Watchguard SSL User guide

WatchGuard Administrator

User Guide

Version: 2.0

ii WatchGuard SSL 500 & SSL 1000

Notice to Users

Information in this guide is subject to change without notice. Companies, names, and data used in examples

herein are fictitious unless otherwise noted. No part of this guide may be reproduced or transmitted in any

form or by any means, electronic or mechanical, for any purpose, without the express written permission of

WatchGuard Technologies, Inc.

Guide revision: 08/27/2008

Copyright, Trademark, and Patent Information

mentioned herein, if any, are the property of their respective owners.

This product is for indoor use only.

WatchGuard, the WatchGuard logo, LiveSecurity, and any other mark listed as a trademark in the “Terms of

Use” portion of the WatchGuard Web site that is used herein are either registered trademarks or trademarks

of WatchGuard Technologies, Inc. and/or its subsidiaries in the United States and/or other countries. All other

trademarks are the property of their respective owners.

Microsoft®, Internet Explorer®, Windows® 95, Windows® 98, Windows NT®, Windows® 2000, Windows® XP, and

Windows® Vista are either registered trademarks or trademarks of Microsoft Corporation in the United States

and/or other countries.

Java and all Java-based marks are trademarks or registered trademarks of Sun Microsystems, Inc. in the United

“OpenVPN” is a trademark of OpenVPN Solutions LLC.

Licensing

Some components of the WatchGuard SSL software are distributed with source code covered under one or

more third party or open source licenses. We include below the full text of the licenses as required by the terms

of each license.

To get the source code covered by these licenses, contact WatchGuard Technical Support at:

877.232.3531 from the United States or Canada

+1.360.482.1083 from all other countries

You can download the source code at no charge. If you request a compact disc, there is a $35 charge for

administration and shipping.

GNU Lesser General Public License (LGPL)

Specific copyright information for the above software can be found in the WatchGuard SSL Hardware Guide

that accompanies the WatchGuard SSL device in shipment.

User Guide iii

Apache License (2.0)

Each of the following programs are wholly or partially licensed under version 2.0 of the Apache License:

Apache ant, Apache web server, Apache FOP, Apache Commons, Apache POI.

Specific copyright information for the above software, if any, can be found in subsequent pages of this

Reference Guide.

Apache License

Version 2.0, January 2004

http://www.apache.org/licenses/

TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION

1. Definitions.

“License” shall mean the terms and conditions for use, reproduction, and distribution as defined by

Sections 1 through 9 of this document.

“Licensor” shall mean the copyright owner or entity authorized by the copyright owner that is granting

the License.

“Legal Entity” shall mean the union of the acting entity and all other entities that control, are controlled

by, or are under common control with that entity. For the purposes of this definition, “control” means

(i) the power, direct or indirect, to cause the direction or management of such entity, whether by

contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii)

beneficial ownership of such entity.

“You” (or “Your”) shall mean an individual or Legal Entity exercising permissions granted by this

License.

“Source” form shall mean the preferred form for making modifications, including but not limited to

software source code, documentation source, and configuration files.

“Object” form shall mean any form resulting from mechanical transformation or translation of a Source

form, including but not limited to compiled object code, generated documentation, and conversions

to other media types.

“Work” shall mean the work of authorship, whether in Source or Object form, made available under the

License, as indicated by a copyright notice that is included in or attached to the work (an example is

provided in the Appendix below).

“Derivative Works” shall mean any work, whether in Source or Object form, that is based on (or derived

from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications

represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works

shall not include works that remain separable from, or merely link (or bind by name) to the interfaces

of, the Work and Derivative Works thereof.

“Contribution” shall mean any work of authorship, including the original version of the Work and any

modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to

Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized

to submit on behalf of the copyright owner. For the purposes of this definition, “submitted” means any

form of electronic, verbal, or written communication sent to the Licensor or its representatives,

including but not limited to communication on electronic mailing lists, source code control systems,

and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of

discussing and improving the Work, but excluding communication that is conspicuously marked or

otherwise designated in writing by the copyright owner as “Not a Contribution.”

“Contributor” shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution

has been received by Licensor and subsequently incorporated within the Work.

iv WatchGuard SSL 500 & SSL 1000

2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor

hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable

copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform,

sublicense, and distribute the Work and such Derivative Works in Source or Object form.

3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby

grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as

stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise

transfer the Work, where such license applies only to those patent claims licensable by such

Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their

Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent

litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work

or a Contribution incorporated within the Work constitutes direct or contributory patent infringement,

then any patent licenses granted to You under this License for that Work shall terminate as of the date

such litigation is filed.

4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in

any medium, with or without modifications, and in Source or Object form, provided that You meet the

following conditions:

a. You must give any other recipients of the Work or Derivative Works a copy of this License; and

b. You must cause any modified files to carry prominent notices stating that You changed the files;

and

c. You must retain, in the Source form of any Derivative Works that You distribute, all copyright,

patent, trademark, and attribution notices from the Source form of the Work, excluding those

notices that do not pertain to any part of the Derivative Works; and

d. If the Work includes a “NOTICE” text file as part of its distribution, then any Derivative Works that

You distribute must include a readable copy of the attribution notices contained within such

NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at

least one of the following places: within a NOTICE text file distributed as part of the Derivative

Works; within the Source form or documentation, if provided along with the Derivative Works; or,

within a display generated by the Derivative Works, if and wherever such third-party notices

normally appear. The contents of the NOTICE file are for informational purposes only and do not

modify the License. You may add Your own attribution notices within Derivative Works that You

distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such

additional attribution notices cannot be construed as modifying the License.

You may add Your own copyright statement to Your modifications and may provide additional or

different license terms and conditions for use, reproduction, or distribution of Your modifications, or

for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the

Work otherwise complies with the conditions stated in this License.

5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally

submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of

this License, without any additional terms or conditions. Notwithstanding the above, nothing herein

shall supersede or modify the terms of any separate license agreement you may have executed with

Licensor regarding such Contributions.

6. Trademarks. This License does not grant permission to use the trade names, trademarks, service

marks, or product names of the Licensor, except as required for reasonable and customary use in

describing the origin of the Work and reproducing the content of the NOTICE file.

7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides

the Work (and each Contributor provides its Contributions) on an “AS IS” BASIS, WITHOUT

WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation,

any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A

PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or

redistributing the Work and assume any risks associated with Your exercise of permissions under this

License.

User Guide v

8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence),

contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts)

or agreed to in writing, shall any Contributor be liable to You for damages, including any direct,

indirect, special, incidental, or consequential damages of any character arising as a result of this License

or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill,

work stoppage, computer failure or malfunction, or any and all other commercial damages or losses),

even if such Contributor has been advised of the possibility of such damages.

9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works

thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or

other liability obligations and/or rights consistent with this License. However, in accepting such

obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any

other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for

any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any

such warranty or additional liability.

END OF TERMS AND CONDITIONS

vi WatchGuard SSL 500 & SSL 1000

User Guide vii

Table of Contents

Chapter 1 Introduction ............................................................................................................................... 1

Target audience................................................................................................................................................. 1

Conventions used in this publication........................................................................................................ 1

Special Fonts....................................................................................................................................................... 1

Notes..................................................................................................................................................................... 2

Contact WatchGuard documentation department.............................................................................. 2

References ........................................................................................................................................................... 2

Chapter 2 Get started ................................................................................................................................. 3

Reading suggestions ....................................................................................................................................... 4

Customer support............................................................................................................................................. 4

Product Overview.................................................................................................................................................. 5

Assessment.......................................................................................................................................................... 5

Authentication................................................................................................................................................... 6

Authorization...................................................................................................................................................... 6

Auditing................................................................................................................................................................ 7

Access.................................................................................................................................................................... 7

Abolishment ....................................................................................................................................................... 8

Technical overview................................................................................................................................................ 9

Administrative Service .................................................................................................................................... 9

Access Point ...................................................................................................................................................... 10

Policy Service.................................................................................................................................................... 11

Resources...................................................................................................................................................... 11

Access Rules ................................................................................................................................................. 12

Single Sign On............................................................................................................................................. 12

Authentication Service.................................................................................................................................. 13

WatchGuard Authentication.................................................................................................................. 13

WatchGuard Administrator Distribution Service................................................................................. 14

Planning .................................................................................................................................................................. 14

Define the Deployment Goals.................................................................................................................... 14

Security Audit/Planning ............................................................................................................................... 15

System Architecture Review .................................................................................................................. 15

Public Key Infrastructure ......................................................................................................................... 15

Securing your operating system .................................................................................................................... 16

Securing the file system........................................................................................................................... 16

Securing shared resources...................................................................................................................... 17

viii WatchGuard SSL 500 & SSL 1000

File auditing ................................................................................................................................................. 17

Securing disk resources ........................................................................................................................... 17

User management strategy ............................................................................................................................. 18

Analyze your environment..................................................................................................................... 18

Directory service requirements............................................................................................................. 18

Password management........................................................................................................................... 19

Use of Foreign Characters....................................................................................................................... 19

Securing Microsoft Active Directory ................................................................................................... 19

User management recommendations.................................................................................................... 20

Recommendations for DNS Management........................................................................................ 20

Recommendations for the Active Directory installation ............................................................. 20

Recommendations for Domain and OU management ................................................................ 20

Recommendations for Tree and Forest management ................................................................. 20

Recommendations for Object Access Control Management .................................................... 20

Recommendations for Replication Management.......................................................................... 21

Recommendations for Operation Masters........................................................................................ 21

Recommendations for auditing............................................................................................................ 21

Resource access............................................................................................................................................... 21

Access strategies ........................................................................................................................................ 21

Pre-installation check list ............................................................................................................................. 22

Pre-Installation Check List....................................................................................................................... 22

WatchGuard Network......................................................................................................................................... 23

Network Layout .......................................................................................................................................... 23

Default listening ports................................................................................................................................... 24

Register your WatchGuard SSL User Pack with LiveSecurity Service................................................ 26

Chapter 3 Installation ............................................................................................................................... 27

Primary WatchGuard user................................................................................................................................. 28

Change the primary WatchGuard User password.......................................................................... 28

Preparation ............................................................................................................................................................ 29

Install on Windows.............................................................................................................................................. 30

Install administration service...................................................................................................................... 30

Install Authentication Service..................................................................................................................... 31

Install Policy Service....................................................................................................................................... 31

Install Distribution Service........................................................................................................................... 31

Install WatchGuard Mobile ID..................................................................................................................... 31

Install Access Client........................................................................................................................................ 31

Upgrade overview............................................................................................................................................... 32

Start and Stop WatchGuard Administrator Services............................................................................... 32

Uninstall WatchGuard Administrator ........................................................................................................... 32

Chapter 4 Setup System Wizard .............................................................................................................. 33

About the Setup System Wizard .................................................................................................................... 33

Requirements and preparation............................................................................................................. 34

What Setup System includes ................................................................................................................. 34

Start the Setup System Wizard ....................................................................................................................... 35

WatchGuard Administration Service Dashboard ........................................................................... 35

WatchGuard Administrator .................................................................................................................... 35

Upload license file ............................................................................................................................................... 36

License File ................................................................................................................................................... 36

Select directory service...................................................................................................................................... 36

Configure directory service.............................................................................................................................. 37

Common Settings for all Directory Service Types.......................................................................... 39

Specific Settings for Other or Customized Directory Service..................................................... 39

User Guide ix

Super Administrator credentials .................................................................................................................... 40

Set up administration service.......................................................................................................................... 40

Configure an Access Point in WatchGuard Administrator.................................................................... 40

Set up Policy Service........................................................................................................................................... 41

Policy Service Settings.............................................................................................................................. 41

Set up Authentication Service ........................................................................................................................ 41

Select WatchGuard Authentication Methods.................................................................................. 41

Authentication Service and Authentication Method Settings .................................................. 42

Select additional Authorization Methods ......................................................................................... 42

Configure Authentication Methods.............................................................................................................. 43

Novell eDirectory Settings...................................................................................................................... 44

Confirm Authentication Methods.................................................................................................................. 44

Configure user storage ...................................................................................................................................... 45

Browse for root DN......................................................................................................................................... 45

Search rules....................................................................................................................................................... 46

Select additional Directory Service ............................................................................................................... 47

Configure additional Directory Service ....................................................................................................... 48

Additional Directory Service Settings................................................................................................. 48

Finish the Setup System Wizard..................................................................................................................... 48

Chapter 5 Set up an Access Point ............................................................................................................ 49

WatchGuard SSL device software.................................................................................................................. 49

Connect your WatchGuard SSL Access Point device.............................................................................. 49

Select an Architecture Method....................................................................................................................... 50

One Interface Architecture ..................................................................................................................... 50

Two Interface Architecture..................................................................................................................... 51

Configure your WatchGuard SSL device ..................................................................................................... 52

Reset your configuration.............................................................................................................................. 52

Set the Date and Time Zone for your WatchGuard SSL device........................................................... 53

Change the password for your WatchGuard SSL device....................................................................... 53

Use Log Viewer..................................................................................................................................................... 54

View Logs...................................................................................................................................................... 54

Clean Logs .................................................................................................................................................... 54

Update WatchGuard SSL device software.................................................................................................. 54

Chapter 6 Administration ........................................................................................................................ 55

About WatchGuard Administrator ................................................................................................................ 55

Top menu........................................................................................................................................................... 55

Online Help ....................................................................................................................................................... 56

Monitor system................................................................................................................................................ 57

Manage accounts and storage................................................................................................................... 57

Manage resource access............................................................................................................................... 58

Manage system................................................................................................................................................ 59

Chapter 7 Monitor System ....................................................................................................................... 61

About Monitor System....................................................................................................................................... 61

Status Overview.......................................................................................................................................... 61

Event Overview........................................................................................................................................... 61

Status overview.................................................................................................................................................... 62

Users ............................................................................................................................................................... 62

Resources...................................................................................................................................................... 62

System information................................................................................................................................... 62

Administrators............................................................................................................................................. 62

Event overview ..................................................................................................................................................... 63

Manage settings................................................................................................................................................... 63

x WatchGuard SSL 500 & SSL 1000

About system status ........................................................................................................................................... 64

General Status ............................................................................................................................................. 64

Access Points ............................................................................................................................................... 64

Policy Services ............................................................................................................................................. 64

Authentication Services........................................................................................................................... 64

About user sessions ............................................................................................................................................ 65

Logging ................................................................................................................................................................... 65

About Log Viewer ........................................................................................................................................... 65

Diagnostic file.............................................................................................................................................. 66

Log Viewer Settings .................................................................................................................................. 66

About logging.................................................................................................................................................. 67

Manage logging .............................................................................................................................................. 67

Log level filter.............................................................................................................................................. 68

Log file rotation .......................................................................................................................................... 68

Windows event log/Unix syslog ........................................................................................................... 68

Manage global logging settings................................................................................................................ 69

About the license file.......................................................................................................................................... 70

View license details ........................................................................................................................................ 70

Upload new license........................................................................................................................................ 70

Alerts ........................................................................................................................................................................ 71

About alerts....................................................................................................................................................... 71

Alert events .................................................................................................................................................. 71

Manage alerts................................................................................................................................................... 71

Alert settings................................................................................................................................................ 71

Alert event settings ................................................................................................................................... 72

Settings.......................................................................................................................................................... 72

Alert notification receivers...................................................................................................................... 73

Manage global alert settings...................................................................................................................... 74

Reports..................................................................................................................................................................... 76

About reports ................................................................................................................................................... 76

Time range.................................................................................................................................................... 76

Filters .............................................................................................................................................................. 77

Graphics......................................................................................................................................................... 77

Statistics.............................................................................................................................................................. 78

Data Retrieval .............................................................................................................................................. 78

About report database.................................................................................................................................. 79

Limitations.................................................................................................................................................... 79

Manage reports ............................................................................................................................................... 80

Set time range............................................................................................................................................. 80

Set time range............................................................................................................................................. 81

Assessment report settings.................................................................................................................... 83

Abolishment report settings.................................................................................................................. 83

Access report settings .............................................................................................................................. 84

Authentication report settings.............................................................................................................. 85

Authorization report settings................................................................................................................ 86

Account statistics report settings......................................................................................................... 87

Session trend report settings................................................................................................................. 87

Communication report settings ........................................................................................................... 88

Alert report settings .................................................................................................................................. 88

System report settings ............................................................................................................................. 88

Performance report settings....................................................................................................

.............. 89

Tunnel report settings.............................................................................................................................. 89

Chapter 8 Manage accounts and storage ............................................................................................... 91

User Guide xi

About accounts and storage ........................................................................................................................... 91

User accounts .............................................................................................................................................. 91

User Import and Linking.......................................................................................................................... 91

User groups.................................................................................................................................................. 92

User storage ................................................................................................................................................. 92

Global user account settings........................................................................................................................... 93

About global user account settings......................................................................................................... 93

About user linking ..................................................................................................................................... 93

About user link repair............................................................................................................................... 93

Manage global user account settings ..................................................................................................... 94

General settings.......................................................................................................................................... 94

Manage user linking.................................................................................................................................. 95

General Settings ......................................................................................................................................... 95

User linking ............................................................................................................................................................ 99

About user linking .......................................................................................................................................... 99

Manage user linking....................................................................................................................................... 99

Manage user link repair ........................................................................................................................ 100

User import ......................................................................................................................................................... 101

About User Import....................................................................................................................................... 101

Manage User Import................................................................................................................................... 101

User accounts..................................................................................................................................................... 104

About user accounts................................................................................................................................... 104

User Account Search Result List......................................................................................................... 104

Add user account .................................................................................................................................... 104

User Linking .............................................................................................................................................. 105

User Import................................................................................................................................................ 106

WatchGuard authentication ............................................................................................................... 106

Single Sign-On domain settings........................................................................................................ 106

User certificate ......................................................................................................................................... 106

Manage user accounts ............................................................................................................................... 107

General settings....................................................................................................................................... 108

General Settings ...................................................................................................................................... 108

Manage authentication settings ....................................................................................................... 108

Manage SSO settings............................................................................................................................. 114

User certificate ......................................................................................................................................... 115

User groups......................................................................................................................................................... 116

About user groups....................................................................................................................................... 116

About user location group .................................................................................................................. 116

About user property group ................................................................................................................. 116

About user group in directory service............................................................................................. 116

Manage user groups................................................................................................................................... 116

Manage user property groups............................................................................................................ 117

Manage user location groups............................................................................................................. 117

User storage........................................................................................................................................................ 118

About user storage...................................................................................................................................... 118

Search rules............................................................................................................................................... 118

Directory mapping ................................................................................................................................. 118

Manage User Storage ................................................................................................................................. 118

General settings....................................................................................................................................... 118

Manage search rules .............................................................................................................................. 119

Manage directory mapping.......................................................................................................

.......... 121

Chapter 9 Manage Resource Access ...................................................................................................... 123

About resource access.................................................................................................................................... 123

xii WatchGuard SSL 500 & SSL 1000

Access rules............................................................................................................................................... 123

Standard resources................................................................................................................................. 123

Global Resource settings................................................................................................................................ 124

About global resource settings............................................................................................................... 124

About internal proxy.............................................................................................................................. 124

About DNS name pool .......................................................................................................................... 124

About filters............................................................................................................................................... 125

About link translation............................................................................................................................ 125

Manage Global Resource Settings.................................................................................................... 126

Manage global resource settings........................................................................................................... 126

General settings....................................................................................................................................... 126

Filters ........................................................................................................................................................... 127

Link translation ........................................................................................................................................ 128

DNS Names for Access Point............................................................................................................... 129

DNS Name Pool........................................................................................................................................ 130

Standard resources .......................................................................................................................................... 131

About standard resources ........................................................................................................................ 131

Manage standard resources..................................................................................................................... 131

Common Standard Resource Settings ............................................................................................ 131

Access Rules .............................................................................................................................................. 132

Citrix MetaFrame Presentation Server............................................................................................. 133

Citrix MetaFrame Server ....................................................................................................................... 133

Thinlinc Application Server ................................................................................................................. 134

Domino Web Access 6.5 ....................................................................................................................... 135

Terminal Server 2000/Terminal Server 2003................................................................................. 135

Outlook Web Access 2000/Outlook Web Access2003/Outlook Web Access 5.5............. 136

Microsoft Outlook Client 2000/2003/2007 .................................................................................... 137

POP3/SMTP................................................................................................................................................ 137

IMAP/SMTP................................................................................................................................................ 138

Windows File Share ................................................................................................................................ 138

Windows File Share ............................................................................................................................... 138

Access to Home Directory.................................................................................................................... 139

Secure Remote Access to Administrator ........................................................................................ 139

SalesForce.................................................................................................................................................. 140

Web Resources .................................................................................................................................................. 140

About Web Resources................................................................................................................................ 140

Manage Web resource hosts ................................................................................................................... 141

General settings....................................................................................................................................... 141

Troubleshooting (FAQ) ......................................................................................................................... 144

Application Portal Settings.................................................................................................................. 145

Access rules............................................................................................................................................... 145

Advanced settings.................................................................................................................................. 146

Encryption Level...................................................................................................................................... 148

Manage web resource paths ................................................................................................................... 149

General settings....................................................................................................................................... 149

Access rules............................................................................................................................................... 150

Advanced settings.................................................................................................................................. 151

Tunnel resources............................................................................................................................................... 153

About tunnel resources ............................................................................................................................. 153

Manage tunnel resources ......................................................................................................................... 153

Tunnel resource settings...................................................................................................................... 153

Alternative Hosts..................................................................................................................................... 154

Access rules............................................................................................................................................... 154

Advanced settings..............................................................................................................

.................... 154

User Guide xiii

Tunnel resource networks............................................................................................................................. 156

About tunnel resource networks ........................................................................................................... 156

Manage tunnel resource networks........................................................................................................ 156

Tunnel resources network settings .................................................................................................. 156

Access Rules .............................................................................................................................................. 156

Advanced settings.................................................................................................................................. 157

Tunnel sets .......................................................................................................................................................... 159

About tunnel sets......................................................................................................................................... 159

Manage tunnels sets................................................................................................................................... 160

Tunnel set settings ................................................................................................................................. 160

Application Portal Settings.................................................................................................................. 160

Static Tunnel Settings............................................................................................................................ 161

Dynamic Tunnel Settings..................................................................................................................... 162

Startup settings........................................................................................................................................ 163

Advanced tunnel settings.................................................................................................................... 163

Mapped Drives......................................................................................................................................... 164

Access Client Loader.............................................................................................................................. 165

Additional Client Configuration ........................................................................................................ 165

Specific Settings ...................................................................................................................................... 166

Provide IP Address.................................................................................................................................. 167

DNS Forwarding ...................................................................................................................................... 167

Client Firewall........................................................................................................................................... 167

Access Rules .............................................................................................................................................. 167

Manage global tunnel set settings........................................................................................................ 167

External DHCP Settings......................................................................................................................... 167

IP Address Pool ........................................................................................................................................ 168

DNS Server................................................................................................................................................. 168

Client firewalls.................................................................................................................................................... 169

About client firewalls.................................................................................................................................. 169

Prevent other network connections to be routed ...................................................................... 169

Check integrity of connecting application .................................................................................... 169

Firewall rules based on device ........................................................................................................... 171

Manage client firewalls .............................................................................................................................. 172

Incoming firewall rules.......................................................................................................................... 172

Outgoing firewall rules ......................................................................................................................... 173

Customized resources..................................................................................................................................... 174

About customized resources................................................................................................................... 174

Manage customized resource hosts ..................................................................................................... 174

Access rules............................................................................................................................................... 174

Advanced settings.................................................................................................................................. 175

Customized Resource Host Settings ................................................................................................ 175

Manage customized resource paths..................................................................................................... 176

Access rules............................................................................................................................................... 176

Advanced settings.................................................................................................................................. 177

SSO domains ...................................................................................................................................................... 179

About SSO domains.................................................................................................................................... 179

Access rules............................................................................................................................................... 179

Domain types ........................................................................................................................................... 180

Manage SSO domains ................................................................................................................................ 181

SSO Domain Settings............................................................................................................................. 181

Domain attributes................................................................................................................................... 182

Domain Type Cookie.............................................................................................................

................. 183

Access Rules .............................................................................................................................................. 183

Settings....................................................................................................................................................... 183

xiv WatchGuard SSL 500 & SSL 1000

Access rules......................................................................................................................................................... 185

About access rules....................................................................................................................................... 185

Access rule types..................................................................................................................................... 185

About managing access rules ............................................................................................................ 186

Manage access rules .............................................................................................................................. 187

Manage global access rule................................................................................................................... 187

Manage access rules for resource or SSO domains .................................................................... 188

Access rule settings..................................................................................................................................... 189

Microsoft Windows Client Data ......................................................................................................... 191

Settings....................................................................................................................................................... 193

Application portal............................................................................................................................................. 196

About application portal........................................................................................................................... 196

Access Client............................................................................................................................................. 196

Manage application portal ....................................................................................................................... 196

Application portal item settings............................................................................................................. 197

Identity Federation........................................................................................................................................... 199

About Identity Federation ........................................................................................................................ 199

Assertions................................................................................................................................................... 199

Preconditions ........................................................................................................................................... 199

Providers .................................................................................................................................................... 200

Manage Identity Federation settings ................................................................................................... 200

Global Identity Federation Settings ................................................................................................. 200

Manage providers........................................................................................................................................ 201

Chapter 10 Manage system ...................................................................................................................... 203

About Manage System ................................................................................................................................... 203

Abolishment ....................................................................................................................................................... 204

About Abolishment..................................................................................................................................... 204

Manage abolishment.................................................................................................................................. 205

General Settings ...................................................................................................................................... 205

Cache Cleaner........................................................................................................................................... 206

Advanced................................................................................................................................................... 207

Access Points...................................................................................................................................................... 208

About Access Points.................................................................................................................................... 208

Manage Access Points................................................................................................................................ 210

Access Point settings ............................................................................................................................. 210

Additional listeners ................................................................................................................................ 210

Manage Global Access Point settings................................................................................................... 212

Advanced settings.................................................................................................................................. 212

Cipher Suites............................................................................................................................................. 213

Performance.............................................................................................................................................. 214

About load balancing................................................................................................................................. 214

Manage load balancing ........................................................................................................................ 215

Mirrored Access Points.......................................................................................................................... 215

Settings....................................................................................................................................................... 215

Administrative Service.................................................................................................................................... 220

About Administrative Service.................................................................................................................. 220

Configuration ........................................................................................................................................... 220

Manage Administrative Service.............................................................................................................. 221

Administration Service Settings ........................................................................................................ 221

Assessment ......................................................................................................................................................... 222

About Assessment....................................................................................................................................... 222

Manage Assessment ................................................................................................................................... 222

General Settings ...................................................................................................................................... 223

User Guide xv

Advanced Settings.................................................................................................................................. 225

Plug-ins ....................................................................................................................................................... 226

Authentication methods................................................................................................................................ 226

About authentication methods.............................................................................................................. 226

Authentication methods...................................................................................................................... 227

About WatchGuard SSL Mobile Text................................................................................................ 228

About WatchGuard SSL Web .............................................................................................................. 228

About WatchGuard SSL Challenge................................................................................................... 229

About WatchGuard SSL Password .................................................................................................... 229

About WatchGuard SSL Synchronized............................................................................................ 229

Additional authentication methods................................................................................................. 230

Manage authentication methods .......................................................................................................... 231

General settings....................................................................................................................................... 231

Authentication method server........................................................................................................... 234

RADIUS replies.......................................................................................................................................... 241

Extended properties .............................................................................................................................. 242

Authentication services ............................................................................................................................. 248

About Authentication Service............................................................................................................ 248

Manage Authentication Services ...................................................................................................... 249

Define RADIUS Authentication .......................................................................................................... 251

Define password/PIN ............................................................................................................................. 252

Email messages........................................................................................................................................ 257

SMS/Screen messages........................................................................................................................... 261

Certificates...................................................................................................................................................... 264

About certificates.................................................................................................................................... 264

Registered Server Certificates............................................................................................................. 264

Registered Client Certificate ............................................................................................................... 264

Manage certificates ................................................................................................................................ 264

Certificate Authority settings.............................................................................................................. 265

Server certificate settings..................................................................................................................... 266

Client certificate settings...................................................................................................................... 266

Settings....................................................................................................................................................... 266

Device definitions............................................................................................................................................. 268

About device definitions........................................................................................................................... 268

Manage device definitions ....................................................................................................................... 268

Delegated management................................................................................................................................ 269

About delegated management.............................................................................................................. 269

Manage delegated management .......................................................................................................... 269

Role settings.............................................................................................................................................. 270

Directory services.............................................................................................................................................. 272

About directory services............................................................................................................................ 272

Manage directory services........................................................................................................................ 272

General Settings ...................................................................................................................................... 272

Communication Settings ..................................................................................................................... 273

Advanced Settings.................................................................................................................................. 274

Notification settings ........................................................................................................................................ 275

About notification settings....................................................................................................................... 275

Manage notification settings................................................................................................................... 275

Email channel settings .......................................................................................................................... 275

SMS channel settings............................................................................................................................. 276

Variables ......................................................................................................................

............................... 282

Policy Services.................................................................................................................................................... 282

About Policy Services ................................................................................................................................. 282

Manage Policy Services.............................................................................................................................. 283

xvi WatchGuard SSL 500 & SSL 1000

General settings....................................................................................................................................... 283

XPI: Web services..................................................................................................................................... 284

Manage global Policy Service settings................................................................................................. 285

Communication Settings ..................................................................................................................... 285

RADIUS Configuration..................................................................................................................................... 286

About RADIUS configuration................................................................................................................... 286

Manage RADIUS configuration............................................................................................................... 287

RADIUS Client Settings.......................................................................................................................... 287

Manage RADIUS Back-End Servers ................................................................................................... 288

Glossary 289

A.............................................................................................................................................................................. 289

Access Rules .............................................................................................................................................. 289

ASCII............................................................................................................................................................. 289

ASN.1 ........................................................................................................................................................... 289

Authentication......................................................................................................................................... 289

Authentication Method ........................................................................................................................ 289

Authentication Server ........................................................................................................................... 289

Authorization............................................................................................................................................ 290

B .............................................................................................................................................................................. 290

BankID ......................................................................................................................................................... 290

Base64 ......................................................................................................................................................... 290

Base DN....................................................................................................................................................... 290

C .............................................................................................................................................................................. 290

CA.................................................................................................................................................................. 290

CA Certificate............................................................................................................................................ 290

Cipher.......................................................................................................................................................... 290

Client Certificate...................................................................................................................................... 290

CDP............................................................................................................................................................... 290

Client Device............................................................................................................................................. 291

CRC ............................................................................................................................................................... 291

CRL................................................................................................................................................................ 291

CVC............................................................................................................................................................... 291

D.............................................................................................................................................................................. 291

Delegated Management ...................................................................................................................... 291

DER ............................................................................................................................................................... 291

Device.......................................................................................................................................................... 291

Digital Certificate..................................................................................................................................... 291

Directory Service ..................................................................................................................................... 291

Directory Service User Group ............................................................................................................. 292

Display Name............................................................................................................................................ 292

Distribution Channel.............................................................................................................................. 292

DMZ.............................................................................................................................................................. 292

DN................................................................................................................................................................. 292

DNS............................................................................................................................................................... 292

E............................................................................................................................................................................... 292

Encryption ................................................................................................................................................. 292

F............................................................................................................................................................................... 292

Firewall........................................................................................................................................................ 292

FTP................................................................................................................................................................ 292

H.............................................................................................................................................................................. 293

Host.............................................................................................................................................................. 293

HTTP............................................................................................................................................................. 293

HTTPS .......................................................................................................................................................... 293

User Guide xvii

L............................................................................................................................................................................... 293

LDAP ............................................................................................................................................................ 293

Log Levels .................................................................................................................................................. 293

M ............................................................................................................................................................................. 293

MIME............................................................................................................................................................ 293

N.............................................................................................................................................................................. 293

NTLM............................................................................................................................................................ 293

O.............................................................................................................................................................................. 294

OpenSSL ..................................................................................................................................................... 294

OU................................................................................................................................................................. 294

P .............................................................................................................................................................................. 294

PEM............................................................................................................................................................... 294

PIN ................................................................................................................................................................ 294

PKI................................................................................................................................................................. 294

Port............................................................................................................................................................... 294

Proxy............................................................................................................................................................ 294

R .............................................................................................................................................................................. 294

RADIUS........................................................................................................................................................ 294

Resource..................................................................................................................................................... 294

Resource Host........................................................................................................................................... 294

Resource Path........................................................................................................................................... 295

S............................................................................................................................................................................... 295

SAML............................................................................................................................................................ 295

Seed ............................................................................................................................................................. 295

Server Certificate..................................................................................................................................... 295

Shared Secret............................................................................................................................................ 295

SMS............................................................................................................................................................... 295

SMPP............................................................................................................................................................ 295

SSL ................................................................................................................................................................ 295

SSO ............................................................................................................................................................... 295

SSO Domain .............................................................................................................................................. 295

T............................................................................................................................................................................... 296

TCP................................................................................................................................................................ 296

TLS ................................................................................................................................................................ 296

Tunneling................................................................................................................................................... 296

U.............................................................................................................................................................................. 296

UDP .............................................................................................................................................................. 296

URI................................................................................................................................................................. 296

URL ............................................................................................................................................................... 296

User Certificate......................................................................................................................................... 296

User Group................................................................................................................................................. 296

User Location Group.............................................................................................................................. 296

User Property Group.............................................................................................................................. 296

User Storage.............................................................................................................................................. 296

W............................................................................................................................................................................. 297

WAP.............................................................................................................................................................. 297

X .............................................................................................................................................................................. 297

X.509 ............................................................................................................................................................ 297

xviii WatchGuard SSL 500 & SSL 1000

User Guide 1

1

Introduction

Welcome to the WatchGuard Administrator User Guide – your reference guide to a secure and flexible solution

for safe access to any and all of your internal and external resources and applications.

Our aim has been to provide WatchGuard Administrator users with a comprehensive guide to all aspects of

WatchGuard Administrator administration. In doing so, we have structured the WatchGuard Administrator

User Guide in About… and Manage… sections, to enable readers to access in-depth information when they

need it. Regardless if this is conceptual information to prepare for installation, to gain deeper understanding

of complex topics, or instructions on how to administer specific functionality.

The About… sections contain overview information of specific functionality in WatchGuard Administrator,

presented in the same order as it is structured in the WatchGuard Administrator, so when you wish to learn

more on a specific task in a conceptual point of view – this is where to look.

Browse the Manage… sections when you are performing a task in the WatchGuard Administrator and do not

find the information you need in the WatchGuard Administrator Online Help.

Target audience

This User Guide covers all aspects of WatchGuard Administrator and is intended for both administrators and

system integrators. For more detailed information on essential reading, please see section Getting Started.

Conventions used in this publication

This publication uses various conventions to present information. Words that require special treatment

appear in specific fonts or font styles. Certain information, such as command-line options, uses special formats

so that you can scan it quickly.

Special Fonts

This publication uses several typographical conventions. All code listings, reserved words, and the names of

actual data structures, constants, fields, parameters, and routines are shown in monospaced font (this is

monospace). Words that appear in boldface are menu items and/or settings in the WatchGuard

Administrator.

Introduction

2 WatchGuard SSL 500 & SSL 1000

Notes

Contact WatchGuard documentation department

WatchGuard is always interested in feedback from our users. Please direct comments or questions regarding

any WatchGuard publication to the WatchGuard Documentation Department at

documentation@watchguard.com. Please include the title of the document in your email.

References

Referenced documents, such as technical notes, are included with your product and can be located on the

product distribution, or if the product is already installed, in the Documentation folder where the product was

installed. It is also possible to access the documentation directly from the WatchGuard Administrator

Administrator Dashboard.

Notes contain information that is interesting but possibly not essential to an understanding of the

main text.

Page is loading ...

Watchguard SSL User guide

Watchguard SSL User guide

Related papers

Other documents