ZyXEL Communications VANTAGE CNM User manual

Vantage CNM
Centralized Network Management
User’s Guide
Version 2.1.00.61.00
October 2004

Vantage CNM User’s Guide
Copyright 2
Copyright
Copyright © 2004 by ZyXEL Communications Corporation.
The contents of this publication may not be reproduced in any part or as a whole, transcribed,
stored in a retrieval system, translated into any language, or transmitted in any form or by any
means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or
otherwise, without the prior written permission of ZyXEL Communications Corporation.
Published by ZyXEL Communications Corporation. All rights reserved.
Disclaimer
ZyXEL does not assume any liability arising out of the application or use of any products, or
software described herein. Neither does it convey any license under its patent rights nor the
patent rights of others. ZyXEL further reserves the right to make changes in any products
described herein without notice. This publication is subject to change without notice.
Trademarks
ZyNOS (ZyXEL Network Operating System) is a registered trademark of ZyXEL
Communications, Inc. Other trademarks mentioned in this publication are used for
identification purposes only and may be properties of their respective owners.
Note: Refer also to the “Open Software Announcements” on
page 398.

Vantage CNM User’s Guide
3ZyXEL Limited Warranty
ZyXEL Limited Warranty
ZyXEL warrants that (a) the Vantage CNM software (henceforth called the SOFTWARE) will
perform substantially in accordance with the accompanying written materials for a period of
ninety (90) days from the date of receipt, and (b) any Support Services provided by ZyXEL
shall be substantially as described in applicable written materials provided to you by ZyXEL,
and ZyXEL support engineers will make commercially reasonable efforts to solve any
problem issues. To the extent allowed by applicable law, implied warranties on the
SOFTWARE, if any, are limited to ninety (90) days.
CUSTOMER REMEDIES.
ZyXEL's and its suppliers' entire liability and your exclusive remedy shall be, at ZyXEL's
option, either (a) return of the price paid, if any, or (b) repair or replacement of the
SOFTWARE that does not meet ZyXEL's Limited Warranty and which is returned to ZyXEL
with a copy of your receipt. This Limited Warranty is void if failure of the SOFTWARE has
resulted from accident, abuse, or misapplication. Any replacement SOFTWARE will be
warranted for the remainder of the original warranty period or thirty (30) days, whichever is
longer. Outside Taiwan, neither these remedies nor any product support services offered by
ZyXEL are available without proof of purchase from an authorized international source.
NO OTHER WARRANTIES.
To the maximum extent permitted by applicable law, ZyXEL and its suppliers disclaim all
other warranties and conditions, either express or implied, including, but not limited to,
implied warranties of merchantability, fitness for a particular purpose, title, and non-
infringement, with regard to the SOFTWARE, and the provision of or failure to provide
Support Services. This limited warranty gives you specific legal rights. You may have others,
which vary from state/jurisdiction to state/jurisdiction.
Please read the license screen in the installation wizard. You must accept the terms of the
license in order to install Vantage CNM.

Vantage CNM User’s Guide
Customer Support 4
Customer Support
Please have the following information ready when you contact customer support.
• Product model and serial number.
• Warranty Information.
• Date that you received your device.
• Brief description of the problem and the steps you took to solve it.
METHOD
LOCATION
SUPPORT
E-MAIL TELEPHONEAWEB SITE REGULAR MAIL
WORLDWIDE
[e-mail] [phone] www.zyxel.com
www.europe.zyxel.com
ZyXEL Communications Corp.
6 Innovation Road II
Science Park
Hsinchu 300
Taiwa n
[email protected] [phone] ftp.zyxel.com
ftp.europe.zyxel.com
NORTH
AMERICA
[email protected] [phone]
[phone]
www.us.zyxel.com ZyXEL Communications Inc.
1130 N. Miller St.
Anaheim
CA 92806-2001
U.S.A.
[email protected] [phone] ftp.us.zyxel.com
GERMANY
[email protected] [phone] www.zyxel.de ZyXEL Deutschland GmbH.
Adenauerstr. 20/A2 D-52146
Wuerselen
Germany
[email protected] [phone]
FRANCE
[e-mail] [phone] www.zyxel.fr ZyXEL France
1 rue des Vergers
Bat. 1 / C
69760 Limonest
France
[phone]
SPAIN
[email protected] [phone] www.zyxel.es ZyXEL Communications
Alejandro Villegas 33
1º, 28043 Madrid
Spain
[email protected] [phone]
DENMARK
[email protected] [phone] www.zyxel.dk ZyXEL Communications A/S
Columbusvej 5
2860 Soeborg
Denmark
[email protected] [phone]
NORWAY [email protected] [phone] www.zyxel.no ZyXEL Communications A/S
N i l s H a n s e n s v e i 1 3 0 6 6 7 O s l o
Norway
[email protected] [phone]
SWEDEN [email protected] [phone] www.zyxel.se ZyXEL Communications A/S
Sjöporten 4, 41764 Göteborg
Sweden
[email protected] [phone]
FINLAND
[email protected] [phone] www.zyxel.fi ZyXEL Communications Oy
Malminkaari 10
00700 Helsinki
Finland
[email protected] [phone]
a. “+” is the (prefix) number you enter to make an international telephone call.

Vantage CNM User’s Guide
5Customer Support

Vantage CNM User’s Guide
Table of Contents 6
Table of Contents
Copyright .................................................................................................................. 2
ZyXEL Limited Warranty.......................................................................................... 3
Customer Support.................................................................................................... 4
Preface .................................................................................................................... 32
Introducing Vantage Centralized Network Management (CNM) .............................32
Chapter 1
Introducing Vantage............................................................................................... 34
1.1 Key Features ......................................................................................................34
1.1.1 Object Tree View ......................................................................................34
1.1.2 Flexible Friendly Device Registration .......................................................34
1.1.3 Building Blocks .........................................................................................34
1.1.4 Multiple Domain Administration ................................................................34
1.1.5 Complete Device Configuration ................................................................34
1.1.6 Configuration Synchronization ..................................................................34
1.1.7 Firewall .....................................................................................................35
1.1.8 One-Click VPN ..........................................................................................35
1.1.9 Configuration File Management ................................................................35
1.1.10 Firmware Upgrade ..................................................................................35
1.1.11 Monitoring and Notifications ....................................................................35
1.1.12 Logs ........................................................................................................35
1.1.13 Data Maintenance ...................................................................................35
1.1.14 Vantage System Management ................................................................35
1.1.15 License Management .............................................................................35
1.2 Vantage Requirements and Installation ..............................................................36
Chapter 2
GUI Introduction..................................................................................................... 38
2.1 Overview ............................................................................................................38
2.2 Main Menu Components ....................................................................................38
2.2.1 Object Pane ..............................................................................................38
2.2.1.1 Object Tree View Types ..................................................................39
2.2.1.2 Searches .........................................................................................39

Vantage CNM User’s Guide
7Table of Contents
2.2.1.3 Folders ............................................................................................39
2.2.1.4 Devices ...........................................................................................42
2.2.2 Content Pane ............................................................................................42
2.2.2.1 Object Path .....................................................................................42
2.2.2.2 Menu Path .......................................................................................42
2.3 Menu Overview ..................................................................................................42
2.4 Procedure For Configuring A Device .................................................................43
2.5 Context-Sensitive Menus ...................................................................................44
2.6 Icon Key .............................................................................................................44
Chapter 3
Device Menus ......................................................................................................... 48
3.1 Device Menus Overview ....................................................................................48
3.1.1 Device Main Screen ..................................................................................48
3.2 Device Status .....................................................................................................50
3.3 Device Registration ............................................................................................50
3.3.1 Manual Option ..........................................................................................52
3.3.1.1 Configuring ZyXEL Device using Commands .................................52
3.3.1.2 Configuring ZyXEL Device using Web Configurator .......................52
3.3.2 Import From an XML Registration File ......................................................53
3.3.2.1 Basic XML Syntax ...........................................................................54
3.3.2.2 Minimum Mandatory Device Settings ..............................................55
3.4 Device – Vantage Data Inconsistency: Synchronize ..........................................56
3.4.1 Vantage – Device Override Criteria ..........................................................57
3.4.1.1 Vantage CNM Override Device .......................................................57
3.4.1.2 Device Override Vantage CNM .......................................................57
3.4.1.3 Synchronizing Device with Vantage ................................................57
3.5 Firmware Management ......................................................................................57
3.5.1 Add Firmware Screen ...............................................................................58
3.5.2 Firmware Upgrade Select Product Line and Mode ...................................59
3.5.3 Firmware Upgrade Process ......................................................................60
3.5.4 Advisory Notes on Firmware Upgrade ......................................................60
3.5.5 Configuration File ......................................................................................60
3.5.6 Configuration File Management ................................................................61
3.5.7 Configuration File Backup .........................................................................61
3.5.8 Configuration File Restore ........................................................................62
Chapter 4
Configuration > Select Device BB & General ...................................................... 64
4.1 Select Device BB ...............................................................................................64
4.1.1 Procedure to Select and Apply a Device BB ............................................66
4.2 Configuration General Screens ..........................................................................66
4.2.1 System ......................................................................................................67

Vantage CNM User’s Guide
Table of Contents 8
4.2.2 DDNS ........................................................................................................68
4.2.3 Time Setting ..............................................................................................70
4.2.4 Owner Info ................................................................................................71
Chapter 5
Configuration > LAN .............................................................................................. 74
5.1 LAN Overview ....................................................................................................74
5.2 DHCP Setup .......................................................................................................74
5.2.1 IP Pool Setup ............................................................................................74
5.2.2 DNS Servers .............................................................................................74
5.2.3 LAN TCP/IP ..............................................................................................74
5.2.4 Factory LAN Defaults ................................................................................74
5.2.5 IP Address and Subnet Mask ...................................................................75
5.2.6 RIP Setup .................................................................................................75
5.2.7 Multicast ....................................................................................................75
5.3 Configuring LAN IP – ZyWALL ...........................................................................76
5.4 Configuring LAN IP - Prestige ............................................................................79
5.5 Configuring LAN Static DHCP – ZyWALL ..........................................................81
5.6 Configuring LAN IP Alias – ZyWALL ..................................................................82
Chapter 6
Configuration > WLAN........................................................................................... 86
6.1 Wireless LAN Overview .....................................................................................86
6.1.1 Additional Installation Requirements for using 802.1x ..............................86
6.2 Wireless LAN Basics ..........................................................................................86
6.2.1 Channel ....................................................................................................86
6.2.2 ESS ID ......................................................................................................86
6.2.3 RTS/CTS .................................................................................................87
6.2.4 Fragmentation Threshold ..........................................................................88
6.2.5 WEP ..........................................................................................................88
6.3 Configuring Wireless LAN ..................................................................................88
6.3.1 WLAN Wireless .........................................................................................89
6.4 Configuring MAC Filter .......................................................................................90
6.5 802.1x Overview ................................................................................................91
6.5.1 Configuring 802.1x – ZyWALL ..................................................................92
6.5.2 Configuring 802.1x – Prestige ..................................................................92
6.6 Local User Database ..........................................................................................94
6.6.1 Configuring Local User Database .............................................................94
6.6.2 RADIUS ....................................................................................................95
6.6.2.1 Types of RADIUS Messages ...........................................................96
6.6.3 EAP Authentication Overview ...................................................................96
6.7 Configuring RADIUS ..........................................................................................97

Vantage CNM User’s Guide
9Table of Contents
Chapter 7
Configuration > DMZ............................................................................................ 100
7.1 DMZ Overview .................................................................................................100
7.2 DMZ Addresses ...............................................................................................100
7.3 Configuring DMZ ..............................................................................................100
Chapter 8
Configuration > WAN ........................................................................................... 104
8.1 General WAN – ZyWALL .................................................................................104
8.1.1 TCP/IP Priority (Metric) ...........................................................................104
8.1.2 WAN ISP – ZyWALL ...............................................................................106
8.1.2.1 Ethernet Encapsulation .................................................................106
8.1.2.2 PPPoE Encapsulation ...................................................................107
8.1.2.3 PPTP Encapsulation .....................................................................109
8.2 WAN IP – ZyWALL ........................................................................................... 111
8.3 Dial Backup – ZyWALL ....................................................................................112
8.3.1 Traffic Redirect ........................................................................................113
8.3.2 Configuring Dial Backup - ZyWALL ........................................................113
8.3.3 Advanced Modem Setup – ZyWALL .......................................................116
8.3.3.1 AT Command Strings ....................................................................116
8.3.4 Edit Dial Backup – ZyWALL ....................................................................118
8.4 General WAN – Prestige ..................................................................................120
8.4.1 Traffic Shaping ........................................................................................121
8.4.2 Configuring Prestige WAN Setup ...........................................................121
8.4.3 WAN Backup - Prestige ..........................................................................126
8.4.3.1 Traffic Redirect .............................................................................126
8.4.4 Configuring WAN Backup - Prestige .......................................................126
8.4.5 Configuring Advanced WAN Backup – Prestige .....................................129
8.4.6 Advanced Modem Setup – Prestige .......................................................132
Chapter 9
Configuration > NAT ............................................................................................ 134
9.1 NAT Overview ..................................................................................................134
9.1.1 NAT Definitions .......................................................................................134
9.1.2 What NAT Does ......................................................................................135
9.1.3 How NAT Works .....................................................................................135
9.1.4 NAT Mapping Types ...............................................................................135
9.1.5 SUA (Single User Account) Versus NAT ................................................136
9.2 Configuring NAT ...............................................................................................136
9.2.1 Disable NAT ............................................................................................137
9.3 SUA Servers ....................................................................................................137
9.3.1 Port Forwarding: Services and Port Numbers ........................................138
9.3.2 Configuring SUA Servers – ZyWALL ......................................................138

Vantage CNM User’s Guide
Table of Contents 10
9.3.3 Configuring SUA Servers – Prestige ......................................................140
9.3.4 Full Feature Address Mapping ................................................................141
9.3.5 Edit Full Feature Address Mapping ........................................................142
9.4 Trigger Port Forwarding – ZyWALL ..................................................................143
9.4.1 Configuring Trigger Port .........................................................................144
9.4.2 Edit Trigger Port ......................................................................................146
Chapter 10
Configuration > Static Route............................................................................... 148
10.1 Static Route Overview ....................................................................................148
10.1.1 Static Route Summary ..........................................................................148
10.1.2 Edit Static Route ...................................................................................149
Chapter 11
Configuration > VPN ............................................................................................ 152
11.1 VPN Overview ................................................................................................152
11.1.1 IPSec ....................................................................................................152
11.1.2 Security Association ..............................................................................152
11.1.3 Encryption .............................................................................................152
11.1.4 Data Confidentiality ...............................................................................152
11.1.5 Data Integrity .........................................................................................152
11.1.6 Data Origin Authentication ....................................................................153
11.1.7 IPSec Algorithms ..................................................................................153
11.1.7.1 AH (Authentication Header) Protocol ..........................................153
11.1.7.2 ESP (Encapsulating Security Payload) Protocol .........................153
11.1.8 Key Management ..................................................................................154
11.1.9 Encapsulation .......................................................................................154
11.1.9.1 Transport Mode ...........................................................................154
11.1.9.2 Tunnel Mode ................................................................................154
11.1.10 IPSec and NAT ...................................................................................155
11.1.11 Keep Alive ...........................................................................................155
11.1.12 NAT Traversal .....................................................................................156
11.1.12.1 NAT Traversal Configuration .....................................................156
11.1.13 ID Type and Content ...........................................................................156
11.1.14 IKE Phases .........................................................................................157
11.1.15 Negotiation Mode ................................................................................158
11.1.16 Diffie-Hellman (DH) Key Groups .........................................................158
11.1.17 Perfect Forward Secrecy (PFS) ..........................................................159
11.1.18 Pre-Shared Key ..................................................................................159
11.2 VPN Tunnel Summary ....................................................................................159
11.2.1 Add a VPN Tunnel ................................................................................160
11.2.2 Manual VPN Tunnel ..............................................................................165
11.3 VPN and NetBIOS ..........................................................................................168

Vantage CNM User’s Guide
11 Table of Contents
Chapter 12
Configuration > Firewall ...................................................................................... 170
12.1 Firewall Overview ...........................................................................................170
12.2 Types of Firewalls ..........................................................................................170
12.2.1 Packet Filtering Firewalls ......................................................................170
12.2.2 Application-level Firewalls ....................................................................170
12.2.3 Stateful Inspection Firewalls .................................................................171
12.3 Introduction to ZyXEL’s Firewall .....................................................................171
12.3.1 Denial of Service ...................................................................................172
12.3.2 Basics ...................................................................................................172
12.3.3 Types of DoS Attacks ...........................................................................172
12.4 Stateful Inspection ..........................................................................................174
12.4.1 Stateful Inspection Process ..................................................................175
12.4.2 Stateful Inspection and the ZyXEL device ............................................176
12.4.3 TCP Security .........................................................................................176
12.4.4 UDP/ICMP Security ..............................................................................177
12.4.5 Upper Layer Protocols ..........................................................................177
12.4.6 Firewall Policies Overview ....................................................................177
12.4.7 Rule Checklist .......................................................................................179
12.4.8 Security Ramifications ..........................................................................179
12.4.9 Key Fields For Configuring Rules .........................................................180
12.4.9.1 Action ..........................................................................................180
12.4.9.2 Service ........................................................................................180
12.4.9.3 Source Address ...........................................................................180
12.4.9.4 Destination Address ....................................................................180
12.4.10 Alerts ...................................................................................................180
12.4.11 Services and Port Numbers ................................................................180
12.5 Firewall Configuration Screens ......................................................................181
12.5.1 Firewall Summary Screen .....................................................................181
12.5.1.1 Ordering Rules ............................................................................181
12.5.2 DoS Settings .........................................................................................183
12.5.3 Add/Edit a Firewall Rule .......................................................................185
12.5.4 Add/Edit Source/Destination IP Addresses ..........................................187
12.5.5 Custom Ports ........................................................................................188
Chapter 13
Configuration > Device Log ................................................................................ 190
13.1 Device Logs ...................................................................................................190
13.2 Device Logging Options .................................................................................191
13.3 Purge Logs .....................................................................................................193

Vantage CNM User’s Guide
Table of Contents 12
Chapter 14
Configuration > ADSL Monitor............................................................................ 196
14.1 Introduction ....................................................................................................196
14.2 Configuring ADSL Monitor .............................................................................196
Chapter 15
Configuration > Device Alarms........................................................................... 198
15.1 Device Alarms ................................................................................................198
15.1.1 Alarm Classifications ............................................................................198
15.1.2 Alarm States .........................................................................................198
15.1.3 Current Alarms Screen .........................................................................199
15.1.4 Historical Alarms Screen ......................................................................200
Chapter 16
Building Blocks (BBs) ......................................................................................... 202
16.1 Categories ......................................................................................................202
16.2 BB Properties .................................................................................................202
16.3 Configuring Device BB Menus .......................................................................202
16.3.1 Editing an Existing BB ..........................................................................203
16.3.2 Device BB Configuration Select ............................................................204
16.3.3 Adding a New BB ..................................................................................204
16.4 Configuration BBs ..........................................................................................205
16.4.1 Adding a Configuration BB ...................................................................206
16.4.2 Editing a Configuration BB ....................................................................207
16.5 Component BBs .............................................................................................208
16.5.1 Adding a Component BB ......................................................................209
16.5.1.1 Adding a Component BB: IP Type ..............................................209
16.5.1.2 Adding a Component BB: E-mail Type ........................................210
16.5.2 Editing a Component BB ......................................................................211
Chapter 17
System > Administrators..................................................................................... 212
17.1 Introduction to Administrators ........................................................................212
17.1.1 Administrator Types ..............................................................................212
17.1.1.1 “Root” Administrator ....................................................................212
17.1.1.2 “Super” Administrators ................................................................213
17.1.1.3 “Normal” Administrators ..............................................................213
17.1.1.4 “Custom” Administrators .............................................................213
17.2 Configuring Administrators .............................................................................213
17.3 Creating an Administrator Account ................................................................214
17.3.1 Administrator Details .............................................................................214
17.3.2 Administrator Permissions ....................................................................216

Vantage CNM User’s Guide
13 Table of Contents
Chapter 18
Other System Screens......................................................................................... 218
18.1 Status .............................................................................................................218
18.2 Vantage Upgrade ...........................................................................................219
18.2.1 Upgrade Procedure ..............................................................................219
18.2.2 Version Format .....................................................................................221
18.3 License Management .....................................................................................222
18.3.1 License Upgrade ...................................................................................222
18.4 System >Preferences .....................................................................................223
18.4.1 General Vantage Preferences ..............................................................223
18.4.2 User Access ..........................................................................................224
18.4.3 Servers .................................................................................................225
18.4.3.1 Vantage Server Public IP Address ..............................................228
18.4.4 Notifications ..........................................................................................229
18.4.5 Vantage Permissions: User Group .......................................................230
18.4.5.1 Add User Group ..........................................................................230
18.5 System Maintenance ......................................................................................232
18.5.1 System Maintenance Management ......................................................232
18.5.2 Back Up System Maintenance ..............................................................232
18.5.3 Restore System Maintenance ...............................................................233
18.6 Address Book .................................................................................................234
18.6.1 Address Book Add/Edit .........................................................................235
18.7 Certificate Management Overview .................................................................236
18.7.1 Advantages of Certificates ....................................................................237
18.7.2 Current Certification Information ...........................................................237
18.7.3 Create a Certificate ...............................................................................239
18.7.4 Importing Certificates ............................................................................239
18.8 Vantage Logs .................................................................................................240
18.8.1 CNM Server ..........................................................................................240
18.8.2 Vantage Logging Options .....................................................................241
18.9 About Vantage ................................................................................................242
Chapter 19
Monitor > Alarms.................................................................................................. 244
19.1 Alarms ............................................................................................................244
19.1.1 Alarm Types ..........................................................................................244
19.1.2 Alarm Classifications ............................................................................244
19.1.3 Alarm States .........................................................................................245
19.1.4 Current Alarms Screen .........................................................................245
19.1.5 Historical Alarms ...................................................................................247

Vantage CNM User’s Guide
Table of Contents 14
Chapter 20
Other Monitor Screens ........................................................................................ 250
20.1 Firmware Upgrade Report ..............................................................................250
20.2 Status Monitor ................................................................................................250
20.3 VPN Editor .....................................................................................................251
20.3.1 Graphical VPN Tunnel Creation ...........................................................251
20.3.2 Graphical Tunnel Depictions .................................................................253
20.3.3 Map .......................................................................................................254
Chapter 21
Introduction to Reports ....................................................................................... 256
21.1 Bandwidth Reports .........................................................................................257
21.2 Service Reports ..............................................................................................257
21.3 Web Filter Reports .........................................................................................257
21.4 Attack Reports ................................................................................................258
21.5 Authentication Reports ...................................................................................258
21.6 Log Viewer Reports ........................................................................................258
21.7 System Reports ..............................................................................................259
21.8 Reports ...........................................................................................................259
Chapter 22
Bandwidth Reports .............................................................................................. 262
22.1 Introduction ....................................................................................................262
22.1.1 Bandwidth Summary Settings ...............................................................265
22.2 Bandwidth Monitoring .....................................................................................266
22.3 Bandwidth Top Users .....................................................................................266
22.3.1 Bandwidth Top Users Settings ..............................................................268
Chapter 23
Service Reports .................................................................................................... 270
23.1 Service Monitor ..............................................................................................270
23.2 Pre-defined and Custom Services .................................................................270
23.2.1 Creating a Custom Service ...................................................................271
23.3 Configuring Service Settings ..........................................................................272
23.4 Service Summary Screens .............................................................................273
23.4.1 All Services Summary ...........................................................................274
23.4.2 Service Summary Settings ...................................................................275
23.4.3 Web Services Summary .......................................................................275
23.4.4 FTP Services Summary ........................................................................276
23.4.5 Mail Services Summary ........................................................................277
23.4.6 VPN Services Summary .......................................................................279
23.4.7 Custom Services Summary ..................................................................279
23.5 Service Top Sites ...........................................................................................281

Vantage CNM User’s Guide
15 Table of Contents
23.5.1 All Services Top Sites ...........................................................................281
23.5.2 Top Site Service Settings ......................................................................282
23.5.3 Web Service Top Sites ..........................................................................283
23.5.4 FTP Service Top Sites ..........................................................................284
23.5.5 Mail Service Top Sites ..........................................................................286
23.5.6 VPN Traffic Top Sites ............................................................................287
23.5.7 Custom Service Top Sites .....................................................................288
23.6 Top Users of Services ....................................................................................289
23.6.1 Top Users of All Services ......................................................................290
23.6.2 Top Site Service Settings ......................................................................291
23.6.3 Top Users of Web Services ..................................................................292
23.6.4 Top Users of FTP Services ...................................................................293
23.6.5 Top Users of Mail Services ...................................................................294
23.6.6 Top Users of VPN Tunnels ...................................................................296
23.6.7 Top Users of Custom Services .............................................................297
Chapter 24
Web Filter .............................................................................................................. 300
24.1 Web Filter Summary ......................................................................................300
24.2 Web Filter Top Sites .......................................................................................302
24.3 Web Filter Top Users ......................................................................................303
24.4 Web Filter By User .........................................................................................304
Chapter 25
Attack Reports...................................................................................................... 306
25.1 Attack Summary .............................................................................................306
25.2 Attack Categories ...........................................................................................307
25.2.1 Attack Category Settings ......................................................................309
25.3 Source of Attacks ...........................................................................................309
25.3.1 Attack Source Settings .........................................................................311
25.4 Attack Errors and Exceptions .........................................................................311
Chapter 26
Authentication ...................................................................................................... 314
26.1 Successful Logins ..........................................................................................314
26.2 Failed Logins ..................................................................................................315
Chapter 27
Log Viewer ............................................................................................................ 316
27.1 Log Monitor ....................................................................................................316
27.2 Log Search ....................................................................................................319

Vantage CNM User’s Guide
Table of Contents 16
Chapter 28
Report System Screens....................................................................................... 320
28.1 General Configuration ....................................................................................320
28.2 Schedule Reports ...........................................................................................321
28.2.1 Schedule Daily Report ..........................................................................322
28.2.2 Schedule Weekly Report ......................................................................324
28.3 CSV Import .....................................................................................................326
28.4 About Reports ................................................................................................326
Chapter 29
Report.................................................................................................................... 328
29.1 Daily Report ...................................................................................................329
29.2 Over Time Report ...........................................................................................331
Appendix A
FTP Server (WFTPD) Setup Example ................................................................. 334
Installing WFTPD ................................................................................................... 334
Running WFTPD .................................................................................................... 337
WFTPD main screen.............................................................................................. 337
Appendix B
Configuring the Kiwi Syslog Daemon ................................................................ 340
Installing the Kiwi Syslog Daemon ......................................................................... 340
Importing the Syslog Configuration File ................................................................. 341
Starting the Telnet Service .................................................................................... 343
Setting Up the Syslog Server in Vantage ............................................................... 344
Appendix C
FTP and syslog Server Overview ....................................................................... 346
Introduction ............................................................................................................ 346
Appendix D
Java Console Debug Messages.......................................................................... 348
Introduction ............................................................................................................ 348
Appendix E
IP Subnetting ........................................................................................................ 352
IP Addressing......................................................................................................... 352
IP Classes .............................................................................................................. 352
Subnet Masks ........................................................................................................ 353
Subnetting .............................................................................................................. 353

Vantage CNM User’s Guide
17 Table of Contents
Example: Two Subnets .......................................................................................... 354
Example: Four Subnets.......................................................................................... 356
Example Eight Subnets.......................................................................................... 357
Subnetting With Class A and Class B Networks. ................................................... 358
Appendix F
Setting up Your Computer’s IP Address............................................................ 360
Windows 95/98/Me................................................................................................. 360
Installing Components............................................................................................ 361
Configuring............................................................................................................. 362
Verifying Settings ................................................................................................... 363
Windows 2000/NT/XP ............................................................................................ 363
Verifying Settings ................................................................................................... 367
Macintosh OS 8/9................................................................................................... 367
Verifying Settings ................................................................................................... 369
Macintosh OS X ..................................................................................................... 369
Verifying Settings ................................................................................................... 370
Appendix G
Virtual Circuit Topology ...................................................................................... 372
Introduction ............................................................................................................ 372
Appendix H
Wireless LAN and IEEE 802.11 ........................................................................... 374
Benefits of a Wireless LAN .................................................................................... 374
IEEE 802.11 ........................................................................................................... 374
Ad-hoc Wireless LAN Configuration....................................................................... 375
Infrastructure Wireless LAN Configuration............................................................. 375
Appendix I
Wireless LAN With IEEE 802.1x .......................................................................... 378
Security Flaws with IEEE 802.11 ........................................................................... 378
Deployment Issues with IEEE 802.11 .................................................................... 378
IEEE 802.1x ........................................................................................................... 378
Advantages of the IEEE 802.1x ............................................................................. 378
RADIUS Server Authentication Sequence....................................................... 379
Appendix J
Types of EAP Authentication.............................................................................. 380
Introduction ............................................................................................................ 380
EAP-MD5 (Message-Digest Algorithm 5)............................................................... 380
EAP-TLS (Transport Layer Security)...................................................................... 380

Vantage CNM User’s Guide
Table of Contents 18
EAP-TTLS (Tunneled Transport Layer Service) .................................................... 380
PEAP (Protected EAP)........................................................................................... 381
LEAP ...................................................................................................................... 381
Appendix K
Log Descriptions.................................................................................................. 382
Introduction ............................................................................................................ 382
Appendix L
Open Software Announcements......................................................................... 398
Notice ..................................................................................................................... 398
Copyright (C) 1999-2001 Intalio, Inc. All Rights Reserved.................................... 398
Common Public License Version 1.0 ..................................................................... 399
Cryptix General License......................................................................................... 403
TECHNOLOGY LICENSE FROM SUN MICROSYSTEMS, INC. TO DOUG LEA. 404
JAVA Software Technologies.................................................................................. 405
Apache License...................................................................................................... 407
Copyright (c) 2002, 2003 Gargoyle Software Inc. All rights reserved. ................... 412
GNU LESSER GENERAL PUBLIC LICENSE ....................................................... 413
GNU GENERAL PUBLIC LICENSE....................................................................... 420
End-User License Agreement for Vantage CNM.................................................... 425

Vantage CNM User’s Guide
19 Table of Contents