Cyberoam User Guide Cyberoam Basics
Cyberoam Basics
Cyberoam’s integrated Internet security solution is purpose-built to meet the unified threat management needs of corporate, government organizations and educational institutions. It also provides assistance in improving Bandwidth management, increasing Employee productivity and reducing legal liability associated with undesirable Internet content access.
Benefits of Cyberoam
1. Boost Employee productivity by a. Blocking access to the sites like Gaming, Shopping, news, Pornography
2. Conserve bandwidth by a. Controlling access to non-productive site access during working hours b. Controlling rate of uploading & downloading of data
3. Load balancing over multiple links a. Improved User response time d. Reduced bandwidth bottlenecks
4. Conserve Printer usage
5. Enforce acceptable Internet use, printer use and mailing policies
6. Comprehensive, easy-to-use reporting tool enabling the IT managers to compile reports on
Internet and other resources usage and consumption patterns
Accessing Cyberoam
Two ways to access Cyberoam:
1. Web based Administration console
• Used for policy configuration
• Managing users, groups and policies
• Managing System resources like printer, mail server
• Managing Firewall rules
• Managing Bandwidth
• Viewing bandwidth graphs as well as reports
2. Text based Administration/telnet console
• Used for Network and System configuration (setting up IP Addresses, setting up gateway)
• Managing Cyberoam application a) Using Console Interface via remote login utility – TELNET b) Direct Console connection - attaching a keyboard and monitor directly to Cyberoam server
Accessing the Web Interface
Cyberoam Web Interface (GUI) access requires Microsoft Internet Explorer 5.5 or above and
Display settings as True color (32 bits)
Note
Cyberoam Web Interface access requires Internet Explorer 5.5 or above and Display settings as True color (32 bits)
If you have logged on for the first time & not yet registered Cyberoam, refer to Installation guide for registration.
Change the default password, the first time you log on. Refer to Manage Users, Change Personal details
10
Cyberoam User Guide Cyberoam Basics
Accessing Console via remote login utility - TELNET
Access Cyberoam Console with the help of TELNET utility. To use TELNET, IP Address of the
Cyberoam server is required.
To start the TELNET utility:
Click Start, and then click Run
In Open, type TELNET xxx.xxx.x.xxx
Click OK, opens a console login window and prompts to enter Password
Default password for Cyberoam TELNET console is “admin”.
Screen - Console access
Screen - Console login screen
Log on & log off from the Cyberoam Web Interface
The Log on procedure verifies validity of user and creates a session until the user logs off.
Log on procedure
To get the log in window, open the browser and type IP Address in browser’s URL box. A dialog box appears prompting you to enter username and password to log on. Use the default user name
‘cyberoam’ and password ‘cyber’ to log on if you are logging in for the first time.
Asterisks are the placeholders in the password field.
Log on Methods
HTTP log on
To open unencrypted login page, in the browser’s Address box, type http://<IP address of Cyberoam>
11
Cyberoam User Guide Cyberoam Basics
Screen - HTTP login screen
HTTPS log on
Cyberoam provides secured communication method which encrypts the User log on information and which prevents unauthorized users from viewing the user information. For this, Cyberoam uses https protocol.
The secure Hypertext Transfer Protocol (HTTPS) is a communication protocol designed to transfer encrypted information between computers over the World Wide Web. HTTPS is http using a
Secure Socket Layer (SSL). A secure socket layer is an encryption protocol invoked on a Web server that uses HTTPS.
HTTPS protocol opens a secure hypertext transfer session with the specified site address.
To open login over secure HTTP, type https://<IP address of Cyberoam>
12
Cyberoam User Guide Cyberoam Basics
Screen - HTTPS login
Screen Elements Description
Login
User name
Password
Log on to
Login button
Specify user login name.
If you are logging on for the first time after installation, please use default username ‘cyberoam’
Specify user account Password
If you are logging on for the first time after installation, please use default password ‘cyber’
To administer Cyberoam, select ‘Web Admin Console’
Logs on to Web Admin Console
Click Login
Register your Cyberoam copy if Online Registration page is displayed on successful log on
Refer to Installation Guide for more details.
Table - Login screen elements
13
Cyberoam User Guide Cyberoam Basics
Screen - Registration screen
If Registration page opens, use Online or Manual registration process for registering the copy of
Cyberoam. Refer to Installation guide - Registration for detail on registration process.
Web console Authorization and Access control
By default, Cyberoam has four types of user groups:
Administrator group
Log in as Administrator group User to maintain, control and administer Cyberoam.
Administrator group User can create, update and delete system configuration & user information.
Administrator can create multiple administrator level users.
Manager group
Manager group User can only view the reports.
User group
User group User is the user who accesses the resources through Cyberoam.
Clientless group
User group User who can bypass Cyberoam Client login to access resources. Cyberoam itself takes care of login of this level user.
For Administrators and Managers, IP address based access restriction/control can be implemented. Refer to Access Configuration to implement.
Log out procedure
To avoid un-authorized users from accessing Cyberoam, log off after you have finished working. This will end the session and exit from Cyberoam.
14
Management
Cyberoam User Guide
Getting Started
Setting up Users
1
Once you have configured network and registered the copy of Cyberoam, you can start using
Cyberoam.
1. Start monitoring
Once you have installed and placed Cyberoam, default policy is automatically applied which will allow complete network traffic to pass through Cyberoam. This will allow you to monitor user activity in your Network based on default policy.
2. View Cyberoam Reports
Monitor your Network activities using Cyberoam Reports.
To view Reports, log on to Cyberoam Reports from Web Management Console using following
URL: http://<Internal IP Address>
To log on, use default username ‘cyberoam’ and password ‘cyber’.
Screen – Reports Log on screen
View your organization’s surfing pattern from Web Surfing
ÆOrganization wise report
15
Management
Cyberoam User Guide Setting up Users
Screen – Web surfing reports
View your organization’s general surfing trends from Trends
Æ Web Trends report
View your organization’s Category wise surfing trends from Trends
Æ Category Trends report
Screen – Trends report
3. Discover Network Application Traffic (Only if ‘Traffic Discovery’ add-on module is registered)
Detect your network traffic i.e. applications and protocols accessed by your users.
To view traffic pattern of your network, log on to Cyberoam Web Management Console using following URL: http://<Internal IP Address>
To log on, use default username ‘cyberoam’ and password ‘cyber’.
View amount of network traffic generated by various applications from Traffic Discovery
Æ Live
Connections
ÆApplication wise
16
Management
Cyberoam User Guide Setting up Users
Screen – Traffic Discovery
4. Configure for User name based monitoring
As Cyberoam monitors and logs user activity based on IP address, all the reports generated are also IP address based. To monitor and log user activities based on User names, you have to configure Cyberoam for integrating user information and authentication process.
Integration will identify access request based on User names and generate reports based on
Usernames.
If your Network uses Active Directory Services and users are already created in ADS, configure
Cyberoam to communicate your ADS. Refer to Cyberoam – ADS Integration guide for more details.
If your Network uses Windows Domain Controller, configure for Cyberoam to communicate with
Windows Domain Controller. Refer to Cyberoam – PDC Integration guide for more details.
5. Customize
You can create additional policies to meet your organization’s requirement.
Cyberoam allows you to:
7. Control individual user surfing time by defining Surfing quota policy. Refer to Policy
Management-Surfing Quota policy for more details.
8. Schedule Internet access for individual users by defining Access time policy. Refer to
Policy Management-Access time policy for more details.
9. Control web access by defining Internet Access policy. Refer to Policy Management-
17
Management
Cyberoam User Guide Setting up Users
Internet Access policy for more details.
10. Allocate and restrict the bandwidth usage by defining Bandwidth policy. Refer to Policy
Management-Bandwidth policy for more details.
11. Limit total as well as individual upload and/or download data transfer by defining data transfer policy. Refer Data transfer policy for more details. You will be able to define Data transfer policy only if ‘Data transfer Management’ add-on module is registered.
12. Restrict printer usage by defining Printing Quota policy. Refer to Policy Management-
Printing Quota policy for more details. You will be able to define Printing policy only if
‘Printing Policy’ add-on module is registered.
Note
You can change the default policy as per your organization’s requirement. Refer to Policy Management
– Internet Access Policy for more details.
18
Management
Cyberoam User Guide Setting up Users
Dashboard
As soon as you logon to the Web based Administration Console, Cyberoam Dashboard is displayed.
Dashboard provides one complete solution to many analytical needs. Using the "dashboard" concept of information presentation, Cyberoam makes it easy to view access data from multiple perspectives, allowing management to identify patterns and potential areas of risk and productivity loss. It will empower organizations to plan, understand, integrate and leverage strategy all from a single page report.
The goal of dashboard is to provide fast access to monitor and analyze employee Internet usage.
As a result, managers gain an unprecedented ability to report on and manage a wide specturm of the data and applications that employees use during their working hours.
Dashboard is the answer to – ‘Why can't Cyberoam automatically show me things that will help me with what I'm doing, instead of making me search around for them?’
Dashboard is divided into following section:
1. HTTP Traffic Analysis
2. User Surfing pattern
3. Usage Summary
4. System Resources
5. Recent Mail Viruses detected
6. Recent HTTP Viruses detected
7. Installation Information
8. System Status
9. DoS attack status
10. Recent IDP Alerts
19
