Pika-asennusopas Pdf.

Pika-asennusopas Pdf.
UTM Content Security Gateway
CS-2001
Quick Installation Guide
Table of Contents
1. Package Contents......................................................................................... 3
2. Setup the UTM Content Security Gateway....................................................... 4
3. Hardware Installation.................................................................................... 5
4. Basic System Configuration........................................................................... 7
1. Package Contents
CS-2001
ll CS-2001 x 1
ll Quick Installation Guide x 1
ll User’s Manual CD x 1
ll Power cord x 1
ll Console cable x 1
ll Cat5 Cable x 4
ll Screw Package x 1
ll Rack-mount ear x 2
ll Mat x 4
If any of above items are damaged or missing, please contact your dealer
immediately.
3
2. Setup the UTM Content Security Gateway
The followings are instructions for setting up PLANET CS-2001. Refer to the
illustration and follow the simple steps below to quickly install your UTM Content
Security Gateway.
Safety Instruction
The following is the safety instructions for UTM Content Security Gateway before
installing.
>> The maximum operating temperature of the UTM is 50ºC. Care must be taken
to allow sufficient air circulation or space between units when the UTM is installed
inside a closed rack assembly and racks should safely support the combined weight
of all UTM.
>> The connections and equipment that supply power to the UTM should be
capable of operating safely with the maximum power requirements of the UTM.
In the event of a power overload, the supply circuits and supply wiring should not
become hazardous.
>> The AC power cord must plug into the right supply voltage. Make sure that
the supplied AC voltage is correct and stable. If the input AC voltage is over 10%
lower than the standard may cause the UTM to malfunction.
>> Generally, when installed after the final configuration, the product must comply
with the applicable safety standards and regulatory requirements of the country in
which it is installed. If necessary, consult for technical support.
4
3. Hardware Installation
Front panel:
Power Indicator
Power
DTE,9600,n,8,1
Port 1
Port 2
Port 3
Port 4
UTM Content Security Gateway
USB
H.Disk
CS-2001
HDD Indicator
HDD Indicator
Ethernet Port1/2/3/4
Figure 1. Front Panel of the CS-2001
Power Indicator: Lights up when the power is on.
HDD Indicator: Glitters when system is accessing data from the HDD.
Console Port (9600, 8, N, 1): A RJ-45 console cable connect this serial port
for checking network interface setting and can reset to factory setting.
Ethernet Port 1/2/3/4 can be set as a:
ll LAN Port: Connects to the Intranet.
ll WAN Port: Connects to the perimeter router.
ll DMZ Port: The demilitarized zone (DMZ) is a physical subnet for securing the
Local Area Network. It allows the externals users to access the company’s
external network.
LED / Port
WAN
LAN
DMZ
Description
LED1
LED2
Orange
Steady on indicates the port is connected to
other network device.
Blink to indicates there is traffic on the port
Orange
Steady on indicates the port is connected at
1000Mbps speed
Green
Steady on indicates the port is connected at
100Mbps speed
Off
The LED off to indicate the port is connected
at 10Mbps speed
5
CS-2001 Topology:
Branch Office
Vendor
Firewall Gateway
Firewall Gateway
PC
001101010
ADSL
Modem
Modem
Internet
IPSec VPN Tunnel
IPSec VPN Tunnel
PC
001101010
b/g
Access Point
Laptop
ADSL
001101010
Modem
Attack Virus
Access Point
Spam
SSL VPN Tunnel
Firewall CS-2001
Firewall
PC
DMZ
b/g
Laptop
Finance-Server
PC
Web-Server
Mail-Server
Home
Headquarters
ADSL 2/2+
ADSL
100Base-TX UTP
1000Base-T UTP
b/g
Figure 2. Topology of the CS-2001
6
2.4GHz 802.11b/g
4. Basic System Configuration
Step 1. Connect both the IT administrator’s PC and the device’s LAN port to the
same hub / switch, and launch a browser (e.g., IE or Firefox) to access
the management interface address which is set to http://192.168.1.1 by
default.
Step 2. You will be prompted for user name and password when accessing the
management interface. (both of user name and password are “admin” by
default)
Figure 3. Typing the User Name and Password
7
Step 3. The user interface consists of the following two panels:

Menu Panel: Presents all the available system configurations in a tree directory
structure. (see Overview of Functions)

Configuration Panel: Displays the data or configurable settings of the
corresponding item selected on the Menu Panel.
Figure 4. The CS-2001 User Interface
For your reference, you may configure your management address
based on the available subnet ranges below.
10.0.0.0 ~ 10.255.255.255
Note
172.16.0.0 ~ 172.31.255.255
192.168.0.0 ~ 192.168.255.255
8
Step 4. If it’s the first time you’ve logged into the management interface, an
install wizard will appear to guide you through setting some of the basic
settings required. System > Configuration > Installation Wizard
Figure5. The Install Wizard
Setp 5. Select the language for the user interface and the default character
encoding.
Figure6. Selecting the Language and Default Character Encoding
Important
Any data saved on the interface will be saved as the selected
default character encoding if the device is unable to recognize the
encoding.
9
Step 6. The LAN interface address must reflect your network environment. The
defualt LAN interface is set to 192.168.1.x/24. However, if the LAN
interface was changed to 172.16.0.1 (subnet mask: 255.255.255.0), the
IT administrator must configure each PC in the subnet using an available
IP address from this subnet.
Setting: Select Port1 (LAN1).
Interface: Select LAN.
LAN Interface Mode: Select NAT / Routing Mode.
Fill in the IP Address and Netmask fields.
Figure7. Interface Settings
Important
10
Once the LAN interface is changed, please enter the new LAN IP
address in the browser next time when you log in the CS-2001
Web UI.
Step 7. Configure the WAN Interface (please refer to your ISP for the settings).
Setting: Select Port2 (WAN1)
Interface: Select WAN
Connection Mode: Select the required mode
Configure the remaining settings.
Figure 8. The WAN Settings
11
Step 8. Tick the Synchronize to an NTP Server box to ensure the system is
provided with the accurate time.
Figure 9. Time Settings
12
Step 9. Enable Outgoing.
Figure 10. Enabling an Outgoing Policy

Go to Policy > Outgoing and configure as below:

Source Address: Select Inside_Any

Destination Address: Select Outside_Any

Service: Select ANY
Figure 11. A Policy Allowing LAN Users to Access Any External Network Services
Finally, configure all LAN PC addresses within the same domain as the LAN interface address, which is also the default gateway address for the LAN. Or, simply
by using the DHCP to enable LAN PCs to obtain IP addresses, users may have
Internet access right after configuring DHCP. To configure any network policies,
please go to Policy Object and Policy.
13
Step 10.Provide the following CS-2001 interface information to LAN users.
Figure 12. Settings Confirmation
Step 11.Settings complete.
Figure 13. Installation Wizard Completed
14
This page is intentionally left blank
This page is intentionally left blank
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertisement