Ronde & Schwarz GP-T User manual

R&S®GP-U/GP-E/GP-S/GP-T
gateprotect Firewall
User Manual
User Manual
3646.3836.02 ─ 01
(T^VT2)
Cybersecurity

This document applies to the gateprotect software version 10.0. It describes the following R&S®gatepro-
tect Firewall models:
●R&S®gateprotect Firewall GP-U
●R&S®gateprotect Firewall GP-E
●R&S®gateprotect Firewall GP-S
●R&S®gateprotect Firewall GP-T
© 2017 Rohde & Schwarz Cybersecurity GmbH
Mühldorfstr. 15, 81671 Munich, Germany
Phone: [phone] - 223
Email: [email protected]
Internet: cybersecurity.rohde-schwarz.com
Printed in Germany – Subject to change – Data without tolerance limits is not binding.
R&S® is a registered trademark of Rohde & Schwarz GmbH & Co. KG.
Trade names are trademarks of the owners.
The following abbreviations are used throughout this manual: R&S®gateprotect Firewall is indicated as gateprotect Firewall.

Contents
R&S®GP-U/GP-E/GP-S/GP-T
3User Manual 3646.3836.02 ─ 01
Contents
1 About This Manual.................................................................................7
1.1 Audience........................................................................................................................ 7
1.2 What’s in This Manual.................................................................................................. 8
1.3 Conventions.................................................................................................................. 8
1.4 Related Resources........................................................................................................9
1.5 About Rohde & Schwarz Cybersecurity..................................................................... 9
2 Getting Started..................................................................................... 11
3 User Interface....................................................................................... 13
3.1 Web Client Components.............................................................................................13
3.1.1 Header Area..................................................................................................................14
3.1.2 Navigation Pane............................................................................................................15
3.1.3 Desktop......................................................................................................................... 15
3.2 Icons and Buttons.......................................................................................................17
3.3 Firewall Rule Settings.................................................................................................19
3.4 Menu Reference.......................................................................................................... 22
3.4.1 Firewall..........................................................................................................................22
3.4.1.1 License Settings............................................................................................................22
3.4.1.2 Updates Settings...........................................................................................................23
3.4.1.3 Administrators............................................................................................................... 26
3.4.1.4 User Authentication.......................................................................................................28
3.4.1.5 Server Access Settings................................................................................................. 41
3.4.1.6 Command Center Settings............................................................................................43
3.4.1.7 Time Settings................................................................................................................ 43
3.4.1.8 High Availability Settings...............................................................................................45
3.4.1.9 Backup.......................................................................................................................... 49
3.4.2 Network......................................................................................................................... 53
3.4.2.1 Interfaces...................................................................................................................... 53
3.4.2.2 Connections.................................................................................................................. 60
3.4.2.3 WLAN Settings..............................................................................................................67
3.4.2.4 Routing..........................................................................................................................69
3.4.2.5 DHCP Settings.............................................................................................................. 72

Contents
R&S®GP-U/GP-E/GP-S/GP-T
4User Manual 3646.3836.02 ─ 01
3.4.3 WAN..............................................................................................................................74
3.4.3.1 DNS Settings.................................................................................................................74
3.4.3.2 DynDNS Accounts........................................................................................................ 75
3.4.3.3 QoS Settings................................................................................................................. 76
3.4.3.4 QoS Connection Settings..............................................................................................77
3.4.4 Network Objects............................................................................................................78
3.4.4.1 Internet Objects.............................................................................................................78
3.4.4.2 Hosts............................................................................................................................. 79
3.4.4.3 Users.............................................................................................................................80
3.4.4.4 User Groups..................................................................................................................81
3.4.4.5 VPN Users.................................................................................................................... 82
3.4.4.6 VPN User Groups......................................................................................................... 83
3.4.4.7 Networks....................................................................................................................... 84
3.4.4.8 Host Groups.................................................................................................................. 84
3.4.4.9 IP Ranges..................................................................................................................... 85
3.4.4.10 VPN Hosts.....................................................................................................................86
3.4.4.11 VPN Groups.................................................................................................................. 87
3.4.4.12 VPN Networks...............................................................................................................88
3.4.4.13 Connections.................................................................................................................. 89
3.4.5 Desktop......................................................................................................................... 90
3.4.5.1 Services........................................................................................................................ 90
3.4.5.2 Desktop Rules...............................................................................................................90
3.4.6 UTM.............................................................................................................................. 91
3.4.6.1 Application Filter............................................................................................................91
3.4.6.2 URL/Content Filter........................................................................................................ 93
3.4.6.3 Antivirus Settings.......................................................................................................... 95
3.4.6.4 Email Security............................................................................................................... 98
3.4.6.5 Proxy........................................................................................................................... 101
3.4.7 VPN.............................................................................................................................103
3.4.7.1 IPsec Settings............................................................................................................. 104
3.4.7.2 VPN SSL Settings....................................................................................................... 105
3.4.7.3 VPN Connections........................................................................................................107
3.4.8 Certificate Management.............................................................................................. 114

Contents
R&S®GP-U/GP-E/GP-S/GP-T
5User Manual 3646.3836.02 ─ 01
3.4.8.1 Certificates.................................................................................................................. 114
3.4.8.2 Templates................................................................................................................... 117
3.4.8.3 OCSP/CRL Settings....................................................................................................118
3.4.8.4 Trusted Proxy CAs...................................................................................................... 119
3.4.9 Monitoring................................................................................................................... 119
3.4.9.1 SNMP Settings............................................................................................................119
3.4.9.2 Syslog Servers............................................................................................................ 121
3.4.9.3 Logs............................................................................................................................ 122
3.4.10 Network Tools............................................................................................................. 123
3.4.10.1 Ping Settings............................................................................................................... 124
3.4.10.2 Traceroute Settings.....................................................................................................124
Index....................................................................................................127

Contents
R&S®GP-U/GP-E/GP-S/GP-T
6User Manual 3646.3836.02 ─ 01

About This Manual
R&S®GP-U/GP-E/GP-S/GP-T
7User Manual 3646.3836.02 ─ 01
1 About This Manual
The gateprotect Firewall User Manual describes the innovative firewall solution from
Rohde & Schwarz Cybersecurity. gateprotect Firewall integrates firewall, application
control, web filtering, malware protection and many more functions in a single system.
Figure 1-1: Sample gateprotect Firewall GP-S 1900.
This document applies to four gateprotect Firewall product lines:
●Unified Line - Easy to use - the firewall solution for small companies which need an
easy-to-use solution to protect their office IT against cyberthreats from the Internet
●Extended Line - Easy to configure - the firewall solution for complex office networks
in medium-sized companies
●Specialized Line - Easy to customize - the perfectly tailored solution that meets the
high demands of complex network structures in industry and enterprise environ-
ments
●GP Tough - the firewall solution specifically designed for challenging environments
There are license-based features that distinguish individual product models within the
product lines from one another. For more information about your specific gateprotect
Firewall, see the information on the relevant data sheet.
See the topics below for more information about this document.
1.1 Audience
This manual is for the networking or computer technician responsible for installing and
configuring the gateprotect Firewall system and employees that use the web client to
define traffic filtering rules.
To use this document effectively, you have to have the following skills depending on
your responsibilities:
●To install and configure the hardware, you have to be familiar with telecommunica-
tions equipment and installation procedures. You also have to have good experi-
ence as a network or system administrator.
Audience

About This Manual
R&S®GP-U/GP-E/GP-S/GP-T
8User Manual 3646.3836.02 ─ 01
●To define filtering rules, you need to understand basic TCP/IP networking con-
cepts.
1.2 What’s in This Manual
The contents of this manual are designed to assist you in configuring your gateprotect
Firewall.
This document includes the following chapters:
1. Chapter 2, "Getting Started", on page 11
Log on to your gateprotect Firewall to set up the system for your network.
2. Chapter 3, "User Interface", on page 13
The sections in this chapter describe the components of the gateprotect Firewall
user interface.
1.3 Conventions
This topic explains the typographic conventions and other notations used to represent
information in this manual.
Elements of the web-based graphical user interface (GUI, or »web client«) are indica-
ted as follows:
Convention Description
"Graphical user interface ele-
ments"
All names of graphical user interface elements on the screen, such as
menu items, buttons, checkboxes, dialog boxes, list names are enclosed
by quotation marks.
"Top-level menu item > sub-
menu element"
A sequence of menu commands is indicated by greater than symbols
between menu items and the whole sequence being enclosed by quota-
tion marks. Select the submenu element from the top-level menu item.
KEYS Key names are written in capital letters.
List options, literal
text, filenames,
commands, program code
List options, literal text, filenames, commands, coding samples and
screen output are distinguished by their fixed-width font.
Links Links that you can click (e.g. references to other parts within this manual)
are displayed in blue font.
References References to parts of the product documentation are displayed in italics.
Notes
The following types of notes are used in this manual to indicate information which
expands on or calls attention to a particular point:
Conventions

About This Manual
R&S®GP-U/GP-E/GP-S/GP-T
9User Manual 3646.3836.02 ─ 01
This note is a little hint that can help make your work easier.
This note contains important additional information.
This note contains information that is important to consider. Non-observance can dam-
age your gateprotect Firewall or put your network security at risk.
1.4 Related Resources
This section describes additional documentation and other resources for information on
your gateprotect Firewall.
Refer to the following related documents and resources:
●Data Sheets summarize the technical characteristics of the different gateprotect
Firewall hardware models.
●Release Notes provide the latest information on each release.
●Our website at cybersecurity.rohde-schwarz.com provides a wealth of information
about our products and solutions as well as the latest company news and events.
For additional documents such as technical specifications, please visit the my gatepro-
tect portal at www.mygateprotect.com.
1.5 About Rohde & Schwarz Cybersecurity
Rohde & Schwarz Cybersecurity is an IT security company that protects companies
and public institutions around the world against cyberattacks.
The company develops and produces technologically leading solutions for information
and network security, including highly secure encryption solutions, next-generation fire-
walls and software for network analysis and endpoint security. As a result of the
DenyAll acquisition, the portfolio now includes vulnerability scanners and firewalls for
business-critical web applications.
The award-winning and certified IT security solutions range from compact, all-in-one
products to customized solutions for critical infrastructures. To prevent cyberattacks
proactively, rather than reactively, our trusted IT solutions are developed following the
security-by-design approach. Around 450 people are employed at the current locations
in Germany, France and Denmark.
About Rohde & Schwarz Cybersecurity

About This Manual
R&S®GP-U/GP-E/GP-S/GP-T
10User Manual 3646.3836.02 ─ 01
For more information, visit our website at cybersecurity.rohde-schwarz.com.
About Rohde & Schwarz Cybersecurity