Future-ready
CR 10iNG
SSD
POWER
C B A
LINK
ACT
QUICK START GUIDE
CR10iNG Appliance
Document Version: PL QSG 10iNG/96000-10.6.1/08082014
DEFAULTS
Default IP addresses
Ethernet Port IP Address
A
Z one
172.16.16.16/255.255.255.0 LAN
B IP via DHCP WAN
Default Username & Password
Web Admin Console
*
Username admin
*
Password admin
CLI Console (SSH/Serial Connection)
*
Password admin
* Username and Password are case sensitive
Package Contents
Checking the package contents - Check that the package contents are complete.
! Cyberoam Appliance
! Serial Cable
! AC Power Adapter
! Cyberoam Quick Start Guide
! Straight-through Ethernet Cable
Serial Cable
AC Power Adapter with Cable
Quick Start Guide
Straight-through
Ethernet Cable
If any items from the package are missing.
please contact Cyberoam Support at [email protected]
2
UNDERSTANDING THE APPLIANCE
FRONT PANEL
SSD LED
Future-ready
CR 10iNG
SSD
POWER
Power LED
C B A
LINK
ACT
BACK PANEL
Console Port
Use Serial cable to connect to the Management Computer
Power
Switch
External
Power Feed
+12V
RESET
CONSOLE
USB
Ports
USB LAN/A
WAN/B
C
Ports
As Cyberoam does not pre-configure any ports for LAN, WAN, DMZ networks, it is not necessary to use any particular port for them. Usage of ports depends on how the physical connection is required or planned.
3
PLANNING THE CONFIGURATION
Before configuring, you need to plan the deployment mode of Cyberoam. Cyberoam can be placed in
Bridge or Gateway/Route mode according to your requirement.
To control the Internet access through Cyberoam the entire Internet bound traffic from the LAN network should pass through Cyberoam.
Gateway Mode
Configure as Gateway if you want to use Cyberoam as
1.
A firewall or replace an existing Firewall
2.
A gateway for routing traffic
3.
Link load balancer and implement gateway failover functionality
Apart from configuring Gateway IP address (IP address through which all the traffic will be routed), you must also configure LAN and WAN IP addresses.
LAN Network
Internet
10.10.10.1
10.10.10.2
10.10.10.3
Cyberoam in
Gateway mode
61.10.15.18
Gateway mode policies controlling traffic between
LAN & DMZ networks.
WAN
61.10.15.17
Gateway mode policies controlling traffic between
LAN and WAN networks.
192.168.1.254
DMZ Network
Mail Server Web Server
192.168.1.9
192.168.1.5
Bridge Mode
Configure as Bridge if
1.
You have a private network behind an existing firewall or behind a router and you do not want to replace the firewall.
2.
You are already masquerading outgoing traffic.
Internet
Cyberoam in Bridge mode
LAN
LAN Network
10.10.10.5
10.10.10.254
10.10.10.1
Management IP
Bridge mode policies controlling traffic between
LAN and WAN networks
You will be able to manage and monitor the entire Internet traffic passing through Cyberoam, control web access and apply bandwidth and application restrictions, apply antivirus and antispam policy and IPS policy in either of the modes.
4
GETTING CONFIGURATION INFORMATION
Use the table given below to gather ISP (Internet Service Provider) information
If Internet connection is via
You are probably using
Get information Cyberoam configuration from
Network Configuration wizard
Select “Obtain an IP from
DHCP”
Cable modem,
DSL with a
Router
Home
DSL/ADSL
DHCP
PPPoE
T1/E1,
Static broadband,
Cable or DSL with a static IP
Static
-----------
Username
Password
IP address
Subnet mask
Gateway IP address
Primary DNS
Secondary DNS
How to get the information:
From the PC connected to the Internet: open a command prompt window, type the command ipconfig.
Select “Obtain an IP from
PPPoE”
Select “Use Static IP”
Use the tables given below to gather the information you need before proceeding to deploy the Appliance.
Gateway Mode
For all the required Ports
Port A IP address ___.___.___.___
Subnet Mask ___.___.___.___
Zone Type LAN/WAN/DMZ
Port B IP address ___.___.___.___
Subnet Mask ___.___.___.___
Zone Type LAN/WAN/DMZ
Port C IP address ___.___.___.___
Subnet Mask ___.___.___.___
Zone Type LAN/WAN/DMZ
Bridge Mode
Bridge IP address ___.___.___.___
IP address Subnet Mask ___.___.___.___
The LAN IP address and Subnet Mask must be valid for the respective networks.
GENERAL SETTINGS
IP address of the Default Gateway
A default gateway is required for
Cyberoam to route connections to the Internet. ___.___.___.___
DNS IP Address
System Time Zone
System Date and Time
Email ID of the administrator where Cyberoam will send System Alerts
___.___.___.___
______________
______________
______________
5
CONNECTING CYBEROAM
Ethernet connection
1.
Connect one end of the straight-through cable into Port A on the Back panel of the Appliance and the other end into the Ethernet Adapter port of Management computer. Change the IP address of the management computer to 172.16.16.2 and the subnet mask to 255.255.255.0.
2.
Connect one end of an Ethernet cable into Port B on the Back panel of the Appliance and the other end to your Internet connection e.g. DSL modem or cable modem. It is possible that cable might already be connected between your computer and your modem. If so, disconnect it from your computer and connect into Port B.
Internet
Switch
(Optional)
Management
Computer
3.
Connect the AC Power connector into the Back panel of the Appliance and the other end into a standard AC receptacle and turn the power switch ON.
4.
Start your management computer. Following Appliance LEDs light up:
Power LED - Red indicating that Appliance is ON
SSD - Green indicating that hard disk is Active
Port A, Port B (Front panel) - Amber indicating an active connection
From the management computer:
1.
Browse to https://172.16.16.16
2.
Log on to the Cyberoam Web Admin Console using default username ‘admin’ and password ‘admin’.
3.
Click Wizard icon to launch the Network Configuration wizard.
Prerequisite
1.
Ethernet connection between management computer and Cyberoam.
2.
Internet Explorer 7+ or Mozilla Firefox 1.5+ is required to access Cyberoam Web Admin Console.
Wizard
Appliance LED Behavior
LED
Power
SSD
Ports - A,B,C
(Front Panel)
State
Red
Off
Flashing Green
Off
Off (Up), Yellow (Down)
Green (Up), Yellow (Down)
Amber (Up), Yellow (Down)
Off
Description
Cyberoam appliance is ON
Cyberoam appliance is OFF
Activity going on
No activity
Port connected at 10Mbps and Activity going on
Port connected at 100Mbps and Activity going on
Port connected at 1000Mbps and Activity going on
No link
6
CONFIGURING THE CYBEROAM APPLIANCE
Network Configuration Wizard guides you step-by-step through the configuration of the network parameters like IP address, subnet mask, and default gateway for Cyberoam. Use the configuration settings you have noted in section 4.
Click
'Start'
to start the configuration.
Screen 1 - Network Configuration Wizard
CONFIGURE MODE
Gateway mode
To configure Cyberoam in Gateway mode, select the option Gateway Mode and click button.
Follow the on-screen steps to:
1. Configure Interface: Configure IP Address,
Subnet Mask and Zone for each port, where
Zone is a logical grouping of Interfaces.
By default, Cyberoam binds ports A, B and C to
LAN, WAN and DMZ Zones respectively. To enable interface for PPPoE, provide PPPoE details: Username and Password (only for
WAN Zone).
Click
Next
each port.
to repeat the steps given above for
Bridge mode
To configure Cyberoam in Bridge mode, select the option Bridge Mode and click button.
1. Select the LAN and WAN ports to be bridged.
By default, Port A is a member of LAN and
Port B is of WAN.
2. To manage the Cyberoam in your network, configure the IP Address and Subnet Mask.
Provide the Gateway and DNS details to connect Cyberoam to the Internet. Refer to
General Settings in Section 4.
2. Configure DNS server address: Click “Obtain an IP from DHCP” to override appliance
DNS and use DNS received from the external DHCP server
Refer to the screen titled Screen 2 - Gateway
Mode: Zone and Network Configuration.
Proceed to Configure Internet Access section on the next page.
CONFIGURE MAIL SETTINGS
1. Specify Administrator Email ID
2. Specify Mail server IP address
3. Specify email address that should be used to send the System Alerts
4. Click “Authentication Required” to enable SMTP authentication, if required and specify username and password.
Click button for Date and Time zone configuration
Screen 4 - Mail Settings
CONFIGURE DATE AND TIME ZONE
Set time zone and current date
Enable clock synchronization with NTP server to tune Cyberoam's clock using global time servers.
Screen 5 - Date and Time Configuration
Click button to view the configured details. Copy the configured details for future use.
Click
'Finish'
. It will take a few minutes to save the configuration details.
Configuring Gateway Mode
Please wait...
Screen 6 - Network Configuration Wizard
On successful configuration the following page is displayed.
https://10.10.10.1 – Click to Access Web Admin Console
Screen 7 - Network Configuration Wizard
After a few seconds, click the URL to access the Web Admin Console. Click
Close
button to close the
Network Configuration Wizard window.
Note:
If you change the LAN IP address (Gateway mode) or Bridge IP address (Bridge mode), you must use this address to reconnect to the Web Admin Console. You might also have to change the IP address of the management computer to be on the same subnet as the new IP address.
Refer to the ‘Guides’ section on http://docs.cyberoam.com for information on how to Control Traffic, and how to configure Anti-Virus Protection, Content Filtering, Spam Filtering, Intrusion Prevention System
(IPS), and Virtual Private Networking (VPN).
Congratulations!!!
This finishes the basic configuration of Cyberoam.
Your network is now protected from Internet-based threats and access to Adult contents, Drugs, Crime and
Suicide, Gambling, Militancy and Extremist, Violence, Weapons, Phishing and Fraud and URLTranslation sites are blocked.
7
WHAT NEXT?
5.
6.
1. Create Customer Account and register Appliance
2.
Browse to http://customer.cyberoam.com and click Register and follow the on-screen steps.
It creates your customer account as well as register your appliance.
To subscribe for free 15-days trial subscription of Web and Application Filtering, IPS, Anti Virus and
Anti Spam, browse to http://customer.cyberoam.com and login with the credentials provided at the time of account creation.
Access Cyberoam Web Admin Console
Browse to https://<IP address of cyberoam> and log on using the default username (admin) and password (admin).
3.
4.
7.
Note: Internet Explorer 7+ or Mozilla Firefox 1.5+ is required to access the Cyberoam Web Admin
Console.
Go to menu System Maintenance Licensing page and synchronize the registration details.
Registration and subscription details are displayed only after synchronization.
Configure the correct firewall rule for your Domain Name Server (DNS). You may not be able to access Internet if not configured properly.
Go to Firewall Rule Rule and edit default firewall rules to enable virus scanning.
Set authentication parameters
Go to Identity Authentication Authentication Server to define the authentication parameters.
Access Help
For accessing online help, click the Help button or F1 key on any of the screens to access the corresponding topic's help. Use the Contents and Index options to navigate through the entire online help.
Additional Resources
Visit following links for more information to configure Cyberoam
Technical Documentation - http://docs.cyberoam.com
Cyberoam Knowledge Base - http://kb.cyberoam.com
Cyberoam Security Center - http://csc.cyberoam.com
Cyberoam Upgrades - http://download.cyberoam.com
Important Notes:
Important Notice
Cyberoam Technologies Pvt. Ltd. has supplied this Information believing it to be accurate and reliable at the time of printing, but is presented without warranty of any kind, expressed or implied. Users must take full responsibility for their application of any products. Cyberoam Technologies Pvt. Ltd. assumes no responsibility for any errors that may appear in this document. Cyberoam Technologies Pvt. Ltd. reserves the right, without notice to make changes in product design or specifications. Information is subject to change without notice.
USER’S LICENSE
Use of this product is subject to acceptance of the terms and conditions of Cyberoam End User License Agreement (EULA) and Warranty Policy for Cyberoam Security
Appliances. You will find the copy of the EULA at http://www.cyberoam.com/documents/EULA.html
and the Warranty Policy for Cyberoam Security Appliances at http://kb.cyberoam.com
RESTRICTED RIGHTS
Copyright 1999 - 2014 Cyberoam Technologies Private Ltd. All rights reserved. Cyberoam, Cyberoam logo are trademark of Cyberoam Technologies Pvt. Ltd.
Toll Free Numbers
USA : +1-800-686-2360
India : 1-800-301-00013
APAC/MEA : +1-877-777-0368
Europe : +44-808-120-3958
Visit: www.cyberoam.com
Contact
: sales@cy beroam.com
