Clavister SG3200 Series User manual

SG3200 Quick Start Guide
Unpack the SG3200 and place the
device in a suitable location.
1
2
3
Connect the management interface
The initial configuration of the SG3200
determines which Ethernet interface is to be
used for remote management by a workstation
running the FineTune management software.
Any interface on the SG3200 can be selected
for this purpose and that interface can still be
used for normal traffic.
The interface selected should be attached
to the same network as the management
workstation (or a network accessible from the
management server via one or more routers).
Connect the selected SG3200 interface to a
switch or hub in the network using a regular
straight-through Ethernet cable as illustrated
below.
An interface can be connected directly to the
management workstation using a crossover
cable.
Connect a Console
a) The SG3200 serial console port is an RS-232
port that enables connection to a console
for initial configuration. The console can be
a terminal or PC with a serial port. If using a
PC, it should be running a terminal emulator
such as HyperTerminal. The console must
communicate with the SG3200 console port
using settings: 9600 baud, No parity, 8 bits,
1 stop bit and No Flow Control.
b) With the RS-232 cable supplied, connect
the console directly to the console port on
the SG3200.
Switch on SG3200 power
Once a console is connected and running,
switch on the SG3200 by connecting the
power cable and pressing the power switch
at the back of the unit.
4

Starting CorePlusTM
a) The console will indicate that it is
Generating Base Configuration and
when this is complete it will say Done.
Now press ”Y” to start the Clavister CorePlus
operating system.
7
Choose an Interface
The console should now show a menu for
selection of the interface for the management
workstation.
Choose the management interface from the
menu that was connected up previously in
step 2 and press the Return key.
Enter IP address & Default Gateway
The console will now allow a number of
options to be entered. Enter the IP address that
will be used for the management interface of
the SG3200 with the appropriate netmask.
If the SG3200 is not on the same network as
the FineTune management workstation (and
is therefore at least one router hop away) you
will also need to specify the Gateway Address
and the Allowed Management Network with
it’s netmask.
If you want to allow FineTune management
access from any network, specify the Allowed
Management Network as 0.0.0.0 with Netmask
0.0.0.0. However restricting access to a specific
network (or IP address) is recommended and
this can be done at a later time with FineTune.
Press Ctrl-S to save the settings and continue.
5
6
SG3200 Quick Start Guide
b) If everything is correctly configured,
CorePlus will start and you will see a
console screen similar to the one below

c) Now Select Appliance and click Next.
Setting up a Security Gateway with
the FineTune management software
a) Install and start the FineTune management
software on a suitable Windows PC.
Now we are ready to start using FineTune to
fully configure the Security Gateway.
b) When the main screen of FineTune opens,
open up the Default Data Source by pressing
the Security Editor button. To create a new
Gateway, right-click on the Security
Gateways tree node and select the
New > Security Gateway menu options.
8d) Select a name for the Security Gateway and
enter the IP address of the internal interface of
the device. This is the same address as we used
earlier for the management interface setup.
SG3200 Quick Start Guide
e) Enter a password if you want to protect
access to the local Security Gateway console.
Keep a record of this password.

Create security policies
Your SG3200 Security Gateway is now ready
for configuration using the FineTune manage-
ment software and you should refer to the
”FineTune Administration Guide” to find out
how to create your first security policies for the
SG3200.
f) FineTune now contacts the Security Gateway
and retrieves the base configuration as well as
changing the remote management keys used
for configuration communication.
If this step fails, make sure that you can “ping”
the device from the management PC and that
you can “ping” the management PC from the
console. If that doesn’t work, check your
network configuration for mismatches
between the Security Gateway and the
management PC.
g) Enter the IP address of your DNS server. This
address should be provided by your ISP.
h) If you already have internet access through
another gateway or router you can register the
product online by selecting one of the two first
options, First-time User or Existing User.
If not, choose Register Later.
SG3200 Quick Start Guide
9
Part number: clavister-qsg-sg3200_001 Published November 2007