【免费】Sophos防火墙管理手册资源-CSDN文库

网络安全

需积分: 0 49 浏览量 2023-05-03 15:45:18 上传评论 1 收藏 8.46MB PDF 举报

资源推荐

资源详情

资源评论

Sophos XG Firewall v 15.01.0 – Release Notes

Sophos XG Firewall

Web Interface Reference

and Admin Guide v17

For Sophos Customers

Document Date: October 2017

Sophos XG Firewall | Contents | ii

Contents

Introduction............................................................................................................... 7

Flavors...................................................................................................................................................................7

Administrative Interfaces......................................................................................................................................7

Administrative Access.......................................................................................................................................... 7

Using Admin Console............................................................................................... 8

Supported Browsers............................................................................................................................................ 10

Menus.................................................................................................................................................................. 10

Pages....................................................................................................................................................................11

List Navigation Controls.................................................................................................................................... 11

Monitor and Analyze..............................................................................................11

Control Center.....................................................................................................................................................11

Current Activities................................................................................................................................................18

Live Users............................................................................................................................................... 18

Live Connections.................................................................................................................................... 19

Live Connections IPv6........................................................................................................................... 21

View Live Connection Details............................................................................................................... 23

IPsec Connections...................................................................................................................................27

Remote Users..........................................................................................................................................27

Diagnostics.......................................................................................................................................................... 28

Tools........................................................................................................................................................ 28

System Graphs........................................................................................................................................ 31

URL Category Lookup........................................................................................................................... 37

Packet Capture........................................................................................................................................ 37

Connection List.......................................................................................................................................43

Support Access........................................................................................................................................47

System.......................................................................................................................48

Profiles.................................................................................................................................................................48

Schedule.................................................................................................................................................. 48

Access Time............................................................................................................................................50

Surfing Quotas........................................................................................................................................ 53

Network Traffic Quota........................................................................................................................... 56

Network Address Translation................................................................................................................. 60

Device Access.........................................................................................................................................61

Hosts and Services..............................................................................................................................................63

IP Host.................................................................................................................................................... 64

IP Host Group.........................................................................................................................................65

MAC Host...............................................................................................................................................66

FQDN Host............................................................................................................................................. 67

FQDN Host Group................................................................................................................................. 68

Country Group........................................................................................................................................ 68

Services................................................................................................................................................... 69

Service Group......................................................................................................................................... 70

Administration.....................................................................................................................................................71

Sophos XG Firewall | Contents | iii

Licensing................................................................................................................................................. 72

Device Access.........................................................................................................................................73

Admin Settings........................................................................................................................................76

Central Management............................................................................................................................... 79

Time.........................................................................................................................................................81

Notification Settings............................................................................................................................... 82

SNMP...................................................................................................................................................... 84

Netflow....................................................................................................................................................86

Messages................................................................................................................................................. 86

Certificates...........................................................................................................................................................86

Certificates...............................................................................................................................................86

Certificate Authorities.............................................................................................................................89

Certificate Revocation Lists................................................................................................................... 90

Backup & Firmware........................................................................................................................................... 90

Backup & Firmware............................................................................................................................... 91

API...........................................................................................................................................................92

Import Export..........................................................................................................................................94

Firmware................................................................................................................................................. 95

Pattern Updates....................................................................................................................................... 97

Configure..................................................................................................................99

Network...............................................................................................................................................................99

Interfaces................................................................................................................................................. 99

Zones..................................................................................................................................................... 128

WAN Link Manager............................................................................................................................. 130

DNS.......................................................................................................................................................136

DHCP.................................................................................................................................................... 141

IPv6 Router Advertisement.................................................................................................................. 147

Cellular WAN........................................................................................................................................151

IP Tunnels............................................................................................................................................. 153

Neighbors (ARP-NDP)......................................................................................................................... 155

Dynamic DNS.......................................................................................................................................158

Authentication................................................................................................................................................... 160

Servers...................................................................................................................................................161

Services................................................................................................................................................. 170

Groups................................................................................................................................................... 178

Users......................................................................................................................................................182

One-Time Password.............................................................................................................................. 189

Captive Portal........................................................................................................................................192

Guest Users........................................................................................................................................... 195

Clientless Users.....................................................................................................................................201

Guest User Settings.............................................................................................................................. 204

Client Downloads..................................................................................................................................209

STAS..................................................................................................................................................... 210

VPN...................................................................................................................................................................211

IPsec Connections................................................................................................................................. 212

SSL VPN (Remote Access)..................................................................................................................219

SSL VPN (Site to Site)........................................................................................................................ 221

CISCO

™

VPN Client............................................................................................................................ 224

L2TP (Remote Access).........................................................................................................................227

Clientless Access.................................................................................................................................. 231

Bookmarks.............................................................................................................................................231

Bookmark Groups.................................................................................................................................233

PPTP (Remote Access).........................................................................................................................233

IPsec Profiles....................................................................................................................................... 235

Sophos XG Firewall | Contents | iv

SSL VPN...............................................................................................................................................239

L2TP......................................................................................................................................................241

Routing.............................................................................................................................................................. 242

Static Routing........................................................................................................................................243

Policy Routing...................................................................................................................................... 246

Gateways............................................................................................................................................... 248

BGP....................................................................................................................................................... 250

OSPF..................................................................................................................................................... 251

Information............................................................................................................................................256

Upstream Proxy.................................................................................................................................... 269

Multicast (PIM-SIM)............................................................................................................................ 271

RIP.........................................................................................................................................................273

System Services................................................................................................................................................ 276

High Availability...................................................................................................................................277

Traffic Shaping Settings....................................................................................................................... 284

RED.......................................................................................................................................................286

Log Settings.......................................................................................................................................... 288

Data Anonymization............................................................................................................................. 294

Traffic Shaping......................................................................................................................................297

Services................................................................................................................................................. 301

Protect.................................................................................................................... 303

Firewall..............................................................................................................................................................303

User / Network Rule.............................................................................................................................306

Business Application Rule....................................................................................................................318

Intrusion Prevention..........................................................................................................................................374

DoS Attacks.......................................................................................................................................... 374

IPS Policies........................................................................................................................................... 374

Custom IPS Signatures......................................................................................................................... 378

DoS & Spoof Prevention......................................................................................................................380

Web....................................................................................................................................................................390

Policies.................................................................................................................................................. 390

User Activities...................................................................................................................................... 393

Categories..............................................................................................................................................394

URL Groups..........................................................................................................................................395

Exceptions............................................................................................................................................. 396

File Types..............................................................................................................................................397

Surfing Quotas...................................................................................................................................... 398

User Notifications................................................................................................................................. 401

Applications.......................................................................................................................................................401

Application List.................................................................................................................................... 401

Application Filter.................................................................................................................................. 402

Traffic Shaping Default........................................................................................................................ 405

Wireless............................................................................................................................................................. 405

Wireless Client List.............................................................................................................................. 405

Wireless Networks................................................................................................................................ 406

Access Point Overview.........................................................................................................................409

Access Point Groups.............................................................................................................................415

Mesh Networks..................................................................................................................................... 417

Hotspots.................................................................................................................................................419

Hotspot Voucher Definition..................................................................................................................428

Rogue AP Scan.....................................................................................................................................429

Wireless Settings...................................................................................................................................431

Hotspot Settings....................................................................................................................................432

Email................................................................................................................................................................. 433

Sophos XG Firewall | Contents | v

MTA Mode............................................................................................................................................434

Legacy Mode........................................................................................................................................ 461

Web Server........................................................................................................................................................488

Web Servers.......................................................................................................................................... 489

Protection Policies................................................................................................................................ 490

Authentication Policies......................................................................................................................... 494

Authentication Templates..................................................................................................................... 497

SlowHTTP Protection........................................................................................................................... 498

Advanced Threat...............................................................................................................................................499

Advanced Threat Protection................................................................................................................. 499

Sandstorm Activity............................................................................................................................... 500

Sandstorm Settings................................................................................................................................501

Synchronized Security.......................................................................................................................... 501

Appendix A - Logs................................................................................................503

Log Viewer........................................................................................................................................................503

View List of System Events.................................................................................................................505

View List of Web Filter Events........................................................................................................... 505

View List of Application Filter Events................................................................................................ 506

View List of Malware Events.............................................................................................................. 507

View List of Email Events................................................................................................................... 507

View List of Firewall Events............................................................................................................... 508

View List of IPS Events.......................................................................................................................509

View List of Authentication Events..................................................................................................... 510

View List of Admin Events..................................................................................................................511

View List of Web Server Protection (WAF) Events............................................................................ 512

View List of Advanced Threat Protection Events................................................................................512

View List of Security Heartbeat Events...............................................................................................513

Log ID Structure...............................................................................................................................................514

Log Type............................................................................................................................................... 514

Log Component.................................................................................................................................... 515

Log Subtype and Module Icons........................................................................................................... 517

Common Fields for all Logs............................................................................................................................ 519

System Logs......................................................................................................................................................520

Web Filter Logs................................................................................................................................................ 528

Module-specific Fields..........................................................................................................................528

Application Filter Logs.....................................................................................................................................531

Module-specific Fields..........................................................................................................................531

Malware Logs................................................................................................................................................... 532

Module-specific Fields..........................................................................................................................532

Email Logs........................................................................................................................................................533

Module-specific Fields..........................................................................................................................534

Firewall Logs.................................................................................................................................................... 535

Module-specific Fields..........................................................................................................................537

IPS Logs............................................................................................................................................................539

Module-specific Fields..........................................................................................................................539

Authentication Logs..........................................................................................................................................541

Module-specific Fields..........................................................................................................................541

Admin Logs...................................................................................................................................................... 542

Module-specific Fields..........................................................................................................................542

Sandstorm Logs................................................................................................................................................ 543

Web Server Protection (WAF) Logs................................................................................................................ 543

Advanced Threat Protection (ATP) Logs.........................................................................................................543

Security Heartbeat Logs................................................................................................................................... 543