Watchguard Firebox X2500, Firebox X1250E, Firebox X50, Firebox X500, Firebox X5000 Install Manual

WatchGuard

®

Firebox™ System
Install Guide

Firebox System 4.6

ii

Disclaimer

Information in this guide is subject to change without notice. Companies, names, and data used in
examples herein are fictitious unless otherwise noted. No part of this guide may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the
express written permission of WatchGuard Technologies, Inc.

Copyright and Patent Information

Copyright© 1998 - 2001 WatchGuard Technologies, Inc. All rights reserved.
WatchGuard, Firebox, LiveSecurity, and SpamScreen are either registered trademarks or

trademarks of WatchGuard Technologies, Inc. in the United States and other countries. This product
is covered by one or more pending patent applications.
Red Hat® is a registered trademark of Red Hat, Inc. This product is not a product of Red Hat, Inc.
and is not endorsed by Red Hat, Inc. This is a product of WatchGuard and we have no relationship
with Red Hat, Inc.
Adobe, Acrobat, the Acrobat logo, and PostScript are trademarks of Adobe Systems Incorporated.

© 1999 BackWeb Technologies, Inc. All rights reserved. BackWeb is a registered trademark of
BackWeb Technologies, Inc.
CyberNOT, CyberNOT List, CyberYES, and CyberYES List are trademarks of Learning Company
Properties Inc.
© Hi/fn, Inc. 1993, including one or more U.S. Patents: 4701745, 5016009, 5126739, and
5146221 and other patents pending.

© 1995-1998 Eric Young (eay@cryptsoft). All rights reserved.
© 1998-1999 The OpenSSL Project. All rights reserved.
Java and all Java-based marks are trademarks or registered trademarks of Sun Microsystems, Inc.
in the United States and other countries.
Microsoft®, Internet Explorer®, Windows® 95, Windows® 98, Windows NT® and Windows®
2000 are either registered trademarks or trademarks of Microsoft Corporation in the United States
and/or other countries.
Netscape and Netscape Navigator are registered trademarks of Netscape Communications
Corporation in the United States and other countries.
RC2 Symmetric Block Cipher, RC4 Symmetric Stream Cipher, RC5 Symmetric Block Cipher,
BSAFE, TIPEM, RSA Public Key Cryptosystem, MD, MD2, MD4, and MD5 are either trademarks
or registered trademarks of RSA Data Security, Inc. Certain materials herein are Copyright ©
1992-1999 RSA Data Security, Inc. All rights reserved.
RealNetworks, RealAudio, and RealVideo are either a registered trademark or trademark of
RealNetworks, Inc. in the United States and/or other countries.
VPCom™ Copyright © 1997-1999 Ashley Laurent, Inc. All rights reserved.
All other trademarks and tradenames are the property of their respective owners.
Printed in the United States of America.
DocVer: WatchGuard Firebox System 4.6 Install Guide - 4.6.1
PartNum: 1200019

Install Guide iii

Declaration of Conformity

WatchGuard Technologies, Inc.
505 Fifth Avenue South
Suite 500
Seattle WA 98104-3892

Declares the CE-marked product:

FCC Certification

This device has been tested and found to comply with limits for a Class A digital device, pur­suant to Part 15 of the FCC Rules. Operation is subject to the following two conditions:

1 This device may not cause harmful interference.

2 This device must accept any interference received, including interference that

may cause undesired operation.

CE Notice

The official CE symbol indicates compliance of this WatchGuard Technologies, Inc. product to
the EMC directive of the European Community. The CE symbol found here or elsewhere indi-

cates that this WatchGuard product meets or exceeds the following standards:

Product
Models:

Firebox family of appliances

Complies with: 73/23/EEC Low Voltage Directive 89/336/EEC

Electromagnetic Compatibility Directive

Compliance
Standards:

EN60950:1992Electrical Safety A1:1993, A2:1993,

A3:1995, A4:1997, A11:1997

EN55022,Clas
s A

RF Emissions Information Technology

EN50082-1 EMC Immunity Standard

EN60950:1992 Electrical Safety A1:1993, A2:1993, A3:1995, A4:1997,

A11:1997

EN55022,Class A RF Emissions Information Technology

EN50082-1 EMC Immunity Standard

iv

CSA Statement

This Class A digital apparatus meets all requirements of the Canadian Interference-Causing
Equipment Regulations.

Cet appareil numerique de la classe A respecte toutes les exigences du Reglement sur
le materiel broulleur du Canada.

Install Guide 1

WatchGuard Firebox System
Install Guide

The WatchGuard Firebox System is an interdependent system of software. The
hardware elements of the Firebox system are:

• Firebox–a security appliance for implementing security policies and
protection.

• Management Station–the computer that administers the Firebox. This
computer runs the Control Center software, which provides access to
WatchGuard Firebox System applications and displays a real-time monitor of
traffic through the firewall, connection status, tunnel status, and recent log
activity.

• Event Processor–the computer that receives and stores log messages and
issues notifications. (The Management Station can also serve as the Event
Processor.)

This guide walks you through the installation process step-by-step to ensure a
smooth and easy installation.

Selecting Computers

One of the first tasks before installation is determining which computers to use for
different functions in the security system:

• Choose the computer to use for the Management Station.
The Management Station operating system platform must be Windows 98,
Windows NT, or Windows 2000. (For more information on system
requirements, see the next page.)

• Choose the computer to use for the primary event processor, also known as the
log host (can be the same one as the Management Station). You can set up
multiple event processors for redundancy.