WatchGuard Firebox X Peak/Core e-Series - Manual (Page 2)

Register with LiveSecurity® Service
• Find and record your serial number.
• Go to http://www.watchguard.com/activate
• Log in.
(NOTE: If you are new to WatchGuard, follow the instructions to create a profile.)
• Follow the instructions on the screen.
• Copy your feature key to a text file. You will need it later.
Download software
• Continue or go to https://www.watchguard.com/archive/softwarecenter.asp
• Download the most current version of WatchGuard® System Manager and Fireware®
appliance software.
• Record the names and locations of the files you download.
Choose between routed and drop-in mode
• Many networks operate best with a routed configuration, but we recommend drop-in
mode if:
- You have already assigned a large number of static IP addresses and do not want to change your
network configuration.
- You cannot configure the computers on your trusted and optional networks that have public IP
addresses with private IP addresses.
• Use the diagrams below to learn about Firebox® X configuration methods.
Routed Network Configuration Drop-in Network Configuration
Record your network information
Network Addresses PPPoE on External Interface
Default Gateway ___________________________ User Name ___________________________
External Interface __________________________ Password _____________________________
Trusted Interface ___________________________ Static Address (optional)
Optional Interface _________________________ _____________________________________
Management Station _______________________
Connect cables
and power cord
Run the Quick Setup Wizard
• Make sure the management station is configured to accept DHCP-assigned addresses.
• Select Start > All Programs > WatchGuard System Manager > Quick Setup Wizard
Next Steps
• Your Firebox X now has a basic configuration that allows all TCP, UDP, and ping
traffic from trusted or optional interfaces to the external interface, and blocks
all unrequested traffic from the external interface to the trusted or optional
interfaces.
• Put the Firebox in its permanent physical location.
• Make sure the management station and the rest of the trusted network use the IP
address of the Firebox trusted interface as the default gateway.
• In WatchGuard System Manager, use File > Connect to Device to connect the
management station to the Firebox.
• Configure WatchGuard servers and customize your security policy.
• For complete documentation, go to www.watchguard.com/help/documentation
Set up the management station
• The management station is the computer you use to administer the Firebox X.
• Make sure the management station meets the requirements below.
• Run the WatchGuard System Manager (WSM) .exe file you downloaded in Step 2.
• Run the Fireware .exe file you downloaded in Step 2.
Minimum System Requirements
5
6
7
Operating Browser CPU Processor Memory Available
System Speed Disk Space
Windows Vista, XP SP2 IE 6, IE 7 Intel Pentium IV 1 GHz 512 MB 80 MB
Windows 2000 Firefox v2
Windows Server 2003 Netscape v7
Windows Vista, XP SP2 N/A Intel Pentium IV 2 GHz 1 GB 10 GB
Windows 2000
Windows Server 2003
If you install WSM
client software only
If you install WSM &
WatchGuard Server
software
En
gli
sh
Eth 0 Eth 1
Router
Getting Started
1
2
3
4
DHCP Hostname / ID on External Interface
Host ID (optional) ________________________
Additional Trusted IP Addresses
Secondary Network on the Trusted Interface
_______________________________________
A) Router
B) External Interface: Connects to the external network/Internet.
C) Trusted Interface: Connects to the private LAN/internal network. D) Optional Interface(s): Connects to a separate network protected
by the firewall but isolated from the trusted network.
E) Secondary Network: A network that shares the same physical
network as one of the Firebox interfaces. This IP address is the
default gateway for computers on this network.
4
4
A) 50.1.1.1/24
B) 50.1.1.2/2
C) 50.1.1.2/24 E) 10.0.1.1/24 D) 50.1.1.2/2 172.16.0/24 10.0.1.0/24
A) 50.1.1.1/24
B) 50.1.1.2/24
C) 10.0.1.1/24 D) 172.16.1/24