Copyright NETASQ 2010
Page 7/65
INSTALLATION GUIDE :
1. INTRODUCTION
1
1
I
I
N
N
T
T
R
R
O
O
D
D
U
U
C
C
T
T
I
I
O
O
N
N
Thank you for choosing NETASQ. Designed to protect structures of all sizes, NETASQ’s UTM appliances
are pre-configured: no hardware or software installation is needed and no UNIX knowledge is necessary, just
a user-friendly configuration via a graphical interface. There are currently 10 products in the range: U30,
U70, U120, U250, U450, U1100, U1500, U6000, NG1000-A and NG5000-A.
The NETASQ UTM appliance allows the definition of incoming or outgoing access control rules. Its concept
is simple: any incoming or outgoing transmission passing through the NETASQ Firewall is monitored,
authorized or denied according to the rules, packet by packet.
The NETASQ Firewall is based on an upgraded packet filtering mechanism which brings a high level of
security. All NETASQ Firewalls integrate the ASQ (
Active Security Qualification
) technology developed by
NETASQ. This technology allows detection and blocking of hacking attempts in real time – illegal packets,
denial of service attempts, anomalies in a connection, port scans, buffer overflows, etc.
In the case of an intrusion attempt, depending on the instructions given in the security policy, the NETASQ
Firewall blocks the transmission, generates an alarm and stores the information linked to the packet which
had set off the alarm. As such, you would be able to analyze the attack and trace its source.
The Firewall not only allows preventing, or restricting to just certain services, incoming connections on your
network, but also allows monitoring the use of the internet by your internal users (HTTP, FTP, SMTP...). You
may also monitor your users by authenticating them via an internal or external authentication database.
The NETASQ Firewall also manages port and address translation mechanisms. These mechanisms provide
security (by masking your internal address range) and flexibility (by enabling the use of any private internal
addressing range) and reduce costs (by enabling the provision of several servers on the internet with a
single public IP address).
With ASQ, NETASQ’s IPS (
Intrusion Prevention System
) engine, a NETASQ firewall offers all the more
security. Its plugin architecture allows monitoring most of the traffic circulating through the Firewall even at
the application layer. Its performance in terms of throughput, number of rules and number of tunnels, has
been increased tenfold.
Thanks to its Windows-based user interface, it allows the rapid and simple definition of your network's
security rules, from a local workstation running under Windows. You may also monitor your Firewall’s
activity in real time.
The NETASQ Firewall is also equipped with advanced log functions. In an intrusion attempt, the network
administrator may access all data sent before the attack and see how it had been prepared. NETASQ
EVENT REPORTER provides you with a graphical view and fine analysis of logs generated on the Firewall.
Lastly, the NETASQ Firewall includes VPN gateway functions allowing you to establish encrypted tunnels
with other VPN equipment. In this way, your communications between sites or with your mobile users
(“Road Warriors”) may be secured even while using an insecure communication infrastructure like the
internet.
This installation guide presents the products (front and rear panels), explains the physical installation
process and lastly allows you to configure your product in order to integrate it into the desired network
architecture. It also explains how to insert additional network cards to the U6000 product or to insert
extension modules to the NG1000-A and NG5000-A products.
