www.astaro.

com

Astaro Security Gateway V7 6. Configure the Internal Network (LAN)

In the Definitions directory,

ASG - Minimum Hardware Requirements:
N Pentium III (800 MHz) or compatible CPU
N 512 MB RAM
N 10 GB IDE or SCSI hard disk drive
N Bootable CD-ROM drive
open the Networks menu and
Client - Hard-/Software Requirements: check the settings for the
N 1 GHz and 512 MB RAM internal network. Three logical
N Browser: Firefox recommended networks were defined during
(http://www.getfirefox.com/) installation based on your set-
or Microsoft Internet Explorer 6 or 7 tings for the internal network
N WebAdmin is running at port 4444 card (eth0).

1. Install the Software 7. Configure the External (WAN) Interface (eth1)

Astaro Security Install the Astaro Security Gateway V7 Software on a Open the Network >> Inter-
Gateway V7 separate host. The installation will completely erase all faces tab and configure the
data on the hard disk including all programs and the interface to be used to connect
Switch eth0 operating system. to the external network (WAN).
Internal After the security system has rebooted (a process The choice of interface and the
Network which, depending on hardware, can take up to five required configuration depend on
minutes), ping the IP address of the eth0 interface what kind of connection to the
Admin
Client to ensure it is reachable. Internet you will be using.

2. Start your Browser and open the graphical user interface (WebAdmin) 8. Define Masquerading Rules

Open the Network Security >>

Before you can access the graphical user interface (WebAdmin), you will need to con-
NAT >> Masquerading tab and
figure the Admin Client with the LAN connection properties. This properties can later be
configure the relevant rule. You
changed to the IP addresses used in the local network.
need this setting, if you wish to
The filing position of the menu for these settings depends on the operating system of the
use private IP addresses for your
client. Example: With Microsoft Windows XP the menu can be found under Start >> Sys-
internal network (LAN) and you
tem Control >> Network connections.
wish to connect directly (without
LAN connection properties: proxies) to the Internet.
IP Address: Any address in the range 192.168.2.1 through
192.168.2.254 (192.168.2.100 excepted)
Netmask: Enter 255.255.255.0 9. Configure the DNS Proxy
Standard Gateway: Enter the IP address of the appliance’s
internal network card (eth0): 192.168.2.100 In the Network >> DNS direc-
DNS Server: Enable this option and enter the IP address of tory, open the Global tab and
the internal network card (eth0): 192.168.2.100 specify the internal networks to
Admin Client use the Astaro Security Gateway
as a DNS resolver.
Once your browser is correctly configured, start it and enter the management address of
the security system (the internal IP address configured for eth0) as follows:
https://IP Address:4444 (e.g., https://192.168.2.100:4444).

3. Enter the Administrator Contact and set the System Passwords 10. Connect other Networks

In the Basic System Setup Astaro Security If you wish to connect other
window, enter the Administrator Gateway V7 eth2 internal networks (e.g., DMZ)
Contact and the passwords for to the Astaro Security Gateway,
Switch eth0
the Astaro Security Gateway. attach their cables now.
Internal Switch
Network
DMZ
Admin
Client

4. Log in to the graphical user interface (WebAdmin) 11. Configure the HTTP Proxy

Username: admin In the Web Security directory,

Password: Password of the open the HTTP menu and enable
WebAdmin user the proxy. In Transparent mode
Please follow the steps 5 through it isn’t necessary to configure
13 in the order listed below (by the browsers to allow the clients
clicking Cancel Wizard) or use in the internal network to access
alternatively the Astaro Security the Internet by using the HTTP
Gateway setup wizard. proxy.

>> The Dashboard opens 12. Configure the Packet Filter

The Dashboard graphically dis- In the Network Security >>

plays a snapshot of the current Packet Filter directory, open
operating status of the firewall the Rules tab and establish the
device. packet filtering rules. By default,
all packets are filtered until you
explicitly enable certain services.

5. Check the Internal Network (LAN) Interface (eth0) 13. Install System and Virus Scanner Updates

In the Network >> Interfaces By default, the Firmware and

directory, open the Interfaces Pattern Up2Dates will be down-
tab and check the settings for loaded automatically from the
eth0 network card. Up2Date server. To keep the sys-
The settings for this interface tem safe, please install a new
are based on the information Firmware Up2Date shortly after
entered during the software the download. Now, the initial
installation. configuration is complete.
 Astaro Security
Gateway V7

© 2007 Astaro AG www.astaro.com

Quick Start Guide