RouteFinder RF850 RF860. User Guide. Internet Security Appliance

Transcription

1 RouteFinder Internet Security Appliance RF850 RF860 User Guide

2 Copyright and Technical Support User Guide RouteFinder RF850/860 Document Number: S000400E, Revision E This publication may not be reproduced, in whole or in part, without prior expressed written permission from Multi-Tech Systems, Inc. All rights reserved. Copyright by Multi-Tech Systems, Inc. Multi-Tech Systems, Inc. makes no representations or warranties with respect to the contents hereof and specifically disclaims any implied warranties of merchantability or fitness for any particular purpose. Furthermore, Multi-Tech Systems, Inc. reserves the right to revise this publication and to make changes from time to time in the content hereof without obligation of Multi-Tech Systems, Inc. to notify any person or organization of such revisions or changes. Record of Revisions Revision Date Description B 06/01/06 Added explanation of Load Balancing on the Network Setup screen. C 04/05/07 Updated for Software Changed examples 1 and 2. Added Table of Commonly Supported Subnet Addresses to the Appendix. Updated the Technical Support contact list. D 09/05/07 Added "Description of Syslog Messages" to Appendix A Disposition of Events. Updated the warranty statement. Added an RJ-45 Ethernet cable to the Ship Kit list. Added an FAQ about the Ethernet ports supporting 10/100 Mbps half-duplex and full duplex lines. E 04/14/08 Changes for software version Added a drawing of the RouteFinder with mounting brackets. 05/04/09 Added a link to the Multi-Tech Web site for the Warranty statement. Warranty For Warranty information, see the Multi-Tech Web site at Patents This device is covered by one or more of the following U.S. Patent Numbers: 6,219,708; 5,301,274; 5,309,562; 5,355,365; 5,355,653; 5,452,289; 5, The modem is covered by one or more of the following U.S. Patent Numbers: 6,031,867; 6,012,113; 6,009,082; 5,905,794; 5,864,560; 5,815,567; 5,815,503; 5,812,534; 5,809,068; 5,790,532; 5,764,628; 5,764,627; 5,754,589; D394,250; 5,724,356; 5,673,268; 5,673,257; 5,644,594; 5,628,030; 5,619,508; 5,617,423; 5,600,649; 5,592,586; 5,577,041; 5,574,725; D374,222; 5,559,793; 5,546,448; 5,546,395; 5,535,204; 5,500,859; 5,471,470; 5,463,616; 5,453,986; 5,452,289; 5,450,425; D361,764; D355,658; D355,653; D353,598; D353,144; 5,355,365; 5,309,562; 5,301,274 Other Patents Pending Trademarks Registered Trademarks of Multi-Tech Systems, Inc. include: Multi-Tech, the Multi-Tech logo, and RouteFinder. Windows is a registered trademark of Microsoft Corporation in the United States and other countries. Kasperkey is a trademark of Kasperkey Lab. All products or technologies are the trademarks or registered trademarks of their respective holders. Technical Support Country By By Phone Europe, Middle East, Africa support@multitech.co.uk +(44) U.S., Canada, all others support@multitech.com or World Headquarters Multi-Tech Systems, Inc Woodale Drive Mounds View, Minnesota (763) or (800) Fax Internet Address: Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 2

3 Table of Contents Contents Chapter 1 Product Description and Specifications... 7 Product Description... 7 RouteFinder Documentation... 7 RouteFinder Features... 7 Safety Warnings... 8 Safety Recommendations for Rack Installations... 8 Shutdown Caution... 8 Ship Kit Contents... 9 License Keys... 9 Typical Applications Specifications Chapter 2 Installation and Setup System Administrator Planning Planning the Network Establishing an Address Table Front Panel Cabling Procedure Rackmount Bracket Installation Setting up a Workstation and Starting the RouteFinder Establish TCP/IP Communication Set a Fixed IP Address Obtain a Dynamic IP Address Open a Web Browser Login Web Management Software Opens Navigating Through the Software Screens Screen Buttons Menus and Sub-Menus Chapter 3 Configuration Using Web Management Software Initial Configuration Step Second Configuration Step Using the Wizard Setup The Wizard Setup Screen Configuration Example Chapter 4 Configuration Examples Example 3 Remote Client-to-LAN Configuration Using DNAT and Aliasing Example 4 Client-to-LAN Configuration Using PPTP Tunneling Checking the Tunnel Chapter 5 URL Categorization Important Settings Setting Up HTTP Proxy and URL Filtering Chapter 6 RouteFinder Software Menu Bar Administration Administration > System Setup Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 3

4 Table of Contents Administration > SSH Administration > SNTP Client Administration > Administrative Access Administration > Change Root Password Administration > Site Certificate Administration > License Key Administration > Intrusion Detection Administration > Tools Administration > System Scheduler Administration > Factory Defaults Administration > User Authentication > Local Users Administration > User Authentication > RADIUS & SAM Administration > Version Information Administration > Restart Administration > Shutdown Networks & Services Networks & Services > Networks Networks & Services > Services Networks & Services > Network Groups Networks & Services > Service Groups Proxy General Information About Proxies Proxy > HTTP Proxy Proxy > HTTP Proxy > Custom Filters Proxy > SMTP Proxy Proxy > SMTP Proxy > SMTP SPAM Filtering Proxy > POP3 Proxy Proxy > POP3 Proxy > POP3 SPAM Filtering Proxy > POP3 Advanced Configuration Proxy > SOCKS Proxy Proxy > DNS Proxy Network Setup About Interfaces About the Interface Screen Network Setup > Interface Network Setup > PPP Change Your Country/Region Code Network Setup > PPPoE Network Setup > DHCP Client Network Setup > Dynamic DNS (DDNS) Network Setup > Routes Network Setup > Masquerading Network Setup > SNAT Network Setup > DNAT Network Setup > Load Balancing Network Setup > High Availability DHCP Server DHCP Server > Subnet Settings DHCP Server > Fixed Addresses Tracking Tracking > Accounting Tracking > Update Services Tracking > Backup Tracking > Version Control Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 4

5 Table of Contents Packet Filters Packet Filters > Packet Filter Rules Packet Filters > ICMP Packet Filters > Advanced Packet Filters > Enable/Disable Log Packet Filters > QoS VPN (Virtual Private Networks) VPN > IPSec Introduction to Virtual Private Networks VPN > X.509 Certificates VPN > IPSec Bridging VPN > PPTP Wizard Setup Screen Description Statistics & Logs Statistics & Logs > Uptime Statistics and Logs > Hardware Statistics and Logs > Networks Statistics & Logs > Interfaces Statistics & Logs > SMTP Proxy Statistics & Logs > Accounting Statistics & Logs > Self Monitor Statistics & Logs > IPSec Statistics & Logs > PPTP Statistics & Logs > Packet Filter Statistics & Logs > Port Scans Statistics & Logs > View Logs Statistics & Logs > HTTP Access Statistics & Logs > DHCP Statistics & Logs > SMTP Virus Quarantines Statistics & Logs > POP3 Virus Quarantines Statistics & Logs > SMTP SPAM Quarantines Statistics & Logs > Administrative Authentication Log Statistics & Logs > QoS Statistics & Logs > DDNS Log Chapter 7 User Authentication Methods Proxy Services and Authentication Methods Which Method Should You Choose? Authentication Setup Setting Up RADIUS Authentication Setting Up a Microsoft IAS RADIUS Server Setting Up NT/2000 SAM (SMB) Authentication Chapter 8 Frequently Asked Questions (FAQs) Chapter 9 Troubleshooting Appendix A Disposition of Events for the RouteFinder v3.xx Appendix B The RouteFinder Rescue Kernel Appendix C Table of Commonly Supported Subnet Addresses Appendix D Hardware Upgrades & Add-ons and Software Add-ons Hardware Upgrades and Add-ons Software Add-ons Appendix E RouteFinder Maintenance Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 5

6 Table of Contents Appendix F Ordering Accessories SupplyNet Online Ordering Instructions Appendix G Regulatory Compliance Appendix H License Agreements GNU GENERAL PUBLIC LICENSE Kaspersky Standard End User License Agreement Appendix I Waste Electrical and Electronic Equipment Directive (WEEE) Glossary Index Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 6

7 Chapter 1 Product Description and Specifications Chapter 1 Product Description and Specifications Product Description The RouteFinder all-in-one security appliance is designed to maximize network security without compromising network performance. It offers a Stateful Packet Inspection firewall for the ultimate in firewall security. The RouteFinder security appliance uses data encryption, user authentication, and the Internet to securely connect telecommuters, remote offices, customers, or suppliers to the corporate office while avoiding the cost of private leased lines or dial-up charges. RouteFinder Documentation The Quick Start Guide is intended to provide the experienced system administrator the information needed to quickly get the RouteFinder up and running. The User Guide with more detailed information is provided on the RouteFinder CD or the Multi-Tech Systems, Inc. Web site. RouteFinder Features See the RouteFinder Data Sheet for detailed descriptions of the following features: Supports IPSec and PPTP VPN tunneling Utilizes Triple Data Encryption Standard (3DES) and AES encryption Stateful Packet Inspection firewall with packet filter rules, DNAT, SNAT, and IP Masquerade Optional anti-virus subscription Free spam filtering for unsolicited bulk s QoS (Quality of Service) / Bandwidth allocation Dual WAN load balancing and failover High availability Automatic dial-backup with built-in modem (RF860) or via an external dial-up modem or ISDN terminal adapter (RF850) Automatic system updates to protect your network against the latest threats and DoS attacks Application layer security using SMTP, HTTP, DNS, and SOCKS proxies Secure local or remote management using HTTP, HTTPS, or SSH Reporting function provides valuable troubleshooting information Three built-in Ethernet ports (LAN, WAN, WAN2/DMZ) Shared Internet access via PPPoE, DHCP or static IP Internet access control tools provide client and site filtering Traffic monitoring and reporting IP address mapping/port forwarding and DMZ port RoHS compliant Two-year warranty Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 7

8 Safety Warnings Chapter 1 Product Description and Specifications Lithium Battery Caution Danger of explosion if battery is incorrectly replaced. A lithium battery on the RouteFinder PC board provides backup power for the time-keeping capability. The battery has an estimated life expectancy of ten years. When it starts to weaken, the date and time may be incorrect. If the battery fails, send the board back to Multi-Tech for battery replacement. Ethernet Ports Caution The Ethernet ports are not designed to be connected to a Public Telecommunication Network. Software Recovery CD Warning Do not use the Software Recovery CD for any purpose except for re-installing software onto the RouteFinder hard drive. Telecom Warnings for Modem Operation Never install telephone wiring during a lightning storm. This product must be disconnected from the telephone network interface when servicing. This product is to be used with UL and cul listed computers. Never touch uninsulated telephone wires or terminals unless the telephone line has been disconnected at the network interface. Use caution when installing or modifying telephone lines. Avoid using a telephone during an electrical storm. There may be a remote risk of electrical shock from lightning. Do not use the telephone to report a gas leak in the vicinity of the leak. To reduce the risk of fire, use only No. 26 AWG or larger telecommunications line cord. Never install telephone jacks in a wet location unless the jack is specifically designed for wet locations. Safety Recommendations for Rack Installations Ensure proper installation of the RouteFinder in a closed or multi-unit enclosure by following the recommended installation as defined by the enclosure manufacturer. IMPORTANT: Do not place the RouteFinder directly on top of other equipment or place other equipment directly on top of the RouteFinder. If installing the RouteFinder in a closed or multi-unit enclosure, ensure adequate airflow within the rack so that the maximum recommended ambient temperature is not exceeded. Ensure that the RouteFinder is properly connected to earth ground via a grounded power cord. If a power strip is used, ensure that the power strip provides adequate grounding of the attached apparatus. Ensure that the main supply circuit is capable of handling the load of the RouteFinder. Refer to the power label on the equipment for load requirements. Maximum ambient temperature for the RouteFinder is 50 degrees Celsius (120 F). This equipment should only be installed by properly qualified service personnel. Only connect like circuits. In other words, connect SELV (Secondary Extra Low Voltage) circuits to SELV circuits and TN (Telecommunications Network) circuits to TN circuits. Shutdown Caution Never unplug the RouteFinder power until after you have performed the Shutdown process. If the RouteFinder is not properly shut down before unplugging the Power, the next startup may take a little longer, or in the worst case, data could be lost. Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 8

9 Chapter 1 Product Description and Specifications Ship Kit Contents The RouteFinder is shipped with the following: One Multi-Tech Systems, Inc. RouteFinder One external power supply with AC power cord RJ-45 Ethernet cable One printed Quick Start Guide Two rack mounting brackets and four mounting screws. One RouteFinder documentation CD which contains documentation, license agreements, Adobe Acrobat Reader, and license keys. A 30-day evaluation copy of VPN client software on CD (not the full working version). One RouteFinder Software Recovery CD. Warning: Do not use the Software Recovery CD for any purpose except for re-installing software onto the RouteFinder hard drive. Note: If any of these items are missing, contact Multi-Tech Systems or your dealer or distributor. Inspect the contents for signs of any shipping damage. If damage is observed, do not power up the RouteFinder; contact Technical Support at Multi-Tech Systems, Inc. for advice. License Keys Where to Find the License Key Numbers License Key numbers are printed on labels that are placed: On the bottom of the RouteFinder chassis On the compact flash drive inside the chassis On the front cover of the Quick Start Guide. System License Key Each RouteFinder ships with a unique individual system License Key, a 20-digit alphanumeric number. You can view License Key information from the RouteFinder's Web Management software at Administration > License Key. This screen shows the entered License Key number and indicates whether it is a valid License Key number. The License Key number is tied to and tracked with your RouteFinder's serial number. Whenever you require additional licenses, you must first provide Multi-Tech with your current License Key and serial number information in order for us to update your RouteFinder. With a valid License Key, you are entitled to use Multi- Tech s Update service and support. Note: The system key is already entered into the VPN setup. AntiVirus License Key AntiVirus software with its corresponding License Key is available as a special purchase from Multi-Tech. Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 9

10 Chapter 1 Product Description and Specifications Typical Applications Remote User VPN. The client-to- LAN VPN application replaces traditional dial-in remote access by allowing a remote user to connect to the corporate LAN through a secure tunnel over the Internet. The advantage is that a remote user can make a local call to an Internet Service Provider, without sacrificing the company s security, as opposed to a long distance call to the corporate remote access server. Branch Office VPN. The LAN-to- LAN VPN application sends network traffic over the branch office Internet connection instead of relying on dedicated leased line connections. This can save thousands of dollars in line costs and reduce overall hardware and management expenses. Firewall Security. As businesses shift from dial-up or leased line connections to always-on broadband Internet connections, the network becomes more vulnerable to Internet hackers. The RouteFinder provides a fullfeatured firewall based on Stateful Packet Inspection technology and NAT protocol to provide security from intruders attempting to access the office LAN. Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 10

11 Chapter 1 Product Description and Specifications Specifications Appliance Features RF850 RF860 Ethernet Ports 10/100BaseT (LAN, WAN, WAN2/DMZ) 10/100BaseT (LAN, WAN, WAN2/DMZ) Number of Network Users RAM 512MB (can be upgraded to a total of 2GB) 1GB (can be upgraded to a total of 2GB) Rackmount or Standalone Both Both Firewall Features Stateful Packet Inspection Yes Yes Anti-Virus Option Yes Yes Spam Filtering Yes Yes Application Proxies Yes Yes Port and IP Filtering Yes Yes Denial of Service Protection (DoS) Yes Yes Network Address Translation (NAT) Yes Yes Virtual Server Yes Yes Intrusion/Port Scan Detection Yes Yes H.323 Pass Through Yes Yes VPN Features Remote User (Client-to-LAN) Yes Yes Branch Office (LAN-to-LAN) Yes Yes 3DES/AES Encryption Yes Yes Encryption Throughput 5M 15M IPSec/PPTP VPN Yes Yes Total Number of Tunnels Dynamic-to-Dynamic Tunneling Yes Yes VPN Using FQDN Yes Yes x.509 Certificates Yes Yes Management Features Alerts Yes Yes Local & Remote Management Yes Yes Logging Yes Yes Reporting Yes Yes Web Based (HTTP, HTTPS/SSL) Yes Yes Secure Shell (SSH) Yes Yes Syslog Yes Yes Other Features Shared Internet Access Yes Yes Automatic Dial-Backup Yes Yes Integrated Modem No Yes Dual WAN Load Balancing Yes Yes Internet/VPN Failover Yes Yes High Availability Yes Yes QoS/Bandwidth Allocation Yes Yes PPPoE Yes Yes DHCP Client/Server Yes Yes User Authentication (Web Access) Yes Yes Live Updates Yes Yes Warranty 2 Years 2 Years Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 11

12 Chapter 1 Product Description and Specifications Power & Physical Description RF850 RF860 Power - Voltage & Frequency v AC, Hz v AC, Hz Power Consumption 42 Watts 3.5A 42 Watts 3.5A Physical Description Operating Environment Dimensions: 12" w 1.75" h 8" d; (30.4cm 4.45cm 20.3cm) Weight: 4.4 lbs. (2.0 kg) Temperature Range: 32 to 120 F (0-50 C) Humidity: 25-85% noncondensing Approvals FCC Part 68 FCC Part 15 (Class A) CE Mark UL60950 Dimensions: 12" w 1.75" h 8" d; (30.4cm 4.45cm 20.3cm) Weight: 4.6 lbs. (2.1 kg) Temperature Range: 32 to 120 F (0-50 C) Humidity: 25-85% noncondensing FCC Part 68 FCC Part 15 (Class A) CE Mark UL60950 Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 12

13 Chapter 2 Installation and Setup Chapter 2 Installation and Setup System Administrator Planning The system administrator must complete these setup requirements before installing the RouteFinder software: Set the correct configuration of the Default Gateway Install an HTTPS-capable browser (e.g., the latest version of Microsoft Internet Explorer or Netscape Navigator) Activate JavaScript and Cascading Style Sheets Make sure that no proxies are entered in the browser If Secure Shell (SSH) is to be used, you must install an SSH client program (e.g., PuTTY in Windows or the bundled SSH client in most Linux packages). Planning the Network Before you begin the installation process, you should plan your network and decide which computer is to have access to which services. This simplifies configuration and saves you a lot of time that you would otherwise need for corrections and adjustments. RouteFinder Connection between Your Internal Network and the External Network Establishing an Address Table Enter your configuration information into the appropriate field of the Address Table below. You can use this table to keep track of your specific RouteFinder and network information (e.g., the IP address used, lists, etc.) and keep for future reference. IP Address Net Mask Default Gateway Network Card connected to the internal network (LAN on eth0) Network Card connected to the external network (WAN on eth1) Network Card connected to the WAN2 / DMZ (eth2) Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 13

14 Chapter 2 Installation and Setup Front Panel LEDs 10MB Description WAN1, WAN2/DMZ Lights when a successful 10Base-T Internet connection is established. LAN Lights when a successful 10Base-T Ethernet connection is established. ACT WAN1, WAN2/DMZ Blinks when it is receiving or transmitting data. LAN Blinks when it is receiving or transmitting data. 100MB WAN1, WAN2/DMZ Lights when a successful 100Base-T Internet connection is established. LAN Lights when a successful 100Base-T Ethernet connection is established. Disk ACT Lights when the disk drive is accessed. Status When functioning normally, the LED blinks. The LED is a solid light when the RouteFinder is booting up, saving the configuration, restarting, or updating the firmware. Power Lights when power is being supplied to the RouteFinder. Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 14

15 Chapter 2 Installation and Setup Cabling Procedure Make the proper connections as illustrated in this drawing of the RouteFinder back panel. Basic Connections 1. Using an RJ-45 Ethernet cable, connect the LAN jack to a PC, internal network switch, or hub. Note: Use a cross-over Ethernet cable if connecting to a single device. 2. Using an RJ-45 Ethernet cable, connect the WAN 1 jack to a cable modem or DSL modem connected to an Internet Service Provider. 3. Using the supplied POWER cord, plug one end into the RouteFinder power plug, and the other end into a live power outlet. Note: The status LED blinks continuously after power-up. 4. Wait for the RouteFinder to beep five times, indicating that it is ready to be configured with a Web browser. This may take two or three minutes. Optional Connections 1. Using an RJ-45 Ethernet cable, connect the WAN2 / DMZ jack to a network or DMZ device. For example, a Voice over IP gateway. 2. Using a DB-9 cable, connect COM 1 port to a mouse or the COM port on a PC. 3. Using a DB-15 DSUB cable, connect the VIDEO port to a monitor. 4. Connect the Keyboard jack to a keyboard. 5. Using a USB connector, connect a memory stick, a floppy drive, a CD-ROM drive, a keyboard, mouse, etc. Rackmount Bracket Installation The RouteFinder is shipped with two rackmount brackets and four rackmount screws for installing the RouteFinder VPN into an industry-standard EIA 19-inch rack. Note: The rackmount screws provided in this kit are included for the purpose of attaching the brackets to the RouteFinder as shown below. It is up to you to provide the bracket-to-rack mounting screws. Use the rack manufacturer s documentation and procedures to safely and securely install the RouteFinder into the rack. RouteFinder Shown from the Back Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 15

16 Chapter 2 Installation and Setup Setting up a Workstation and Starting the RouteFinder This section of the Quick Start covers the steps for setting up TCP/IP communication on the PC(s) connected to the RouteFinder, starting up the RouteFinder, and opening the RouteFinder Web Management program. Establish TCP/IP Communication The RouteFinders have built-in DHCP server functionality, so you can set the PC to obtain a dynamic IP address. The following directions are for Windows 2000+/XP operating systems. Set a Fixed IP Address To set a Fixed IP Address, check Specify an IP address instead of Obtain an IP address automatically. Then click OK. 1. Enter the workstation IP address as x. Note that the x in the address stands for numbers 101 and up. 2. Enter the Subnet mask as Enter the Default gateway as Close out of the Control Panel. 5. Repeat these steps for each PC on your network. OR Obtain a Dynamic IP Address To obtain a dynamic IP address so it can be assigned to the Ethernet port: 1. Make the RouteFinder connections as described on the previous two pages. 2. Click Start Settings Control Panel. Double-click the Network Connections icon. 3. The Network Connections screen displays. Right-click the Local Area Connection icon and choose Properties from the drop down list. Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 16

17 Chapter 2 Installation and Setup 4. The Local Area Connection Properties dialog box displays. Select Internet Protocol [TCP/IP]. Click the Properties button. 5. Once you click the Properties button, the following screen displays. To have your DHCP client obtain a dynamic IP address, click the button for Obtain an IP address automatically. 6. Close out of the Control Panel. 7. Repeat these steps for each PC on your network. Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 17

18 Chapter 2 Installation and Setup Open a Web Browser Note: Be sure that the RouteFinder is cabled and that the power is connected. See the cabling drawings at the beginning of this chapter. Bring up a Web browser on the workstation. 1. Type the default Gateway address: 2. Press Enter IMPORTANT: Be sure to type https (http will not work). Note: Make sure your PC s IP address is in the same network as the router s IP address. IPCONFIG is a tool for finding a computer s default gateway and MAC address. In some environments, one or more Security Alert screen(s) may display. At the following Security Alert screen, click Yes and follow any additional on-screen prompts. Login The Login screen displays after you type the default Gateway address: Type the default User name: admin (all lower-case) Tab to the Password field and type the default password: admin (all lower-case). Click the Login button. Note: User name and Password entries are case-sensitive (both must be typed in lower-case). A password can be up to 12 characters. If Windows displays the AutoComplete screen, you may want to click No to tell Windows OS to not remember the password for security reasons. Password Caution: Use a safe password! Your first name spelled backwards is not a sufficiently safe password; a password such as xft35$4 is better. It is recommended that you change the default password. Create your own password. If someone else is already logged into the RouteFinder or you were logged in recently, the following message displays. Click Yes. (If you click No, you are returned to the Login screen.) Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 18

19 Chapter 2 Installation and Setup Web Management Software Opens The Web Management software Home screen displays. This software is factory-installed on your RouteFinder. (This is a view of the top part of the Home screen.) A description of the Web Management software continues in Chapter 4. Before using the software, you may find the following information about navigating the screens and the structuring of the menus helpful. Navigating Through the Software Screens Menu Bar Sub Menu Other Options Screen Name Input / Display Area RouteFinder Menu Bar Sub-Menu Each item on the Menu Bar has its own sub-menu, which displays on the left side of the screen. When you click one of the Menu Bar buttons, the first sub-menu option displays. You can choose other sub-menu screens by clicking the screen name in the sub-menu list. This is an example of the Networks & Services sub-menu. Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 19

20 Screen Buttons Home Wizard Setup Help Logout Chapter 2 Installation and Setup The main screen. Change passwords and quickly set up your RouteFinder with the basic configuration that will set it up as a firewall. Describes what to do on each screen. Logout and return to the login screen. Menus and Sub-Menus Administration System Setup SSH SNTP Client Administrative Access Change Root Password Site Certificate License Key Intrusion Detection Tools System Scheduler Factory Defaults User Authentication Local Users Radius & SAM Version Information Restart Shutdown Networks & Services Networks Services Network Groups Service Groups Proxy HTTP Proxy Custom Filters SMTP Proxy SMTP SPAM Filtering POP3 Proxy POP3 SPAM Filtering Advanced Configurations SOCKS Proxy DNS Proxy Network DHCP Server Setup Interface Subnet Settings PPP Fixed PPPoE Addresses DHCP Client Dynamic DNS Routes Masquerading SNAT DNAT Load Balancing High Availability Tracking Packet Filters VPN Statistics & Logs Accounting Update Services Backup Version Control IPSec X.509 Certificates IPSec Bridging PPTP Packet Filter Rules ICMP Advanced Enable/Disable Log QoS Uptime Hardware Networks Interfaces SMTP Proxy Accounting Self Monitor IPSec PPTP Packet Filter Port Scans View Logs HTTP Access DHCP SMTP Virus Quarantine POP3 Virus Quarantine SMTP Spam Quarantine Administrative Authentication Log QoS DDNS Multi-Tech Systems, Inc. RouteFinder RF850/860 User Guide (PN S000400E) 20