Elements Description

Del

Select All

Delete button

Select Category to be deleted

More than one Category can be selected

Click to select

Allows to select all the Categories for deletion

Click to select

Deletes all the selected Categories

Click to delete

Table - Delete Custom Application Protocol Category screen elements

192

Product Licensing & Updates

Product Version information

Product Licensing & Updates

Product Version information

Check which version of the Cyberoam is installed on your computer, and determine the product ID number and User license of your copy.

Click Cyberoam icon (on the rightmost corner of the screen) to get the information.

Screen – About Cyberoam

193

Product Licensing & Updates

Upgrade Cyberoam

Upload Upgrade version

Once the upgraded version update file is obtained (CD or Downloaded), upload the new version file.

Select

Help Æ Upload Upgrade

Type the file name with full path or select using ‘Browse’

Click Upload

Screen - Upload Upgrade version

Once the upgrade file is uploaded successfully, log on to Console to upgrade the version. Refer

Console guide for details.

194

Product Licensing & Updates

Upgrade Cyberoam

Module license

There are certain add-on modules that are not included in the basic Cyberoam software. These modules are not part of the default installation but enabled on request. Customer has to procure different license for enabling these add-on modules.

Select

Help Æ Register Add on Modules to view the list of Add-on modules. Screen shows whether these modules are registered or not and displays license expiry date if registered.

Screen – Add on Modules Registration

Status - ‘Demo’, if demo version of the module running

Status - ‘Unregistered’, if the module is not registered

To register a module click the module name link, it will open the module registration form.

Screen – Module registration

Screen Elements Description

Module Registration form

Public key

Product ID

Displays public key

Specify the Product ID

Unique ID

Cancel button

Specify the Unique ID

Registers the module

Registers module as demo copy

Demo copy expires after 15 days

Cancels the current operation

Table - Module Registration screen elements

195

Product Licensing & Updates

Cyberoam User Guide

Download

Clients

Cyberoam Client supports Users using following platforms:

Windows Enables Users using Windows Operating System to log-on to Cyberoam Server

Linux Enables Users using Linux Operating System to log-on to Cyberoam server

HTTP Enables Users using any other Operating System than Windows & Linux to log-on to

Cyberoam Server

Single Sign on Client Enables Windows-migrated Users to log on to Cyberoam using Windows

Username and password.

Depending on the requirement, download the Cyberoam Client.

Select

Help Æ Downloads to download Cyberoam Client

Screen – Download Clients

197

Download

Cyberoam User Guide

Print Manager

For Cyberoam to monitor and manage printer usage, printing policy module is to be registered and needs to install Cyberoam Print Manager.

Select

Help Æ Downloads to download Cyberoam Print Management

Screen – Download Print Manager

198

Download

Cyberoam User Guide

Documentation

Select

Help Æ Guides to download various guides

Documentation

Screen – Download Cyberoam Guides

199

Cyberoam User Guide Appendix A – Web Categories

Appendix A – Web Categories

The list includes all categories with a short description of each category.

Visit www.cyberoam.com

for latest updates

Category Name Description

Sexual Health &

Education

Porn

Nudity

Swimwear & Lingerie

Adult Content

Job Search

Photo Galleries

Image Banks

Appendix B – Application Protocol Categories

Group

File Transfer client

File sharing

Mail Protocol

Application

Name

Any

FTP yahoofilexfer imesh

Gnutella

Kazaa directconnect

POP3

IMAP

Definition

All Services

File Transfer Protocol is a method to transfer files from one location to another, either on local disks or via the Internet

Yahoo Messenger file transfer

Gnucleuslan P2P client

IMESH P2P client

Gnutella is a system in which individuals can exchange files over the Internet directly without going through a Web site. Gnutella is often used as a way to download music files from or share them with other Internet users

A decentralized Internet peer-to-peer (P2P) file-sharing program peer-to-peer (P2P) file-sharing program

Transport protocol used for receiving emails. another.

A protocol for retrieving e-mail messages

Media Player

Voice over IP wmplayer quickplayer

SIP

H323

Windows Media Player

Quick Time Player

(Session Initiation Protocol) Protocol for initiating an interactive user session that involves multimedia elements such as video, voice, chat, gaming, and virtual reality.

SIP works in the Application layer of the OSI communications model.

A standard approved by the International Telecommunication

Union (ITU) that defines how audiovisual conferencing data is transmitted across networks. It enables users to participate in the same conference even though they are using different videoconferencing applications.

Printing IPP

Network DHCP

SNMP

DNS

RDP

Remote logging Telnet nbns

SSH streaming data over the World Wide Web

(Internet Printing Protocol) Protocol used for printing documents over the web. IPP defines basic handshaking and communication methods, but does not enforce the format of the print data stream.

Protocol for assigning dynamic IP addresses to devices on a network

(Simple Network Management Protocol) Protocol for network management software. Defines methods for remotely managing active network components such as hubs, routers, and bridges

An Internet service that translates domain names to or from IP addresses, which are the actual basis of addresses on the

Internet.

(Remote Desktop Protocol) Protocol that allows a Windowsbased terminal (WBT) or other Windows-based client to communicate with a Windows XP Professional–based computer.

RDP works across any TCP/IP connection

NetBIOS Naming Service

Protocol for remote computing on the Internet.

It allows a computer to act as a remote terminal on another machine, anywhere on the Internet

(Secure Socket Shell) Protocol used for secure access to a

203

Cyberoam User Guide

Group

Application

Name

HTTP

ICMP

Definition

Appendix B – Application Protocol Categories

Protocol for moving hypertext files across the Internet. communications.

(Internet Control Message Protocol) A message control and errorreporting protocol

204

Appendix C - Interpreting Bandwidth usage graphs for Multiple Gateways

Total Data transfer Graph

View graph from System > View Bandwidth Usage > Total

Graph displays the total data transfer through both the gateways.

Maximum data transfer = 2702.45 (as per graph)

Gateway wise Composite Total Data transfer:

View graph from System > View Bandwidth Usage > Gatewaywise Composite

Graph displays the data transfer through both the gateways in succession

Data transfer for Gateway 1 = X MB

Data transfer for Gateway 2 = Total Data transfer - X MB

In case when there is no data transfer done through Gateway 2, orange color will be missing in the graph.

As per the graph

Data transfer for Gateway Icenet = 950.60

Data transfer for Gateway BSNL = 2702.45 – 950.60 = 1951.85 (app.)

205

Appendix D – Mail server deployment scenarios

Cyberoam can act as a full featured mail server able to receive and route email traffic and scan mails for spam or virus attributes.

This document contains a detailed discussion on typical scenarios of its deployment as well as mail scanning process for each deployment scenario.

Depending on the network architecture, Cyberoam can be deployed as mail server and Anti Virus and Anti Spam agent or can be integrated with the existing corporate email system. Following options for installation of Cyberoam are possible:

1. Mail server hosted in DMZ

2. Mail server hosted Externally at ISP and users individually accessing their mailbox

3. Mail server hosted Externally at ISP and internal intrapop server accessing the mailbox and users accessing the internal POP3/SMTP server

4. Mail server hosted Internally and IP address being forwarded

The below given sections discuss in detail the above scenarios and describe their advantages.

Case 1 - Mail server hosted in DMZ

In this installation, Cyberoam is placed between the Internet and the Mail server. To apply antivirus protection and antispam filtering for the SMTP traffic to the Mail server, complete email traffic must pass through Cyberoam.

After a successful installation, your next step is to configure and set up mail server parameters in

Cyberoam. Throughout the document we will use the network parameters as shown in the below diagram for the sample configuration.

Network parameters

Cyberoam IP address – 192.168.1.200

Mail server IP address – 203.88.138.194 (hosted in DMZ)

Local Domain – elitecore.com

LAN (Internal Network) – 192.168.1.X

Mail scanning process:

1. Cyberoam receives mails via SMTP protocol (incoming and outgoing both)

2. Checks the mails for the presence of spam or virus attributes

3. Depending on the result of check, removes the infection if required

4. Forwards clean/infection free mails to the mail server via SMTP protocol

5. Mail server forwards mails to the internal users via POP3/IMAP protocol while forwards mails to the outside world through Cyberoam via SMTP protocol

206

Appendix D – Mail server deployment scenarios

207

Appendix D – Mail server deployment scenarios

Configuration steps

Step 1 Enable scanning for the mail server traffic

This is where you tell Cyberoam which connections must be scanned.

Source and destination are used to define the connection and the protocol is used to tell what to scan when connection matches the definition.

Go to Anti Virus > Mail > Enable Scanning and click ‘Create’

Enter ‘*’ as source IP address and mail server IP address ‘203.88.135.194 as Destination IP address.

Define Action ‘Scan’ for SMTP protocol

The * in source IP address means scan ‘everything’ for mail server with SMTP protocol. This rule will avoid double scanning as Cyberoam receives – incoming and outgoing – mails through SMTP protocol only.

Step 2 Set up all local domains served by Cyberoam

This is where you tell Cyberoam which local domains - hosted in the mail server - should be scanned. a. Go to Anti Virus > Mail > Manage Domain(s) and Click ‘Add’ b. Specify local domain name as ‘elitecore.com’ c. Specify mail server IP address and port number to be used

Repeat steps a to c for each local domain if you have more than one domain

Note

Cyberoam will scan mails for the specified local domains only

Step 3 Set up all the IP addresses allowed to send/receive mail via Cyberoam

208

Appendix D – Mail server deployment scenarios

This is where you tell Cyberoam which network/IP addresses must be allowed to relay mails through Cyberoam

Go to Anti Virus > Mail > Mail Relay

Add Network as ‘192.168.1.’

Note

Please note that only the defined IP address will be allowed to relay mails.

User trying to send mails from any other address will receive Relay Denied message as follows:

Relaying Denied message

553 sorry, relaying denied from your location [IP address] (#5.7.1)

209

Appendix D – Mail server deployment scenarios

Test your Configuration:

If all the above steps have been successfully completed, test Cyberoam Anti Virus/Anti Spam operation for both incoming and outgoing mails

Test 1. Check whether messages were scanned by Cyberoam or not. This can also be checked by sending spam mails to your own account.

Following header will be added if Cyberoam has scanned the mail and mail is not a spam mail and mail is virus free:

X-SpamTest-Info: Profile: Formal (309/051227)

X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)

X-SpamTest-Info: Profile: SysLog

X-SpamTest-Status: Not detected

X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release

X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 05012006

#158997, status: clean

Following header will be added if Cyberoam has scanned the mail and detected mail as a spam mail:

X-SpamTest-Info: Profile: Formal (309/051227)

X-SpamTest-Info: {TO: header missing}

X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)

X-SpamTest-Info: Profile: SysLog

X-SpamTest-Method: Headers: Suspicious To

X-SpamTest-Status: Probable Spam

X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release

X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 04012006

#158675, status: clean

Note

X Spam Test-Status and X Anti Virus status will change if Cyberoam detects mail as spam mail or infected.

In case Cyberoam detects mail as spam, X-Spam Test status will change according to the tag set in the spam policy.

If you are using Microsoft Outlook - right click the message, click Options and check the Internet

Header.

If you are using Mozilla Thunderbird - click the message, go to View > Headers and click All to check the header

Test 2. Check whether relaying domains are able to relay mails or not

210

Appendix D – Mail server deployment scenarios

Case 2 - Mail server hosted externally at ISP and users individually accessing their mailboxes

In this installation, Cyberoam is placed between the Internet and LAN. To apply antivirus protection and antispam filtering for the SMTP traffic to the Mail server, complete email traffic must pass through Cyberoam.

Please note in this type of placement, traffic from any of external mail server e.g. yahoo to our mail server will not be scanned as that traffic does not pass through Cyberoam. Hence there is a chance that mail server be compromised.

After a successful installation, your next step is to configure and set up mail server parameters in

Cyberoam. Throughout the document we will use the network parameters as shown in the below diagram for the sample configuration.

Network parameters

Cyberoam IP address – 192.168.1.200

Mail server IP address – 203.88.138.194

Local Domain – elitecore.com

LAN (Internal Network) – 192.168.1.X

Mail scanning process:

In this placement, scanning process for incoming and outgoing mails is different.

1. Cyberoam receives outgoing mails from the mail clients via SMTP protocol while receives the incoming mails via POP/IMAP protocol as mail clients request mail server for mails to the mail server.

2. Checks the mails for the presence of spam or virus attributes

3. Depending on the result of check, removes the infection if required

4. Cyberoam forwards clean/infection free outgoing mails to the mail server via SMTP protocol and forwards clean/infection free incoming mails to the mail clients via POP/IMAP protocol

211

Appendix D – Mail server deployment scenarios

212

Appendix D – Mail server deployment scenarios

Configuration steps

Step 1 Enable scanning for the POP3 traffic from mail server to Cyberoam. This rule is required as

LAN users will be receiving mails from mail server through Cyberoam via POP3.

This rule will scan the complete POP3 traffic from mail server passing through Cyberoam to LAN i.e. all the mails send to the LAN users will be first scanned by Cyberoam and then Cyberoam will forward only the clean mails to the individual.

Go to Anti Virus > Mail > Enable Scanning and click ‘Create’

Enter ‘*’ as source IP address and mail server IP address ‘203.88.135.194’ as destination IP address

Define Action ‘Scan’ for POP3 protocol

Step 2 Enable scanning for the IMAP traffic from mail server to Cyberoam. This rule is required as

LAN users will be receiving mails from mail server through Cyberoam via IMAP.

This rule will scan the complete IMAP traffic from mail server passing through Cyberoam to LAN i.e. all the mails send to the LAN users will be first scanned by Cyberoam and then Cyberoam will forward only the clean mails to the individual.

Go to Anti Virus > Mail > Enable Scanning and click ‘Create’

Enter ‘*’ as source IP address and mail server IP address ‘203.88.135.194’ as destination IP address

Define Action ‘Scan’ for IMAP protocol

Step 3 Enable scanning for the SMTP traffic from Cyberoam to mail server. This rule is required as

LAN users will be sending mails to the mail server through Cyberoam via SMTP

This rule will scan the complete SMTP traffic from LAN passing through Cyberoam to mail server i.e. all the mails send by the LAN users will be first scanned by Cyberoam and then Cyberoam will forward only the clean mails to the mail server.

Go to Anti Virus > Mail > Enable Scanning and click ‘Create’

Enter ‘*’ as source IP address and mail server IP address ‘203.88.135.194’ as destination IP address

Define Action ‘Scan’ for SMTP protocol

Step 4 Set up all local domains served by Cyberoam

This is where you tell Cyberoam which local domains - hosted in the mail server - must be scanned.

213

Appendix D – Mail server deployment scenarios a. Go to Anti Virus > Mail > Manage Domain(s) and Click ‘Add’ b. Specify local domain name as ‘elitecore.com’ c. Specify mail server IP address and port number to be used

Repeat steps a to c for each local domain if you have more than one domain

Note

Cyberoam will scan mails for the specified local domains only

Step 3 Set up all the IP addresses allowed to send/receive mail via Cyberoam

This is where you tell Cyberoam which network/IP addresses should be allowed to relay mails through Cyberoam

Go to Anti Virus > Mail > Mail Relay

Add Network as ‘192.168.1.’

Note

Please note that only the defined IP address will be allowed to relay mails.

User trying to send mails from any other address will receive Relay Denied message as follows:

Relaying Denied message

553 sorry, relaying denied from your location [IP address] (#5.7.1)

214

Appendix D – Mail server deployment scenarios

Test Configuration:

If all the above steps have been successfully completed, test Cyberoam Anti Virus/Anti Spam operation for both incoming and outgoing mails

Test 1. Check whether messages were scanned by Cyberoam or not. This can also be checked by sending spam mails to your own account.

Following header will be added if Cyberoam has scanned the mail and mail is not a spam mail and mail is virus free:

X-SpamTest-Info: Profile: Formal (309/051227)

X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)

X-SpamTest-Info: Profile: SysLog

X-SpamTest-Status: Not detected

X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release

X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 05012006

#158997, status: clean

Following header will be added if Cyberoam has scanned the mail and detected mail as a spam mail:

X-SpamTest-Info: Profile: Formal (309/051227)

X-SpamTest-Info: {TO: header missing}

X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)

X-SpamTest-Info: Profile: SysLog

X-SpamTest-Method: Headers: Suspicious To

X-SpamTest-Status: Probable Spam

X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release

X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 04012006

#158675, status: clean

Note

X Spam Test-Status and X Anti Virus status will change if Cyberoam detects mail as spam mail or infected.

In case Cyberoam detects mail as spam, X-Spam Test status will change according to the tag set in the spam policy.

If you are using Microsoft Outlook - right click the message, click Options and check the Internet

Header.

If you are using Mozilla Thunderbird - click the message, go to View > Headers and click All to check the header

Test 2. Check whether relaying domains are able to relay mails or not

215

Appendix D – Mail server deployment scenarios

Case 3 - Mail server hosted externally at ISP and internal intrapop server accessing the mailbox and users accessing the internal POP3/SMTP server

In this installation, Cyberoam is placed between the Internet and LAN and one of the LAN machine acts as the internal intrapop server which communicates with the external mail server. LAN users receive and send mails through the internal intrapop server only.

After a successful installation, your next step is to configure and set up mail server parameters in

Cyberoam. Throughout the document we will use the network parameters as shown in the below diagram for the sample configuration.

Network parameters

Cyberoam IP address – 192.168.1.200

Mail server IP address – 203.88.138.194

Local Domain – elitecore.com

LAN (Internal Network) – 192.168.1.X

Intrapop server – 192.168.1.10

Mail scanning process:

1. Cyberoam receives mails via SMTP protocol (incoming and outgoing both)

2. Checks the mails for the presence of spam or virus attributes

3. Depending on the result of check, removes the infection if required

4. Cyberoam forwards mails to the external mail server via SMTP protocol or forwards mails to the internal intrapop server via SMTP protocol and internal intrapop server forwards to the LAN users via POP3/IMAP protocol

216

Appendix D – Mail server deployment scenarios

217

Appendix D – Mail server deployment scenarios

Configuration steps

Step 1 Enable scanning for the SMTP traffic from mail server to internal intrapop server. This rule is required as intrapop server will be receiving mails from external mail server through Cyberoam via SMTP protocol

Go to Anti Virus > Mail > Enable Scanning and click ‘Create’

Enter mail server IP address ‘203.88.135.194’ as source IP address and internal intrapop server ‘192.168.1.10’ as destination IP address

Define Action ‘Scan’ for SMTP protocol

Step 2 Enable scanning for the SMTP traffic from internal intrapop server to mail server. This rule is required as intrapop server will be sending mails to the external mail server through Cyberoam via SMTP protocol

Go to Anti Virus > Mail > Enable Scanning and click ‘Create’

Enter internal intrapop server ‘192.168.1.10’ as source IP address and mail server IP address ‘203.88.135.194’ as destination IP address

Define Action ‘Scan’ for SMTP protocol

Step 3 Set up all local domains served by Cyberoam

Repeat steps a to c for each local domain if you have more than one domain

Note

Cyberoam will scan mails for the specified local domains only

Step 4 Specify IP address of internal intrapop server as mails will be relayed from this IP address only.

Go to Anti Virus > Mail > Mail Relay

Add as ‘192.168.1.10’

218

Appendix D – Mail server deployment scenarios

Note

Please note that only the defined IP address will be allowed to relay mails.

User trying to send mails from any other address will receive Relay Denied message as follows:

Relaying Denied message

553 sorry, relaying denied from your location [IP address] (#5.7.1)

219

Appendix D – Mail server deployment scenarios

Test Configuration:

If all the above steps have been successfully completed, test Cyberoam Anti Virus/Anti Spam operation for both incoming and outgoing mails

Test 1. Check whether messages were scanned by Cyberoam or not. This can also be checked by sending spam mails to your own account.

Following header will be added if Cyberoam has scanned the mail and mail is not a spam mail and mail is virus free:

X-SpamTest-Info: Profile: Formal (309/051227)

X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)

X-SpamTest-Info: Profile: SysLog

X-SpamTest-Status: Not detected

X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release

X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 05012006

#158997, status: clean

Following header will be added if Cyberoam has scanned the mail and detected mail as a spam mail:

X-SpamTest-Info: Profile: Formal (309/051227)

X-SpamTest-Info: {TO: header missing}

X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)

X-SpamTest-Info: Profile: SysLog

X-SpamTest-Method: Headers: Suspicious To

X-SpamTest-Status: Probable Spam

X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release

X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 04012006

#158675, status: clean

Note

X Spam Test-Status and X Anti Virus status will change if Cyberoam detects mail as spam mail or infected.

In case Cyberoam detects mail as spam, X-Spam Test status will change according to the tag set in the spam policy.

If you are using Microsoft Outlook - right click the message, click Options and check the Internet

Header.

If you are using Mozilla Thunderbird - click the message, go to View > Headers and click All to check the header

Test 2. Check whether relaying domains are able to relay mails or not

220

Appendix D – Mail server deployment scenarios

Case 4 - Mail server hosted internally and IP address is forwarded

In this installation, Cyberoam is placed between the Internet and LAN and one of the LAN machine acts as the mail server which communicates with the Cyberoam.

After a successful installation, your next step is to configure and set up mail server parameters in

Cyberoam. Throughout the document we will use the network parameters as shown in the below diagram for the sample configuration.

Network parameters

Cyberoam IP address – eth0 - 192.168.1.200 eth1 – 203.88.135.200

Local Domain – elitecore.com

LAN (Internal Network) – 192.168.1.X

Internal Mail server – 192.168.1.10

Mail scanning process:

1. Cyberoam receives mails via SMTP protocol (incoming and outgoing both)

2. Checks the mails for the presence of spam or virus attributes

3. Depending on the result of check, removes the infection if required

4. Cyberoam forwards mails to the external world via SMTP protocol or forwards mails to the internal mail server via SMTP protocol and internal mail server forwards to the LAN users via POP3/IMAP protocol

In this type of deployment, as mail server is hosted internally, all the incoming mails are delivered to the Cyberoam and not to the internal mail server. Hence scanning is to be done for the mail traffic for Cyberoam.

221

Appendix D – Mail server deployment scenarios

222

Appendix D – Mail server deployment scenarios

Configuration steps

Step 1 Enable scanning for Cyberoam

This is where you tell Cyberoam which connections should be scanned.

Source and destination are used to define the connection and the protocol is used to tell what to scan when connection matches the definition.

Go to Anti Virus > Mail > Enable Scanning and click ‘Create’

Enter ‘*’ as source IP address and Cyberaom IP address ‘203.88.135.200’ as Destination

IP address.

Define Action ‘Scan’ for SMTP protocol

The * in source IP address means scan ‘everything’ for Cyberoam with SMTP protocol.

Step 2 Enable scanning for the SMTP traffic from mail server. This rule is required as internal mail server will be sending mails to the external world through Cyberoam via SMTP protocol

Go to Anti Virus > Mail > Enable Scanning and click ‘Create’

Enter mail server IP address ‘192.168.1.10’ as source IP address and ‘*’ as destination IP address

Define Action ‘Scan’ for SMTP protocol

Step 3 Set up all local domains served by Cyberoam

This is where you tell Cyberoam which local domains - hosted in the internal mail server - should be scanned. a. Go to Anti Virus > Mail > Manage Domain(s) and Click ‘Add’ b. Specify local domain name as ‘elitecore.com’ c. Enable routing and specify mail server IP address ‘192.168.1.10’ as the forwarded

IP address and port number to be used

Repeat steps a to c for each local domain if you have more than one domain

Note

Cyberoam will scan mails for the specified local domains only

223

Appendix D – Mail server deployment scenarios

Step 3 Specify IP address of internally hosted mail server as mails will be relayed from this IP address only.

Go to Anti Virus > Mail > Mail Relay

Add as ‘192.168.1.10’

Note

Please note that only the defined IP address will be allowed to relay mails.

User trying to send mails from any other address will receive Relay Denied message as follows:

Relaying Denied message

553 sorry, relaying denied from your location [IP address] (#5.7.1)

224

Appendix D – Mail server deployment scenarios

Test Configuration:

If all the above steps have been successfully completed, test Cyberoam Anti Virus/Anti Spam operation for both incoming and outgoing mails

Test 1. Check whether messages were scanned by Cyberoam or not. This can also be checked by sending spam mails to your own account.

Following header will be added if Cyberoam has scanned the mail and mail is not a spam mail and mail is virus free:

X-SpamTest-Info: Profile: Formal (309/051227)

X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)

X-SpamTest-Info: Profile: SysLog

X-SpamTest-Status: Not detected

X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release

X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 05012006

#158997, status: clean

Following header will be added if Cyberoam has scanned the mail and detected mail as a spam mail:

X-SpamTest-Info: Profile: Formal (309/051227)

X-SpamTest-Info: {TO: header missing}

X-SpamTest-Info: Profile: Detect Hard No RBL (4/030526)

X-SpamTest-Info: Profile: SysLog

X-SpamTest-Method: Headers: Suspicious To

X-SpamTest-Status: Probable Spam

X-SpamTest-Version: SMTP-Filter Version 2.0.0 [0124], KAS/Release

X-Anti-Virus: Kaspersky Anti-Virus for MailServers 5.5.3/RELEASE, bases: 04012006

#158675, status: clean

Note

X Spam Test-Status and X Anti Virus status will change if Cyberoam detects mail as spam mail or infected.

In case Cyberoam detects mail as spam, X-Spam Test status will change according to the tag set in the spam policy.

If you are using Microsoft Outlook - right click the message, click Options and check the Internet

Header.

If you are using Mozilla Thunderbird - click the message, go to View > Headers and click All to check the header

Test 2. Check whether relaying domains are able to relay mails or not

225

Appendix D – Mail server deployment scenarios

Glossary

Email Ports

For networks, a port means an endpoint to a logical connection. The port number identifies what type of port it is. Some default ports:

POP3 - port 110

IMAP - port 143

SMTP - port 25

HTTP - port 80

IMAP

IMAP (Internet Message Access Protocol) is an Internet standard for the reading and manipulation of e-mail messages stored on a server. Messages are stored on a remote server. An

IMAP e-mail client running on a local computer then contacts the server and uses IMAP to allow the user to see and manipulate their e-mail messages and mailboxes. IMAP differs from the common Post Office Protocol (POP) in that it allows the user to store messages on the server and manipulate them from their e-mail client, rather than having to download the messages and manipulate them on their local computer.

IP address

The numerical address of a computer or a web page. Internet protocols recognize a specific machine by this address and use DNS to translate from the IP address to the domain name.

LAN

LAN (Local Area Network) is a group of computers connected by a network, such as that in a single office, building or company.

Mail Client

An email client is a computer program that is used to read and send e-mail. Protocols supported by email clients include POP3 and IMAP. IMAP is optimized for storage of e-mail on the server, while the POP3 protocol generally assumes that the e-mail is downloaded to the client. The SMTP protocol is used by most email clients to send e-mail.

Mail Server

A mail server also called a mail transfer agent or MTA is a computer devoted to sending, receiving and storing mail. The mail client (the program you use to get your e-mail) connects to the mail server and retrieves any messages that are waiting for you.

POP3

POP (Post Office Protocol 3) is a communication protocol used by email client programs for receiving e-mail from a Mail Server. Your e-mail is stored on a server until you check your mail and download messages on your computer.

POP3 is a commonly implemented method of delivering email from the mail server to the client machine. Other methods include IMAP and Microsoft Exchange.

In other words, POP is an protocol for incoming mails.

SMTP

SMTP (Simple Mail Transfer Protocol) is a protocol for sending e-mail messages between servers.

Most e-mail systems that send mail over the Internet use SMTP to send messages from one server to another; the messages can then be retrieved with an e-mail client using either POP or

226

Appendix D – Mail server deployment scenarios

IMAP.

The SMTP protocol can only be used to send emails, not to receive them. In other words, SMTP is a protocol for outgoing mails.

SMTP is generally used to send messages from a mail client to a mail server; this is why you need to specify both the POP or IMAP server and the SMTP server when you configure your e-mail application.

SPAM

Spam is any unwanted email communications that you receive. It is usually in the form of advertising material that is sent to a large number of people at one time.

Virus

Virus is a self-replicating, malicious code that attaches itself to an application program or other executable system component and leaves no obvious signs of its presence and usually capable of causing great harm to files or other programs on the same computer.

227

Cyberoam User Guide Menu wise Screen and Table Index