Allo.com UTM User manual

UTM User Manual
www.allo.com Version 2.0 1

UTM User Manual
www.allo.com Version 2.0 2
Copy Right
Copyright © 2014 Allo. All rights reserved.
No part of this publication may be copied, distributed, transmitted, transcribed, stored in a
retrieval system, or translated into any human or computer language without the prior written
permission of Allo.com. This document has been prepared for use by professional and properly
trained personnel, and the customer assumes full responsibility when using it.
Proprietary Rights
The information in this document is Confidential to Allo and is legally privileged. The information
and this document are intended solely for the addressee. Use of this document by anyone else
for any other purpose is unauthorized. If you are not the intended recipient, any disclosure,
copying, or distribution of this information is prohibited and unlawful.
Disclaimer
Information in this document is subject to change without notice and should not be construed as
a commitment on the part of allo.com. And does not assume any responsibility or make any
warranty against errors. It may appear in this document and disclaims any implied warranty of
merchantability or fitness for a particular purpose.

UTM User Manual
www.allo.com Version 2.0 3
About this manual
This manual describes the allo product application and explains how to work and use it major
features. It serves as a means to describe the user interface and how to use it to accomplish
common tasks. This manual also describes the underlying assumptions and users make the
underlying data model.
Document Conventions
In this manual, certain words are represented in different fonts, typefaces, sizes, and weights.
This highlighting is systematic; different words are represented in the same style to indicate
their inclusion in a specific category. Additionally, this document has different strategies to draw
User attention to certain pieces of information. In order of how critical the information is to your
system, these items are marked as a note, tip, important, caution, or warning.
Icon
Purpose
Note
Tip/Best Practice
Important
Caution
Warning
Bold indicates the name of the menu items, options, dialog boxes, windows and
functions.
The color blue with underline is used to indicate cross-references and hyperlinks.
Numbered Paragraphs - Numbered paragraphs are used to indicate tasks that need to be
carried out. Text in paragraphs without numbering represents ordinary information.
The Courier font indicates a command sequence, file type, URL, Folder/File name e.g.
www.allo.com
Support Information
Every effort has been made to ensure the accuracy of the document. If you have comments,
questions, or ideas regarding the document contact online support: http://support.allo.com

UTM User Manual
www.allo.com Version 2.0 4
Table of Contents
About this manual .........................................................................................................................3
Document Conventions.................................................................................................................3
Support Information......................................................................................................................3
1. Introduction ......................................................................................................................... 8
1.1 Overview .................................................................................................................................8
1.2 Technical Specifications ..........................................................................................................9
1.3 Equipment Structure.............................................................................................................10
1.3.1 UTM Rear View...............................................................................................................10
1.3.2 UTM Front View..............................................................................................................10
1.4 Initial Setup & Configuration.................................................................................................11
1.4.1 Connecting the Hardware ..................................................................................................11
1.4.2 Network Deployment.........................................................................................................12
1.4.3 Connect UTM Firewall........................................................................................................13
2. Dashboard.......................................................................................................................... 14
3. Device Settings ................................................................................................................... 15
3.1 Host Config ............................................................................................................................15
3.2 Admin User............................................................................................................................15
3.3 SSH.........................................................................................................................................16
3.4 Web User Interface ...............................................................................................................16
3.5 Time.......................................................................................................................................17
3.6SNMP......................................................................................................................................18
3.7 Certificates ............................................................................................................................19
3.7.1Built-in certificates...........................................................................................................19
3.7.2 Local Certificates ................................................................................................................20
3.8 Logging ..................................................................................................................................21
3.9 Maintenance .........................................................................................................................21
3.9.1 Administration................................................................................................................21
3.9.2 Firmware.........................................................................................................................22
4. Network Settings ................................................................................................................ 23
4.1 Interfaces...............................................................................................................................23

UTM User Manual
www.allo.com Version 2.0 5
4.2 Virtual IPS ..............................................................................................................................23
4.3 VLAN Config...........................................................................................................................24
4.4 Zones .....................................................................................................................................25
4.5 WAN Load Balancing .............................................................................................................26
4.6 Routing ..................................................................................................................................27
4.6.1 Static Routes...................................................................................................................27
4.7 DNS........................................................................................................................................28
4.8 DHCP Server ..........................................................................................................................28
4.9 Dynamic DNS.........................................................................................................................30
4.10 PPPoE Profiles .....................................................................................................................31
5. Policy Objects ..................................................................................................................... 32
5.1 Address Groups .....................................................................................................................32
5.2 Address objects .....................................................................................................................33
5.3 Service Groups.......................................................................................................................35
5.4 Service objects.......................................................................................................................36
5.5 Web Filter objects .................................................................................................................37
6. Policies............................................................................................................................... 39
6.1 Firewall ..................................................................................................................................39
6.1.1 Firewall Settings..............................................................................................................39
6.1.2 Firewall Policies ..............................................................................................................40
6.1.3 User Policies....................................................................................................................45
6.1.4 Management Access.......................................................................................................46
6.1.5 Bandwidth control..........................................................................................................47
6.1.6 Port Forwarding/Destination NAT..................................................................................50
6.1.7 Source NAT .....................................................................................................................51
6.1.8 Static NAT .......................................................................................................................52
6.1.9 QOS Settings ...................................................................................................................53
6.2 IPS..........................................................................................................................................53
6.2.1 IPS Settings .....................................................................................................................54
6.2.2 Signature Settings...........................................................................................................55
6.2.3 Custom Signatures..........................................................................................................56

UTM User Manual
www.allo.com Version 2.0 6
6.3 VPN........................................................................................................................................57
6.3.1 SSLVPN Server Settings...................................................................................................58
6.3.2 SSLVPN Client Profiles.....................................................................................................60
6.3.3 SSLVPN P2P Policies........................................................................................................61
6.3.4 Client Certificates ...........................................................................................................63
6.3.5 IPSec Settings..................................................................................................................64
6.3.6 IPSec Policies...................................................................................................................65
6.4 Web Proxy .............................................................................................................................70
6.4.1 Proxy Configuration........................................................................................................71
6.4.2 Web filter blocking page.................................................................................................73
6.4.3 User Authentication .......................................................................................................73
6.4.4 Web Cache Management ...............................................................................................74
6.4.5 External Proxy.................................................................................................................75
6.5 Anti Virus ...............................................................................................................................75
6.5.1 Anti Virus Settings ..........................................................................................................76
6.6 Users......................................................................................................................................76
6.6.1 User Groups....................................................................................................................77
7. Status Information.............................................................................................................. 78
7.1 Interfaces...............................................................................................................................78
7.2 DHCP leases...........................................................................................................................78
7.3 Firewall ..................................................................................................................................79
7.3.1 Connection Statistics ......................................................................................................79
7.3.2 Connection info ..............................................................................................................80
7.3.3 Bandwidth Usage per IP .................................................................................................80
7.4 System Log.............................................................................................................................81
7.5 IPS Alerts................................................................................................................................82
7.6 SSLVPN Client Status .............................................................................................................82
7.7 SSLVPN P2P Status.................................................................................................................83
7.8 IPSec Status ...........................................................................................................................83
7.9 Service Status ........................................................................................................................84
8. Diagnostics ......................................................................................................................... 86

UTM User Manual
www.allo.com Version 2.0 7
8.1 Diagnostics Report ................................................................................................................86
8.2 Ping........................................................................................................................................87
8.3 Trace Route ...........................................................................................................................87
8.4 DNS Lookup ...........................................................................................................................88
8.5 Packet Trace ..........................................................................................................................89
9. Reports............................................................................................................................... 90
9.1 System ...................................................................................................................................90
9.1.1System usage...................................................................................................................90
9.2 Firewall ..................................................................................................................................90
9.2.1 Internet Usage ................................................................................................................90
9.2.2 Bandwidth Usage............................................................................................................91
9.3 Web filter...............................................................................................................................92
9.4 IPS Alert Reports....................................................................................................................92
Frequently Asked Questions (FAQs) ........................................................................................ 93
Glossary ................................................................................................................................. 95

UTM User Manual
www.allo.com Version 2.0 8
1. Introduction
1.1 Overview
Shield UTM Appliances is the Unified Threat Management solution that target the security needs
for Home/SOHO users. The appliance provides the integrated Firewall, Intrusion Prevention,
SSLVPN functionalities.
Unified threat management (UTM) is an emerging trend in the network security market. UTM
appliances have evolved from traditional firewall/VPN products into a solution with many
additional capabilities. UTM solutions also provide integrated management, monitoring, and
logging capabilities to streamline deployment and maintenance. UTM appliances combine
firewall, gateway anti-virus, and intrusion detection and prevention capabilities into a single
Platform. UTM is designed protect users from blended threats while reducing complexity.
The Unified Threat Management (UTM) Appliance connects your local area network (LAN) to the
Internet through one or two external broadband access devices such as cable mode ms or DSL
modems. Dual wide area network (WAN) ports allow you to increase the effective data rate to
the Internet by utilizing both WAN ports to carry session traffic, or to maintain a backup
connection in case of failure of your primary Internet connection. As a complete security
solution, the UTM combines a powerful, flexible firewall with a content scan engine that protect
your network from denial of service (DoS) attacks, unwanted traffic, traffic with objectionable
content, spam, phishing, and Web-borne threats such as spyware, viruses, and other malware
threats. The UTM provides advanced IPSec and SSL VPN technologies for secure and simple
remote connections. The use of Gigabit Ethernet LAN and WAN ports ensures extremely high
data transfer speeds. The UTM is a plug-and-play device that can be installed and configured
within minutes

UTM User Manual
www.allo.com Version 2.0 9
1.2 Technical Specifications
No of Interfaces
Two 1Gbps WAN port & four 1Gbps LAN ports, 1 console
interface, 1 USB port
Status Firewall Inspection
Yes
Deep Packet Inspection
Yes
Signatures Support
~4000 active signatures from snort VRT/emerging threats
Application Protocols Detection
70+
Maximum No of Connections
20000
Maximum No of New Connections
Per Second
1800
Maximum No of SSLVPN Clients
100
Authentication
X509 certificates, internal user DB
Logging
Local log viewer, Syslog
Device Management
HTTPS GUI, SNMP
Hardware
Cavium Octeon II 63xx, 2cores 800MHz
RAM
1 GB

UTM User Manual
www.allo.com Version 2.0 10
Notification LEDs (On the front panel of the UTM)
1.3 Equipment Structure
1.3.1 UTM Rear View
Figure 1: UTM Rear View
1.3.2 UTM Front View
Figure 2: UTM Front View