YOGGIE GATEKEEPER PICO User manual

www.yoggie.com

Legal Notice
Legal Notice
SAFETY NOTICE: TO AVOID DANGER, KEEP PRODUCT AND PACKAGE AWAY FROM
BABIES AND CHILDREN. THE PRODUCT IS NOT INTENDED FOR BABIES AND
CHILDREN.
©Copyright 2006-2008. Yoggie Security Systems Ltd. All rights reserved.
Any and all intellectual property rights related to the Gatekeeper Pico and Gatekeeper
Pico Pro products belongs solely to Yoggie Security Systems Ltd. and its licensors,
and may not be used in any manner except as explicitly permitted by Yoggie Security
Systems Ltd., in the Terms of Use Agreement.
The technology and products described in this material are protected by registered
and/or pending patents of Yoggie Security Systems Ltd. and/or its licensors.
Yoggie™, the Yoggie logo, Yoggie.com™, Gatekeeper Pico™, Gatekeeper Pico Pro™,
Yoggie Gatekeeper™, Yoggie Pico™, Yoggie SOHO™, Yoggie Pico Personal™, Yoggie
Pico Pro™ and Yoggie Firestick Pico™ are trademarks or registered trademarks of
Yoggie Security Systems Ltd. All other trademarks, service marks, and logos
appearing in this material or on the product belong to their respective owners.
Q2 2008
GPUM001.3.9
ii | Gatekeeper Pico

Table of Contents
Table of Contents
LEGAL NOTICE........................................................................................... II
TABLE OF CONTENTS ................................................................................III
ABOUT THIS USER GUIDE........................................................................... 5
INTRODUCTION.......................................................................................... 6
GATEKEEPER PICO FEATURES..........................................................................7
MODES OF OPERATION .................................................................................7
Corporate (Managed) Mode .............................................................. 7
Standalone Mode............................................................................7
GATEKEEPER PICO DRIVER AND SOFTWARE ......................................................... 8
PACKAGE CONTENTS.................................................................................... 9
SYSTEM REQUIREMENTS ............................................................................. 10
GETTING TO KNOW YOUR GATEKEEPER PICO........................................... 11
GETTING STARTED.................................................................................... 12
CONNECTING GATEKEEPER PICO .................................................................... 12
DRIVER INSTALLATION AND REGISTRATION........................................................ 12
YOGGIE MANAGEMENT CONSOLE.............................................................. 17
ACCESSING THE MANAGEMENT CONSOLE VIA THE GATEKEEPER PICO ICON ................... 17
MANUALLY ACCESSING THE MANAGEMENT CONSOLE ............................................. 19
CHANGING THE INTERFACE LANGUAGE ............................................................. 20
CHANGING YOUR PASSWORD........................................................................ 20
CHANGING YOUR USER DETAILS.................................................................... 21
CHANGING MODES.................................................................................... 21
CHANGING THE PRIVACY SETTINGS................................................................. 22
SETTING THE TIME ZONE ............................................................................ 22
MONITORING SECURITY ACTIVITY .................................................................. 23
Viewing Security Status................................................................. 23
Viewing and Printing Reports .......................................................... 25
Viewing the Security Log................................................................ 27
Viewing the System Log................................................................. 29
Viewing the VPN Log (Gatekeeper Pico Pro) ...................................... 30
CONFIGURING SECURITY............................................................................. 31
User Guide | iii

Table of Contents
iv | Gatekeeper Pico
CONFIGURING GATEKEEPER PICO NETWORK SETTINGS.......................................... 32
Configuring Internal Network Settings ............................................. 32
Configuring Proxy Settings............................................................. 33
Configuring Additional Settings....................................................... 35
CONFIGURING VPN SETTINGS (GATEKEEPER PICO PRO)........................................ 37
Enabling or Disabling a VPN Connection ........................................... 37
Configuring VPN Client Settings ...................................................... 37
Configuring a Generic VPN Connection ............................................. 38
Configuring a CheckPoint VPN Connection ........................................ 39
Configuring a Cisco VPN Connection ................................................ 40
SPAM E-MAIL PROTECTION SETTINGS.............................................................. 41
Configuring Spam Protection Settings.............................................. 43
Creating Custom E-mail Rules ........................................................ 43
Changing the Order in which E-mail Rules are Applied........................ 45
Modifying, Activating/Deactivating, and Deleting E-mail Rules............. 45
ADVANCED SECURITY SETTINGS .................................................................... 47
Web Filtering / Parental Content Control .......................................... 47
Configuring Firewall Settings .......................................................... 50
Size Policy ................................................................................... 58
Configuring Protocol Scanning ........................................................ 59
Configuring IDS/IPS...................................................................... 60
SUPPORT.................................................................................................. 62
GENERATING A SUPPORT FILE....................................................................... 62
RESET OPTIONS....................................................................................... 63
DIAGNOSTICS ......................................................................................... 64
Running General Diagnostics .......................................................... 64
Running Network Diagnostics ......................................................... 66
Running a Virus Test..................................................................... 68
GATEKEEPER PICO ENFORCEMENT ........................................................... 69
DISABLING GATEKEEPER PICO ENFORCEMENT..................................................... 69
CHANGING THE ENFORCEMENT PASSWORD ........................................................ 69
UNINSTALLING GATEKEEPER PICO........................................................... 71

About this User Guide
Gatekeeper Pico Features
User Guide | 5
About this User Guide
The following User Guide provides installation and usage instructions for the following
Gatekeeper™ versions:
Gatekeeper Pico™
Gatekeeper Pico Pro™

Introduction
Gatekeeper Pico Features
6| Gatekeeper Pico
Introduction
Gatekeeper Pico is a miniature USB security appliance that protects your PC or laptop
from malicious intrusion, including viruses, Trojans, spyware, worms, and other
Internet attacks, by preventing them from ever reaching your computer. It empowers
you with the freedom to connect your computer to the Internet anywhere and enjoy
the highest level of protection — the same corporate level, hardware-based security
solutions used by highly guarded security organizations.
Gatekeeper Pico combines best-of-breed enterprise-class software with proprietary
patent pending developments to provide a comprehensive security solution for known
and unknown threats. These solutions include:
Adaptive Security Policy™
Multi-Layer Security Agent™
Layer-8 Security Engine™
URL Categorization and Filtering
Anti-Spam
Anti-Phishing
Anti-Spyware
Anti-Virus
Transparent E-mail Proxies (POP3, SMTP)
Transparent Web Proxies (HTTP; FTP)
Intrusion Detection/Prevention
VPN Client (available in Gatekeeper Pico Pro)
Stateful Inspection Firewall
Before any data is accepted for processing by the computer’s operating system, a
low-level driver redirects it to Gatekeeper Pico where a full security check is
performed. Security breach attempts are identified and thwarted, and only safe,
secure data is passed back to the computer.
Gatekeeper Pico includes a web-based management console which provides status
information, security logs, and reports and can be used to configure device settings,
network settings and security policy.

Introduction
Gatekeeper Pico Features
User Guide | 7
Gatekeeper Pico Features
Gatekeeper Pico offers the following features:
Extremely small – size of a standard USB key
Hardware-based security appliance with hardened Linux OS
Physical separation between the laptop and the outside world
System kernel resides on read-only memory section
Plug and forget, and easy to carry
Automatic updates
All-in-one corporate grade security software
Proprietary security software
Real-time monitoring and comprehensive reports
Remote management (Gatekeeper Pico Pro version)
Modes of Operation
Corporate (Managed) Mode
In this mode, which is only available in Gatekeeper Pico Pro, the Gatekeeper unit is
connected to a Yoggie Management Server. The Yoggie Management Server extends
the IT manager’s ability to manage and enforce security on traveling laptops.
Installed in the IT server room, the Yoggie Management Server manages the fleet of
traveling Gatekeeper Pico units as follows:
Manages and propagates corporate security policies
Manages firmware, signature, rule-base and any other updates
Obtains local logs and events for complete visibility
Standalone Mode
In this mode, the Gatekeeper is not connected to a Yoggie Management Server and
functions independently. In this case, security policy is set by the Gatekeeper user,
while security updates are transparently downloaded directly from Yoggie Security
Systems.

Introduction
Gatekeeper Pico Driver and Software
8| Gatekeeper Pico
Gatekeeper Pico Driver and Software
The supplied Gatekeeper Pico CD includes the Gatekeeper Pico driver and software.
You install the driver and software the first time you connect the Gatekeeper Pico unit
to the computer as described in “Getting Started”.
The software and driver provide the following features and benefits:
Redirection — the ability to connect a laptop to a network (Internet or other)
using a Wi-Fi (wireless) connection, analog modem, cellular modem, or any other
network interface, and have all traffic redirected to the Gatekeeper unit. The
Gatekeeper allows only safe and secure traffic to reach your laptop.
Yoggie Enforcement — the ability to connect to a network is disabled if Gatekeeper
Pico is not connected to the laptop. If the Gatekeeper is physically disconnected
from the laptop during use, all network connections are automatically and
immediately terminated.
Gatekeeper Pico icon — located in the Windows notification area (icon tray).
Right-clicking the icon provides:
Quick access to the Gatekeeper Pico Management Console (see “Yoggie
Management Console”).
The ability to temporarily disable protection (see “Disabling Gatekeeper Pico
Enforcement”).
Protection status indication — the Gatekeeper Pico icon is green when protection is
enabled and red when protection is disabled.
Notification balloons — balloons from the icon contain information on the
Gatekeeper status and events. Status notification tooltips can also be viewed by
placing the mouse cursor over the icon.
Disable protection — (password required) in case of an emergency, for example, if
a Gatekeeper Pico unit has been lost or damaged, the network can be accessed
by disabling Gatekeeper Pico Enforcement (see “Disabling Gatekeeper Pico
Enforcement”).

Introduction
Package Contents
User Guide | 9
Package Contents
Gatekeeper Pico or Gatekeeper Pico Pro
Gatekeeper Pico CD
Quick Start Guide

Introduction
System Requirements
10 | Gatekeeper Pico
System Requirements
USB Port and PC Running Windows XP or Vista 32 bit.

Getting to Know Your Gatekeeper Pico
System Requirements
User Guide | 11
Getting to Know Your Gatekeeper Pico
Power – lights when Gatekeeper Pico is powered up.
Security Events – blinks when a security event occurs.
Update – blinks when updates are being downloaded.
Do not remove Gatekeeper Pico during updates.
Whenever Gatekeeper Pico boots, both the security and update indicators blink
until the boot sequence is complete.

Getting Started
Connecting Gatekeeper Pico
12 | Gatekeeper Pico
Getting Started
Getting started consists of connection, initial setup, and registration of the
Gatekeeper Pico.
Connecting Gatekeeper Pico
To connect Gatekeeper Pico:
1. Remove the cap.
2. Insert Gatekeeper Pico into an available USB port.
Gatekeeper Pico’s LED indicators start blinking, indicating boot sequence.
Windows may automatically detect the Gatekeeper unit as a new hardware
device and ask to install a driver. Click Cancel to exit the driver installation
wizard.
Driver Installation and Registration
It is recommended to disable any software-based Firewall or Internet protection
suites.
1. Insert the Gatekeeper Pico CD.
A menu screen appears.
2. Click Install Yoggie Software & Driver and follow the on-screen instructions.
After installing the driver, your web browser opens and you are automatically
prompted for a username and password to begin the registration process.
3. Enter the default login information (case-sensitive):
User: admin
Password: yoggie

Getting Started
Driver Installation and Registration
User Guide | 13
The Interface Language screen appears.
4. Select your preferred language from the drop-down list and click Next.
The End-User License Agreement (EULA) screen appears.
5. Read the EULA and click I Accept to proceed.
The registration screen appears.

Getting Started
Driver Installation and Registration
14 | Gatekeeper Pico
6. Do one of the following:
If your laptop will be connected to the Yoggie Management Server (YMS),
select the Corporate Mode setup option.
If your laptop will not be working with the Yoggie Management Server™,
select the Standalone Mode setup option.
7. Click Next.
The user information screen appears.

Getting Started
Driver Installation and Registration
User Guide | 15
8. Enter the following information:
Your name
Your email address
A valid license key, located on the CD sticker (Standalone Mode only)
Settings for your corporate Yoggie Management Server IP address and
password (Corporate Mode only)
9. Click Next.
The Privacy screen appears.
10.Set your desired privacy settings (share security related information with
Gatekeeper Pico for improved security). Then click Next.
The password and time zone screen appears.

Getting Started
Driver Installation and Registration
16 | Gatekeeper Pico
11.Set your new password for accessing the Management Console, and your local time
zone.
12.Click Finish to complete the registration.
The Gatekeeper Pico icon appears in the Windows notification area, and
Gatekeeper Pico is now protecting your laptop.
Take Gatekeeper Pico for a test drive
Download EICAR’s virus demo file from:
http://www.eicar.org/anti_virus_test_file.htm
Gatekeeper Pico downloads any required updates. During first time use, this
process can take up to fifteen minutes, and you will not be able to use
Gatekeeper Pico during this time. You can view the update progress via the
Web-based Yoggie Management Console.

Yoggie Management Console
Accessing the Management Console via the Gatekeeper Pico Icon
User Guide | 17
Yoggie Management Console
The Yoggie Management Console (Management Console) provides access to the
Gatekeeper Pico management features through your Web browser. You can monitor
security activity, view and print security reports and logs, view and configure
security, system and user settings, view and print non-security event system logs,
and more.
The Management Console can be accessed in the following ways:
Gatekeeper Pico icon —if the Gatekeeper Pico driver/software is installed (see
“Getting Started”).
Web browser—if for some reason the Gatekeeper Pico icon is not available you can
manually access the Management Console through a standard Web browser.
Accessing the Management Console via the
Gatekeeper Pico Icon
The Gatekeeper Pico Management Console can be accessed via the Gatekeeper Pico
icon.
To access the Management Console via the Gatekeeper Pico icon:
1. In the Windows notification area, right-click the Gatekeeper Pico icon .
2. Select Open Management Console from the displayed pop-up menu.
You can also double-click on the Gatekeeper Pico icon to open the
Management Console.
The Login dialog box opens.
3. Enter the following information:
Username — admin

Yoggie Management Console
Accessing the Management Console via the Gatekeeper Pico Icon
Password — enter your Gatekeeper Pico password (the default password is
yoggie).
4. Click OK.
The Management Console opens.
18 | Gatekeeper Pico
Navigation pane Display pane
2

Yoggie Management Console
Manually Accessing the Management Console
User Guide | 19
Manually Accessing the Management Console
If, for some reason, the Gatekeeper Pico icon is not available, you can manually
access the Management Console through a standard Web browser.
The Management Console can be manually accessed by entering the Gatekeeper Pico
Management Console URL into the address field of your Web.
To manually access the Management Console:
1. Open a Web browser and enter the following Gatekeeper Pico Management Console
URL into the address field of the browser: https://yoggie.yoggie.com:8443
The Login dialog box opens.
2. Enter the following information:
Username — admin
Password — enter your Gatekeeper Pico password (the default password is
yoggie).
3. Click OK. The Management Console opens.

Yoggie Management Console
Changing the Interface Language
20 | Gatekeeper Pico
Changing the Interface Language
You can change the language of the user interface (labels and dialogs) in your
Gatekeeper Pico Management Console at any time.
To change your Management Console interface language:
1. Click Settings in the Navigation pane of the Management Console.
The Security tab appears in the Display pane.
2. Click the System tab.
The Yoggie Details page appears in the Display pane.
3. Click Language.
The Language Settings page appears.
4. Select the language you wish to use from the list.
5. Click Apply.
The selected interface language will be used and the main Yoggie Details page
appears.
Changing Your Password
You can change your Gatekeeper Pico Management Console password at any time.
To change your Gatekeeper Pico Management Console password:
1. Click Settings in the Navigation pane of the Management Console.
The Security tab appears in the Display pane.
2. Click the System tab.
The Yoggie Details page appears in the Display pane.
3. Click Change Password.
The Password Settings page appears.
4. Enter the following information:
Current Password — enter your current password
New Password — enter the new password
Confirm Password — enter the new password again
5. Click Apply.