Vasco IDENTIKEY AG-3 Series User manual

aXsGUARD Gatekeeper
Installation Guide

aXsGUARD Gatekeeper Installation Guide v2.7 Legal Notice
VASCO Products
VASCO Data Security, Inc. and/or VASCO Data Security International GmbH are referred to in this document as
'VASCO'. VASCO roducts comprise Hardware, Software, Services and Documentation. This document
addresses potential and existing VASCO customers and has been provided to you and your organization for the
sole purpose of helping you to use and evaluate VASCO roducts. As such, it does not constitute a license to
use VASCO Software or a contractual agreement to use VASCO roducts.
Disclaimer of Warranties and Limitations of Liabilities
VASCO roducts are provided ‘as is’ without warranty or conditions of any kind, whether implied, statutory, or
related to trade use or dealership, including but not limited to implied warranties of satisfactory quality,
merchantability, title, non-infringement or fitness for a particular purpose.
VASCO, VASCO DISTRIBUTORS, RESELLERS AND SU LIERS HAVE NO LIABILITY UNDER ANY
CIRCUMSTANCES FOR ANY LOSS, DAMAGE OR EX ENSE INCURRED BY YOU, YOUR ORGANIZATION OR ANY
THIRD ARTY (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF ROFITS, BUSINESS
INTERRU TION OR LOSS OF DATA) ARISING DIRECTLY OR INDIRECTLY FROM THE USE, OR INABILITY TO USE
VASCO SOFTWARE, HARDWARE, SERVICES OR DOCUMENTATION, REGARDLESS OF THE CAUSE OF THE
LOSS, INCLUDING NEGLIGENCE, EVEN IF VASCO HAS BEEN ADVISED OF THE OSSIBILITY OF SUCH
DAMAGES, OR IF THEY WERE FORESEEABLE. OUR MAXIMUM AGGREGATE LIABILITY TO YOU, AND THAT OF
OUR DISTRIBUTORS, RESELLERS AND SU LIERS SHALL NOT EXCEED THE AMOUNT AID BY YOU FOR THE
RODUCT. THE LIMITATIONS IN THIS SECTION SHALL A LY WHETHER OR NOT THE ALLEGED BREACH OR
DEFAULT IS A BREACH OF A FUNDAMENTAL CONDITION OR TERM, OR A FUNDAMENTAL BREACH. THIS
SECTION WILL NOT A LY ONLY WHEN AND TO THE EXTENT THAT A LICABLE LAW S ECIFICALLY
REQUIRES LIABILITY DES ITE THE FOREGOING EXCLUSIONS AND LIMITATIONS.
Intellectual Property and Copyright
VASCO roducts contain proprietary and confidential information. VASCO Data Security, Inc. and/or VASCO
Data Security International GmbH own or are licensed under all title, rights and interest in VASCO roducts,
updates and upgrades thereof, including copyrights, patent rights, trade secret rights, mask work rights,
database rights and all other intellectual and industrial property rights. No part of these roducts may be
transferred, disclosed, reproduced or transmitted in any form or by any means, electronic, mechanical or
otherwise, for any purpose, except as expressly permitted by VASCO or its authorized licensee in writing.
This document is protected under US and international copyright law as an unpublished work of authorship. No
part of it may be transferred, disclosed, reproduced or transmitted in any form or by any means, electronic,
mechanical or otherwise, for any purpose, except as expressly permitted in writing by VASCO or its authorized
licensee.
Trademarks
VASCO®, VACMAN®, IDENTIKEY®, aXsGUARD™, DIGI ASS®, DIGI ASS as a Service™ and the ®
logo are registered or unregistered trademarks of VASCO Data Security, Inc. and/or VASCO Data Security
International GmbH in the U.S. and other countries. Other company brand or product names or other
designations, denominations, labels and/or other tags, titles, as well as all URLs (Internet addresses) linked to
such designations or communications (irrespective of whether protected by intellectual property law or not),
mentioned in VASCO roducts may be the trademarks or registered trademarks or be part of any other
entitlement of their respective owners.
Radius Disclaimer
Information on the RADIUS server provided in this document relates to its operation in the aXsGUARD
Gatekeeper environment. We recommend that you contact your NAS/RAS vendor for further information.
Copyright © 2010 VASCO Data Security, Inc, VASCO Data Security International GmbH. All rights reserved.
©August 2010 - VASCO Data Security 2

aXsGUARD Gatekeeper Installation Guide v2.7 Table of Contents
Table of Contents
1 Introduction............................................................................................................................................... 8
1.1 Audience and urpose of this Document............................................................................................. 8
1.2 What is the aXsGUARD Gatekeeper?................................................................................................. 10
1.3 VASCO........................................................................................................................................... 10
2 Safety and Environmental Information...................................................................................................... 11
2.1 Overview........................................................................................................................................ 11
2.2 Electrical Safety............................................................................................................................... 11
2.3 ersonal, Environmental and aXsGUARD Gatekeeper Safety............................................................... 11
2.4 Temperature, ower and Humidity.................................................................................................... 12
2.5 Dimensions..................................................................................................................................... 12
2.6 Chassis Rails.................................................................................................................................. 12
3 Before you Begin...................................................................................................................................... 13
4 Connecting t e aXsGUARD Gatekeeper to a Network................................................................................ 14
4.1 Overview........................................................................................................................................ 14
4.2 owering on the aXsGUARD Gatekeeper........................................................................................... 14
4.3 Connecting to your Network............................................................................................................. 16
4.4 Workstation TC /I Settings............................................................................................................. 16
5 Installation steps: an overview................................................................................................................. 18
6 Logging into t e Administrator Tool.......................................................................................................... 19
7 C anging t e sysadmin password............................................................................................................ 21
8 Licensing................................................................................................................................................. 22
8.1 Overview........................................................................................................................................ 22
8.2 Downloading a System Info file......................................................................................................... 22
8.3 Acquiring a VASCO License file........................................................................................................ 23
8.3.1 Downloading a Commercial License File....................................................................................... 23
8.3.2 Downloading an Evaluation License File....................................................................................... 26
8.4 Uploading the License file to the aXsGUARD Gatekeeper.................................................................... 29
9 aXsGUARD Gatekeeper Configuration....................................................................................................... 30
9.1 Overview........................................................................................................................................ 30
9.2 Creating an Administrator with full administrator rights....................................................................... 30
9.3 Customer Information...................................................................................................................... 33
9.3.1 Overview.................................................................................................................................... 33
9.3.2 Entering Customer Information.................................................................................................... 34
© August 2010 - VASCO Data Security 3

aXsGUARD Gatekeeper Installation Guide v2.7 Table of Contents
9.4 Menu Structure and Navigation........................................................................................................ 35
9.5 Entering the System Information....................................................................................................... 36
9.6 Network Device Settings.................................................................................................................. 38
9.6.1 Setting up the Ethernet Secure LAN Device.................................................................................. 38
9.6.2 Setting up an Ethernet Internet Device......................................................................................... 41
9.7 General Network Settings................................................................................................................. 43
9.8 General E-mail Settings .................................................................................................................. 45
9.8.1 Content Scanning and E-mail Server Features Active.................................................................... 45
9.8.2 Content Scanning Feature Active, E-mail Server Feature Inactive................................................... 47
9.8.3 Content Scanning and E-mail Server Features both Inactive........................................................... 48
10 W at's Next............................................................................................................................................. 49
11 aXsGUARD Gatekeeper Security Concepts................................................................................................ 50
11.1 Overview........................................................................................................................................ 50
11.2 Security olicies and Levels............................................................................................................. 50
11.3 Groups........................................................................................................................................... 53
11.4 Users.............................................................................................................................................. 53
11.5 Computers and Servers................................................................................................................... 54
11.6 System........................................................................................................................................... 55
12 Support.................................................................................................................................................... 56
12.1 Overview........................................................................................................................................ 56
12.2 If you encounter a problem............................................................................................................... 56
12.3 Return procedure if you have a hardware failure................................................................................ 56
© August 2010 - VASCO Data Security 4

aXsGUARD Gatekeeper Installation Guide v2.7 Table of Contents
Illustration Index
Image 1: aXsGUARD Gatekeeper AG-3XXX.................................................................................................................................................................. 8
Image 2: aXsGUARD Gatekeeper AG-5XXX.................................................................................................................................................................. 8
Image 3: Back of a Typical aXsGUARD Gatekeeper..................................................................................................................................................... 14
Image 4: Example Stickers Labeling Interfaces on the aXsGUARD Gatekeeper AG-3XX3................................................................................................ 15
Image 5: Example Stickers Labeling Interfaces on the aXsGUARD Gatekeeper AG-3XX4................................................................................................ 15
Image 6: Example Stickers Labeling Interfaces on the aXsGUARD Gatekeeper AG-5XX6................................................................................................ 15
Image 7: Example Stickers Labeling Interfaces on the aXsGUARD Gatekeeper AG-7XXX................................................................................................ 15
Image 8: Power Button and Power LED..................................................................................................................................................................... 16
Image 9: Command Prompt and Testing TCP/IP Settings............................................................................................................................................ 17
Image 10: Certificate Screen.................................................................................................................................................................................... 19
Image 11: aXsGUARD Gatekeeper Login Screen........................................................................................................................................................ 20
Image 12: Screen on sysadmin first-time logon.......................................................................................................................................................... 20
Image 13: Changing the System Administrator Password............................................................................................................................................ 21
Image 14: Changing the System Administrator Password: Password entry.................................................................................................................... 21
Image 15: Downloading the System Info file............................................................................................................................................................... 22
Image 16: VASCO's Product Registration Website...................................................................................................................................................... 23
Image 17: VASCO Terms and Conditions................................................................................................................................................................... 24
Image 18: Registration Menu................................................................................................................................................................................... 24
Image 19: Uploading the System Info file................................................................................................................................................................... 25
Image 20: Downloading the License file.................................................................................................................................................................... 25
Image 21: VASCO Product Registration Website......................................................................................................................................................... 26
Image 22: Product Selection.................................................................................................................................................................................... 26
Image 23: VASCO Terms and Conditions................................................................................................................................................................... 27
Image 24: Uploading the System Info file................................................................................................................................................................... 28
Image 25: Downloading the License file.................................................................................................................................................................... 28
Image 26: Uploading the License file in the Administrator Tool.................................................................................................................................... 29
Image 27: Confirmation of successful License importation.......................................................................................................................................... 29
Image 28: Creating a System Administrator User....................................................................................................................................................... 31
Image 29: Configuration possibilities with full administrator rights................................................................................................................................ 32
Image 30: Customer Information............................................................................................................................................................................... 33
Image 31: System > General Screen........................................................................................................................................................................ 35
Image 32: System > General Screen........................................................................................................................................................................ 36
Image 33: Network > Devices > Eth......................................................................................................................................................................... 38
Image 34: Network > Devices > Eth > eth0.............................................................................................................................................................. 38
© August 2010 - VASCO Data Security 5

aXsGUARD Gatekeeper Installation Guide v2.7 Table of Contents
Image 35: Fixed IP Configuration IP Settings.............................................................................................................................................................. 39
Image 36: Network > Devices > Eth >eth1............................................................................................................................................................... 41
Image 37: PPPoE Configuration Account Settings....................................................................................................................................................... 43
Image 38: Fixed IP Configuration IP Settings.............................................................................................................................................................. 43
Image 39: Network > General.................................................................................................................................................................................. 44
Image 40: E-mail > Domains > Add New: with SMTP and E-mail Server Features........................................................................................................ 46
Image 41: E-mail > Domain > Add New: SMTP Only.................................................................................................................................................. 47
Image 42: E-mail>General: SMTP and E-mail Disabled............................................................................................................................................... 48
Image 43: Rules, Policies and Application Levels....................................................................................................................................................... 50
Image 44: Policy Application to Security Levels.......................................................................................................................................................... 51
Image 45: Restrictive powers and broadness of application......................................................................................................................................... 52
© August 2010 - VASCO Data Security 6

aXsGUARD Gatekeeper Installation Guide v2.7 Table of Contents
Index of Tables
Table 1: System General Fields............................................................................................................................................................. 37
Table 2: Network > Devices > Eth > eth0 Fields....................................................................................................................................39
Table 3: Network > Devices > Eth > eth1 Fields....................................................................................................................................42
© August 2010 - VASCO Data Security 7

aXsGUARD Gatekeeper Installation Guide v2.7 Introduction
1Introduction
1.1 Audience and Purpose of this Document
This Installation Guide explains how to set up the aXsGUARDTM Gatekeeper AG-3XXX, AG-5XXX (see images
below), and AG-7XXX models, and is intended for technical personnel and / or system administrators within an
organization, who are installing and configuring an aXsGUARD Gatekeeper.
If the aXsGUARD Gatekeeper you are configuring is a spare or replacement appliance, please refer to the
aXsGUARD Gatekeeper Replacement How To.
If the aXsGUARD Gatekeeper serves exclusively as an authentication server in your Local Area Network, please
refer to the aXsGUARD Gatekeeper Authentication Quick Install guide.
In sections 1.2 and 1.3, we introduce the aXsGUARD Gatekeeper and VASCO®.
In section 2, we provide safety and environmental information. This section must be read before installing your
aXsGUARD Gatekeeper.
In section 3 , we list the information you need to collect in preparation for installation.
In section 4 we explain how to physically connect the aXsGUARD Gatekeeper to your network. Following
successful connection, the aXsGUARD Gatekeeper's settings can be adjusted by accessing the Administrator
Tool.
In section 5 , we explain the two levels of functionality available with the aXsGUARD Gatekeeper, and the main
©August 2010 - VASCO Data Security 8
Image 2: aXsGUARD Gatekeeper AG-5XXX
Image 1: aXsGUARD Gatekeeper AG-3XXX

aXsGUARD Gatekeeper Installation Guide v2.7 Introduction
installation and configuration steps required for full operation.
In section 6, we explain how to access the aXsGUARD Gatekeeper Administrator Tool.
In section 7, we explain how to change the default sysadmin user password.
In section 8, we explain how to acquire and upload a VASCO License for your aXsGUARD Gatekeeper, to
support full functionality.
In section 9 , we provide step by step instructions for the minimal configurations required to get started.
In section 10, we list the next configurations required, and where you can read more information about these
tasks. We also recommend that you read section 11 on Security Concepts before continuing with configuration.
In section 11 we explain the security concepts to help you to implement the security policy to meet your
organization's needs.
In section 12 , we explain how to request support, and return hardware for replacement.
An index at the end of the document will help you to find specific information you are searching for.
Other documents in the set of aXsGUARD Gatekeeper documentation include:
The aXsGUARD Gatekeeper System Administration How To guide, which provides detailed information
about configuration using the Administrator Tool.
How To guides, which provide detailed information on configuration of each of the features available as
'add-on' modules (explained in the next section). These guides cover specific features, examples of which
are:
aXsGUARD Gatekeeper Authentication
aXsGUARD Gatekeeper Firewall
aXsGUARD Gatekeeper Single Sign-On
aXsGUARD Gatekeeper V N
aXsGUARD Gatekeeper Reverse roxy
aXsGUARD Gatekeeper Directory Services
Access to aXsGUARD Gatekeeper guides is provided through the Documentation button in the aXsGUARD
Gatekeeper Administrator Tool. A paper copy of the aXsGUARD Gatekeeper Installation Guide is also provided
with delivery of the aXsGUARD Gatekeeper.
Further resources available include:
Context-sensitive help, which is accessible in the aXsGUARD Gatekeeper Administrator Tool through the
Help button. This button is permanently available and displays information related to the current screen.
Training courses covering features in detail can be organized on demand. These courses address all levels
of expertise. lease see www.vasco.com for further information.
Welcome to aXsGUARD Gatekeeper security.
©August 2010 - VASCO Data Security 9

aXsGUARD Gatekeeper Installation Guide v2.7 Introduction
1.2 What is the aXsGUARD Gate eeper?
The aXsGUARD Gatekeeper is an authentication appliance, intended for small and medium sized enterprises. In
addition to strong authentication, the aXsGUARD Gatekeeper has the potential to manage all of your Internet
security needs. Its modular design means that optional features can be purchased at any time to support, for
example, e-mail, Web access and V N management. The aXsGUARD Gatekeeper can easily be integrated into
existing IT infrastructures as a stand-alone authentication appliance or as a gateway providing both
authentication services and Internet Security.
Authentication and other features such as firewall, e-mail and Web access, are managed by security policies,
which implement a combination of rules, for example, whether a user must use a DIGI ASS® One-Time
assword in combination with a static password for authentication. Rules can be further adjusted with
restrictions. Security olicies are applied to specific users or groups of users and can also be applied to
specific computers and the entire system.
1.3 VASCO
VASCO is a leading supplier of strong authentication and e-signature solutions and services specializing in
Internet security applications and transactions. VASCO has positioned itself as global software company for
Internet security serving a customer base of approximately 10,000 companies in more than 100 countries,
including approximately 1,500 international financial institutions. VASCO’s prime markets are the financial
sector, enterprise security, e-commerce and e-government.
For further information, please see www.vasco.com.
©August 2010 - VASCO Data Security 10