Cyberoam Firewall How To
Anuncio
Anuncio
Cyberoam appliance can be deployed in a network in two modes:
• Gateway mode. Popularly known as Route mode
• Bridge mode. Popularly known as Transparent mode
Article provides step-by-step procedure to configure Cyberoam in Gateway mode.
Configuration steps are provided assuming that you have not configured Cyberoam appliance
and are using factory default settings of the appliance. If your appliance has any custom
settings, rollback to factory default setting before following the steps provided in the article.
We are going to consider a hypothetical network example with firewall serving as a Gateway.
We will replace the existing firewall with Cyberoam without changing the existing network LAN
schema. Article covers:
• Features supported in gateway mode
• Deployment steps
• How to verify configuration
• Advance configuration
Overview
Gateway
Gateway is a network point that acts as an entry point to another network or subnet to access
the resources. In Enterprises, the gateway is the appliance that routes the traffic from a
workstation to the outside network. In homes, the gateway is the ISP that connects the user to
the Internet.
Gateway Mode
Cyberoam when deployed in Gateway mode acts as a Gateway for the networks to route the
traffic.
Gateway mode provides an ideal solution for networks that already have an existing firewall,
and plans to replace their existing firewall and wish to add the security through Cyberoam’s
deep-packet inspection, Intrusion Detection and Prevention Services, Gateway Anti Virus, and
Gateway Anti spam. If you do not have Cyberoam security modules subscriptions, you may
register for free trial.
Features supported in Gateway mode
All the features except Hardware bypass (LAN bypass) are available in Gateway mode.
VLAN support in Gateway mode
While the network depicted in the example is simple, it is not uncommon for large networks to
use VLANs for segmentation of traffic. If the existing firewall was configured for VLAN, refer
Virtual LAN Configuration Guide for configuring VLAN in Cyberoam.
How To - Deploy Cyberoam in Gateway Mode
• Gateway mode. Popularly known as Route mode
• Bridge mode. Popularly known as Transparent mode
Article provides step-by-step procedure to configure Cyberoam in Gateway mode.
Configuration steps are provided assuming that you have not configured Cyberoam appliance
and are using factory default settings of the appliance. If your appliance has any custom
settings, rollback to factory default setting before following the steps provided in the article.
We are going to consider a hypothetical network example with firewall serving as a Gateway.
We will replace the existing firewall with Cyberoam without changing the existing network LAN
schema. Article covers:
• Features supported in gateway mode
• Deployment steps
• How to verify configuration
• Advance configuration
Overview
Gateway
Gateway is a network point that acts as an entry point to another network or subnet to access
the resources. In Enterprises, the gateway is the appliance that routes the traffic from a
workstation to the outside network. In homes, the gateway is the ISP that connects the user to
the Internet.
Gateway Mode
Cyberoam when deployed in Gateway mode acts as a Gateway for the networks to route the
traffic.
Gateway mode provides an ideal solution for networks that already have an existing firewall,
and plans to replace their existing firewall and wish to add the security through Cyberoam’s
deep-packet inspection, Intrusion Detection and Prevention Services, Gateway Anti Virus, and
Gateway Anti spam. If you do not have Cyberoam security modules subscriptions, you may
register for free trial.
Features supported in Gateway mode
All the features except Hardware bypass (LAN bypass) are available in Gateway mode.
VLAN support in Gateway mode
While the network depicted in the example is simple, it is not uncommon for large networks to
use VLANs for segmentation of traffic. If the existing firewall was configured for VLAN, refer
Virtual LAN Configuration Guide for configuring VLAN in Cyberoam.
How To - Deploy Cyberoam in Gateway Mode
How To – Deploy Cyberoam in Gateway mode
High Availability support in Gateway mode
HA, refer High Availability Guide for configuring HA cluster in Cyberoam
Sample Schema
Throughout the article we will use the network parameters displayed in the below given
network diagram.
The below given network diagram depicts a network where Cyberoam is added to the
perimeter for the purpose of providing security services.
Traffic from hosts connected to the LAN would be permitted outbound through the Cyberoam
to the gateways, while traffic from the WAN would, by default, not be permitted inbound.
The public servers, a mail, web and database server, on the DMZ, an access Rule allowing
WAN-to-LAN traffic for the appropriate IP addresses and services will be added to allow
inbound traffic to those servers.
High Availability support in Gateway mode
HA, refer High Availability Guide for configuring HA cluster in Cyberoam
Sample Schema
Throughout the article we will use the network parameters displayed in the below given
network diagram.
The below given network diagram depicts a network where Cyberoam is added to the
perimeter for the purpose of providing security services.
Traffic from hosts connected to the LAN would be permitted outbound through the Cyberoam
to the gateways, while traffic from the WAN would, by default, not be permitted inbound.
The public servers, a mail, web and database server, on the DMZ, an access Rule allowing
WAN-to-LAN traffic for the appropriate IP addresses and services will be added to allow
inbound traffic to those servers.
How To – Deploy Cyberoam in Gateway mode
Preparing to configure
Cyberoam Appliance is shipped with the following default configuration:
Port A IP address (LAN zone):172.16.16.16/255.255.255.0
Port B IP address (WAN zone): 192.168.2.1/255.255.240.0
Gather DNS IP address, date and time zone and well as administrator email address.
Deployment steps
Connecting Appliance
Connect port A of the Appliance to a management computer’s Ethernet interface. You can use
a cross-over Ethernet cable to connect directly or use straight-through Ethernet cable to
connect through hub or switch. Both the cables are provided along with the Appliance.
By connecting management computer to port A, we are assigning port A to LAN zone.
Set the IP address of the management system to 172.16.16.2/24.
Connecting to Web Admin Console
Browse to https://172.16.16.16 to access Cyberoam Web Console (GUI). Cyberoam login
page is displayed and you are prompted to enter login credentials. Use default username and
Preparing to configure
Cyberoam Appliance is shipped with the following default configuration:
Port A IP address (LAN zone):172.16.16.16/255.255.255.0
Port B IP address (WAN zone): 192.168.2.1/255.255.240.0
Gather DNS IP address, date and time zone and well as administrator email address.
Deployment steps
Connecting Appliance
Connect port A of the Appliance to a management computer’s Ethernet interface. You can use
a cross-over Ethernet cable to connect directly or use straight-through Ethernet cable to
connect through hub or switch. Both the cables are provided along with the Appliance.
By connecting management computer to port A, we are assigning port A to LAN zone.
Set the IP address of the management system to 172.16.16.2/24.
Connecting to Web Admin Console
Browse to https://172.16.16.16 to access Cyberoam Web Console (GUI). Cyberoam login
page is displayed and you are prompted to enter login credentials. Use default username and
How To – Deploy Cyberoam in Gateway mode
password to log on.
Internet Explorer 5.5+ or Mozilla Firefox 1.5+ is required to access Web Admin Console.
If you cannot log on, verify the following configurations:
• Did you plug your management workstation into the port A on the appliance? -
Deployment can only be performed through port A.
• Is the link light glowing on both the management computer and the Appliance? – If not,
check and replace the cable
• Is your management computer set to a static IP address of 172.16.16.16 and subnet as
255.255.255.0?
• Did you enter correct IP address in your Web browser?
Starting Network Configuration Wizard
Click Wizard button on the top right of the Dashboard to start Network Configuration Wizard
and click Start.
password to log on.
Internet Explorer 5.5+ or Mozilla Firefox 1.5+ is required to access Web Admin Console.
If you cannot log on, verify the following configurations:
• Did you plug your management workstation into the port A on the appliance? -
Deployment can only be performed through port A.
• Is the link light glowing on both the management computer and the Appliance? – If not,
check and replace the cable
• Is your management computer set to a static IP address of 172.16.16.16 and subnet as
255.255.255.0?
• Did you enter correct IP address in your Web browser?
Starting Network Configuration Wizard
Click Wizard button on the top right of the Dashboard to start Network Configuration Wizard
and click Start.
5
6
7
8
9
10
11
12
13
14
15
16
17
Anuncio
Relacionado
Cyberoam Virtual Security Appliance Installation Guide
Cyberoam Virtual Security Appliance Installation Guide
Cyberoam Virtual Security Appliance Installation Guide
Sophos CR1000ia Startup Guide
Sophos CR1500ia Startup Guide
Sophos CR1500ia-10F Startup Guide
Cyberoam Virtual Security Appliance Installation Guide
Sophos CR1000ia-10F Startup Guide
Sophos CR500ia-10F Startup Guide
Cyberoam CR2500iNG-XP Quick start manual
Cyberoam CR 200iNG-XP, CR 300iNG-XP Quick Start Guide
