YOGGIE YOGGIE MANAGEMENT SERVER User manual

Legal Notice
ii | Yoggie Management Server™
Legal Notice
©Copyright 2006-2008. Yoggie Security Systems Ltd. All rights reserved.
Any and all intellectual property rights related to the Yoggie Management Server™
productbelongssolelytoYoggieSecuritySystemsLtd.anditslicensors,andmay
notbeusedinanymannerexceptasexplicitlypermittedbyYoggieSecurity
Systems Ltd., in the Terms of Use Agreement.
The technology and products described in this material are protected by registered
and/or pending patents of Yoggie Security Systems Ltd. and/or its licensors.
Yoggie™, Yoggie logo, Yoggie.com™, Yoggie Gatekeeper™, Yoggie Pico™, Yoggie
SOHO™, Gatekeeper Pro™, Gatekeeper Pico Pro™, Yoggie Pico Personal™, Yoggie
Pico Pro™, Yoggie Firestick Pico™, Yoggie Management Server™ are trademarks
or registered trademarks of YoggieSecuritySystemsLtd.Allothertrademarks,
servicemarks,andlogosappearinginthismaterialorontheproductbelongto
their respective owners.
Q1 2008
YFUM001.00

Safety Instructions
User Guide | iii
Safety Instructions
Use the following safety guidelines to help ensure your own personal safety and to
help protect your system and working environment from potential damage.
The power supply in your Yoggie Management Server™ device may produce
high voltages and energy hazards, which can cause bodily harm. Unless you are
instructed otherwise by Yoggie Security Systems Ltd, only trained service
technicians are authorized to remove the covers and access any components inside
the system.
Keep your system away from radiation and heat sources.
Do not block cooling vents or air intakes.
If any of the following conditions occur, disconnect the product from the power
source and replace the part, or contact your trained service provider:
The power cable or plug is damaged.
An object has fallen into the product.
The product has been exposed to water.
The product has been dropped or damaged.
The product does not operate properly when you follow the operating
instructions.

Table of Contents
iv | Yoggie Management Server™
Table of Contents
TABLE OF FIGURES ..................................................................................... 6
ABOUT THIS USER GUIDE........................................................................... 8
INTRODUCTION.......................................................................................... 9
USING THE YOGGIE MANAGEMENT SERVER™.........................................................9
TECHNICAL SPECIFICATIONS ..........................................................................11
GETTING STARTED.................................................................................... 12
PACKAGE CONTENTS....................................................................................12
INSTALLING ..............................................................................................12
POWERING UP THE YMS...............................................................................13
CONNECTING TO YOUR NETWORK ....................................................................14
LOGGING IN.............................................................................................14
INITIAL SETUP AND REGISTRATION...................................................................16
YMS PAGE ELEMENTS ..................................................................................20
DISCONNECTING ........................................................................................21
MANAGING THE YMS DEVICE.................................................................... 22
YMS PREFERENCES.....................................................................................22
Configuring the Time Zone...............................................................22
Configuring the Corporate Password..................................................22
Configuring an External IP Address ...................................................23
Configuring Display Preferences........................................................23
MANAGING USERS ......................................................................................25
Adding a User ................................................................................25
Modifying User Properties ................................................................26
Deleting a User...............................................................................26
MANAGING GATEKEEPER DEVICES ........................................................... 27
VIEWING SECURITY LOGS .............................................................................27
DISABLING/ENABLING A GATEKEEPER DEVICE......................................................29
UNREGISTERING A GATEKEEPER DEVICE.............................................................29
MANAGING CORPORATE SECURITY .......................................................... 30
MANAGING GROUPS ....................................................................................31
Adding a Group ..............................................................................31
Using Directory Services..................................................................33
Modifying Group Properties ..............................................................34

Table of Contents
User Guide | v
Deleting a Group ............................................................................34
MANAGING SECURITY PROFILES ......................................................................36
Adding a Security Profile..................................................................36
Modifying Profile Properties..............................................................37
Deleting a Security Profile................................................................38
MANAGING POLICIES ...................................................................................38
Adding a Policy...............................................................................38
Modifying Policy Properties...............................................................38
Deleting a Policy.............................................................................39
DISABLING PROTECTION...............................................................................39
CONFIGURING POLICY PARAMETERS ....................................................... 41
CONFIGURING FIREWALL SETTINGS ..................................................................42
Rules .................................................................................................................................42
Blacklist and Whitelist .....................................................................44
Enabling Port Forwarding .................................................................45
CONFIGURING IDS/IPS SETTINGS...................................................................47
CONFIGURING VPN SETTINGS ........................................................................47
Generic VPN...................................................................................48
Cisco VPN ......................................................................................48
CONFIGURING ANTI-VIRUS SETTINGS ...............................................................49
CONFIGURING ANTI-SPAM SETTINGS ................................................................50
CONFIGURING WEB FILTERING SETTINGS ...........................................................51
LOGGING AND REPORTING....................................................................... 52
VIEWING THE SYSTEM LOG............................................................................52
VIEWING THE SECURITY LOG ..........................................................................53
CREATING REPORTS ....................................................................................55
REPORT EXAMPLES......................................................................................57

About this User Guide
Using the Yoggie Management Server™
6| Yoggie Management Server™
Table of Figures
Figure 1 – Yoggie Corporate Security Solution......................................................10
Figure 2 – YMS Device: rear panel.......................................................................13
Figure 3 – YMS Device: front panel .....................................................................13
Figure 6 – Welcome page ..................................................................................16
Figure 7 – Time Settings page............................................................................16
Figure 8 – Network Settings page.......................................................................17
Figure 9 – External IP Address page ...................................................................18
Figure 10 – Set Administrator Password page ......................................................19
Figure 11 – YMS Page Elements .........................................................................20
Figure 12 – Time Zone and Corporate Password page ...........................................22
Figure 13 – Network Settings page.....................................................................23
Figure 14 – Display Preferences .........................................................................24
Figure 15 – Users page .....................................................................................25
Figure 16 – Edit User page ................................................................................26
Figure 17 – Gatekeeper Devices .........................................................................27
Figure 18 – Gatekeeper Device Detail .................................................................28
Figure 19 – Security Log....................................................................................28
Figure 20 – YMS Security Element ......................................................................30
Figure 21 – Gatekeeper Groups..........................................................................31
Figure 22 – Group Editor ...................................................................................32
Figure 23 – Directory Services ...........................................................................33
Figure 24 - Security Profiles...............................................................................36
Figure 25 – Security Profile Details .....................................................................37
Figure 26 – Policy Editor....................................................................................38
Figure 27 – Password Generator.........................................................................39
Figure 28 – Firewall Policy: Rules .......................................................................42
Figure 29 – Firewall Policy: Rule Editor................................................................43
Figure 30 – Firewall Policy: Blacklist....................................................................44
Figure 31 – Firewall Policy: Whitelist...................................................................45
Figure 32 – Firewall Policy: Port Forwarding.........................................................46
Figure 33 – IDS/IPS Policy.................................................................................47
Figure 34 – VPN Policy: Generic .........................................................................48
Figure 35 – VPN Policy: Cisco.............................................................................49
Figure 36 – Anti-Virus Policy ..............................................................................49
Figure 37 - Anti-Spam Policy..............................................................................50
Figure 38 – Web-Filtering Policy.........................................................................51
Figure 39 – System Logs...................................................................................52
Figure 40 - System Log: Individual Entry.............................................................53
Figure 41 – Security Log....................................................................................53
Figure 42 – Security Log: Individual Entry...........................................................54
Figure 43 – YMS Reports ...................................................................................55
Figure 44 - Report Query Form: Security Summary ..............................................56

About this User Guide
Using the Yoggie Management Server™
User Guide | 7
Figure 45 – Security Summary Report (Text and Chart) ........................................57
Figure 46 – Security Summary Report (Bar Chart)................................................58
Figure 47 – Web-Filtering Category Summary Report (Pie Chart)............................59
Figure 48 – Registration Report (Text) ................................................................59

About this User Guide
Using the Yoggie Management Server™
8| Yoggie Management Server™
About this User Guide
The following User Guide provides installation and usage instructions for the
Yoggie Management Server™.
Style and Syntax Conventions
Verdana
Regular text.
Arial Bold
Names of fields and other page components.
Arial Italics
Special terms, the first time they appear.
Monospace
Bold
Text entered by the user on the computer page.
No t es , which offer an additional explanation or a hint on how to
overcome a common problem.
Warnings, which indicate extra caution needed in order to avoid
potential problems.

Introduction
Using the Yoggie Management Server™
User Guide | 9
Introduction
The Yoggie Management Server™ (YMS) is a robust security-management
appliance installed in the server room of an organization. It offers a central
security solution for the management and monitoring of the organization’s Yoggie
security mini-computers, also known as Gatekeepers.
Using the Yoggie Management Server™
Gatekeeper devices provide remote and mobile user protection against Internet
threats anytime, anywhere. The IT manager must continuously monitor and
manage the fleet of Gatekeeper devices from a remote central point, to enforce
corporate-level security.
A single YMS unit offers remote central management of up to 5,000 Gatekeeper
units. A YMS unit monitors and logs the Gatekeeper units’ activity in real time, and
ensures uninterrupted protection by keeping the Gatekeeper units up to date with
the latest security and firmware updates. A YMS unit extends the IT manager’s
ability to easily enforce security policies on various groups in the organization,
using a Web-based management console without requiring any agent installation.
YMS supports day-to-day administration tasks, such as generation of daily security
reports, disabling of lost or stolen Gatekeeper devices, and so on.
In a common network setup, Gatekeeper units are plugged into laptops belonging
to different groups in the organization. Most of these laptops are located outside
the corporate network. The corporate YMS is visible to both the external users and
to the internal LAN users. After Gatekeeper units are registered to the YMS, they
report logs and details to the YMS, and receive security and firmware updates
from the YMS. The network setup is illustrated in the following diagram: