Network Security Professor Professor Dr. Adeel Akram

Firewalls: A Practical Guide

Outline ► ICSA Labs ► ICSA Certified Firewalls  Kerio Winroute Firewall  Astaro Security Gateway  WatchGuard X1000 Firewall ► CASE Study  Kerio Winroute Firewall 6

About ICSA Labs ► For over a decade, ICSA Labs, an independent division of Cybertrust, Inc., has been the security industry's central authority for research, intelligence, and certification testing of products. ► ICSA Labs sets standards for information security products and certifies over 95% of the installed base of anti-virus, firewall, IPSec VPN, cryptography, SSL VPN, network IPS, anti-spyware and PC firewall products commonly deployed in the world today.

ICSA Labs Certification ► ICSA Labs, formerly known as the International Computer Security Association, manages and sponsors security consortia that provide a forum for intelligence sharing among the leading vendors of security products. ► In addition, ICSA Labs publishes surveys, security industry studies and buyers' guides for computer security products

ICSA Labs Certification ► The goal for ICSA Labs Certification is to enhance and improve security implementations of network and Internet computing, which will improve commercial security and its use of appropriate security products, services, policies, techniques, and procedures. ► Certification enforces overall confidence in computing and drives enhanced security measures while at the same time, decreasing the intrusion of security measures in everyday life. ► Certification also promotes user acceptance of increased security while improving the ease of use, and the invisible, automatic, and seamless integration of security technology in everyday computing.

ICSA Labs Test Areas ► Anti-Spyware ► Antivirus ► Cryptography ► FIPS Cryptographic Module Testing ► Firewalls ► Intrusion Detection ► IPsec ► Network Intrusion Prevention ► PC Firewalls ► PIV / FIPS 201 ► Premier Services ► SSL-TLS ► Wireless ► Wireless

Prominent ICSA Certified Firewalls ► Kerio Winroute Firewall for Windows Kerio ► Astaro Security Linux Astaro ► WatchGuard Firebox System Family WatchGuard ► Juniper Networks NetScreen Firewall Family Juniper Networks Juniper Networks ► Microsoft Internet Security and Acceleration Server Microsoft ► CISCO PIX Firewall Family CISCO ► Check Point SecurePlatform NG Check Point Check Point ► Novell BorderManager Novell

KERIO Winroute Firewall ► Corporate & enterprise network firewall: ► Kerio WinRoute Firewall™ is a corporate gateway firewall for small and medium-sized businesses. ► Equipped with VPN server, optional embedded McAfee Anti-Virus, integrated customizable ISS Orange Web Filter, and user-specific Internet access management, Kerio WinRoute Firewall provides a multi-layer architecture for protecting networks, servers and users. ►

ASTARO Security Gateway ► ► Astaro Appliances Astaro Software Astaro Report Manager Configuration Manager Astaro Secure Client Astaro Appliances Astaro Software Astaro Report Manager Configuration Manager Astaro Secure Client

WATCHGUARD Firebox Family ► Firebox Soho ► Firebox Edge ► Firebox Core ► Firebox Peak X-Series }

CASE STUDY: KWF 6 ► Kerio Winroute Firewall  Comes as an installer package ► ~ 22 MB (kerio-kwf win.exe)  Installs on all current versions of Windows

KWF6: Installation ► ► System Requirements   CPU Intel Pentium II or compatible; 300 MHz   128 MB RAM   2 network interfaces   50 MB disc space free for the installation   Free memory for logs (depends on traffic load and selected logging level)   The product supports for the following operating systems:   Windows 2000   Windows XP   Windows Server 2003   Note: The Client for Microsoft Networks component must be installed for all supported operating systems, otherwise WinRoute will not be available as a service and NTML authentication will not function. The component is included in installation packages of all supported operating systems.

Installation and Basic Configuration ► ► Launch the installation program  kerio-kwf win.exe

Select Components

► ► WinRoute Firewall Engine — core of the application ► ► WinRoute Engine Monitor — utility for WinRoute Firewall Engine control and monitoring ► ► its status (icon in the system’s notification area) ► ► VPN Support — proprietary VPN solution developed by Kerio Technologies, ► ► Kerio Administration Console — the Kerio Administration Console application (universal console for all server applications of Kerio Technologies)

► ► Restart the machine when the installation has completed. This will install the WinRoute low-level driver into the system kernel. ► ► WinRoute Engine will be automatically launched after restart. ► ► The engine runs as a service. ► ► The WinRoute Engine Monitor will be launched after a user login. This utility monitors the Engine status and is used to start or stop the engine. ► ► WinRoute Engine Monitor icon is displayed in the system’s notification area (system tray).

Conflicting System Services ► ► Internet Connection Sharing and Internet Connection Firewall ► ► Universal Plug and Play Device Host and SSDP Discovery Service

Admin Console Settings

Remote Access to Admin Console

Restart After Install ► Engine Monitor:  Appears as system tray icon  Right Clicking shows context Menu Menu

First Start Setup

Configuration Wizard

Internet thru Ethernet

Internet thru Dialup

Allowed Internet Services to Clients

Local Services Publishing

Enable NAT

Lets go to the Actual Process ► Kerio Installed on Lab PCs

References ► Select Kerio Control (Firewall Software / Appliance) ► ► ► ► ►

Kerio Control Packages Packages Kerio Control - Windows (32-bit) Download (USA)Download (USA) | Download (Europe)Download (Europe) Kerio Control - Windows (64-bit) Download (USA)Download (USA) | Download (Europe)Download (Europe) Kerio Control Parallels Appliance Download (USA)Download (USA) | Download (Europe)Download (Europe) Kerio Control Software Appliance Download (USA)Download (USA) | Download (Europe)Download (Europe) Kerio Control VMware Appliance (VMX) Download (USA)Download (USA) | Download (Europe)Download (Europe)

Kerio Control Documentation Documentation (for version 7.1.0) Administrator Guide - HTML (English) Download (USA)Download (USA) | Download (Europe)Download (Europe) Administrator Guide - PDF (English) Download (USA)Download (USA) | Download (Europe)Download (Europe) Box Installation Guide - PDF (multilingual) Download (USA)Download (USA) | Download (Europe)Download (Europe) Kerio Control Release Notes - HTML (English) Download (USA)Download (USA) | Download (Europe)Download (Europe) Kerio Control Release Notes - PDF (English) Download (USA)Download (USA) | Download (Europe)Download (Europe) Step-by-Step Guide - HTML (English) Download (USA)Download (USA) | Download (Europe)Download (Europe) Step-by-Step Guide - PDF (English) Download (USA)Download (USA) | Download (Europe)Download (Europe) User Guide - HTML (English) Download (USA)Download (USA) | Download (Europe)Download (Europe) User Guide - PDF (English) Download (USA)Download (USA) | Download (Europe)Download (Europe)

Questions ??????????????? ??????????????? ????