Summary of the content on the page No. 1
GB-Ware
S OFT W ARE
Firewall
powered by
GNAT Box
System Software
Product Guide
GBWA200501-01
Summary of the content on the page No. 2
Copyright © 1996-2004, Global Technology Associates, Incorporated (GTA). All rights reserved. Except as permitted under copyright law, no part of this manual may be reproduced or distributed in any form or by any means without the prior permission of Global Technology Associates, Incorporated. Technical Support GTA includes 30 days “up and running” installation support from the date of purchase. See GTA’s web site for more information. GTA’s direct customers in the USA should call or email GT
Summary of the content on the page No. 3
Table of Contents iii Contents 1 INTRODUCTION ............................................................................................... 1 About GTA Firewalls ....................................................................................... 1 About GB-Ware ............................................................................................... 1 Features ..................................................................................................... 1 Additional Software
Summary of the content on the page No. 4
iv GB-Ware Firewall Product Guide Re-configuring Your Computer ................................................................ 28 Accessing the Firewall ............................................................................ 28 Configuration Using GBAdmin .................................................................... 29 Entering Your Network Information ......................................................... 30 Re-configuring Your Computer .............................................
Summary of the content on the page No. 5
1 - Introduction 1 1 Introduction About GTA Firewalls Global Technology Associates, Inc. (GTA) has been designing and building Internet firewalls since 1994. In 1996, GTA developed the first truly ® affordable commercial-grade firewall, the GNAT Box . Since then, ICSA- certified GNAT Box System Software has become the engine that drives all GTA hardware appliance and software firewall systems. About GB-Ware GB-Ware is a complete software firewall system that runs from a Compact Flash module or ha
Summary of the content on the page No. 6
2 GB-Ware Firewall Product Guide • Dynamic DNS • DNS proxy • Transparent and traditional web proxy with script blocking • DNS server (optional on 10 user version) • DHCP server • Web and GBAdmin user interfaces for remote management • SNMP (read-only) • Traffic shaping (bandwidth limiting) • NTP (network time protocol) server Additional Software Products • GTA Reporting Suite™ (firewall log reporting) • GB-Commander™ (firewall management) Optional Features • VPN hardware acceleration • Additional m
Summary of the content on the page No. 7
1 - Introduction 3 Software Specifications Specification GB-Ware 10 users GB-Ware unrestricted users Concurrent connec- 1,000 128,000 tions (standard) Concurrent out- 10 Unrestricted bound users (stan- dard) Network interfaces 2 3 (standard) User authentication 50 750 Address objects 50 600 Aliases 5 300 Pass-through hosts 10 300 Filters, outbound 75 400 & remote access objects Traffic shaping 5 50 objects Static outbound 25 300 maps Static routes 10 300 Time groups 75 100 Tunnels 25 300 Protoc
Summary of the content on the page No. 8
4 GB-Ware Firewall Product Guide configuration with full network speeds on all interfaces. The best possible performance can be obtained by using a Pentium class or higher CPU with PCI network cards. Network performance bottlenecks usually occur at the connection to the Internet when using DSL or T1 class connectivity. GB-Ware with 10 Mbps Ethernet cards easily provides enough throughput for network connectivity of up to T1 speeds (1.5 Mbps). However, when the WAN connectivity is a T3 or f
Summary of the content on the page No. 9
1 - Introduction 5 Optional Components • 1-18 additional network cards (if using the Multi-Interface Option) • Async modem (PPP connections or pager only) • ISDN TA with RS-232 interface (PPP connections only) • Cable modem • Serial ports for COM 1-4 (1645x/1655x UARTs only) Note GTA recommends installing only the GB-Ware required or GB-Ware optional components in the system. Devices such as SCSI controllers and sound cards remain unused and may decrease performance. Memory Recommendations Ad
Summary of the content on the page No. 10
6 GB-Ware Firewall Product Guide Modem/ISDN TA Hardware GTA recommends configuring the modem or ISDN TA on another system before installing it on GB-Ware. Most modems allow the storage of a user configuration and the recall of this configuration using a specific command (e.g. ATZ). It is usually easiest to configure the modem before installa- tion, and then to recall that configuration and set the modem with a few commands. Note The default configuration for most modems will generally work with G
Summary of the content on the page No. 11
1 - Introduction 7 Other avenues for assistance are available through authorized GTA Channel Partners, the GNAT Box Mailing List, or the GTA web site (www.gta.com). Upgrades Once registered, you can view available upgrades in the GTA online support center section of the GTA web site (www.gta.com/support/center/login/). Click on the serial number of your registered product to see if an upgrade is available for that specific unit. Click on the DOWNLOADS link to view all available software vers
Summary of the content on the page No. 12
8 GB-Ware Firewall Product Guide Additional Documentation For additional instructions on installation, registration and setup of a GTA product, see applicable Quick Guides, FAQs or technical papers. For optional features, see the appropriate feature guide. Documentation is included on installation CDs, and is available for download from the GTA web site. Note Check the GTA web site for the latest PDFs and other documentation. These manuals and other documentation can also be found on the GT
Summary of the content on the page No. 13
2 – Installation 9 2 Installation Registration To get technical support and software updates, you must register your GTA firewall. 1) To register, go to www.gta.com. Click on SUPPORT and then the SUPPORT CENTER link to visit https://gta.com/support/center/login/. 2) If you do not have an online support account, click on the CREATE AN ACCOUNT NOW link and enter your information. Once you have completed the form, click the SUBMIT button to save the profile. 3) Enter your user ID and passwor
Summary of the content on the page No. 14
10 GB-Ware Firewall Product Guide Installing GB-Ware on PC Hardware GB-Ware software must be installed on x86 (Intel-compatible) computer hardware before you can use your firewall. The GB-Ware installation CD will install the firewall software onto your computer hardware. Requirements GB-Ware can be installed either on a bootable Compact Flash disk or hard drive on the intended firewall, or installed onto a Compact Flash disk using a USB reader/writer on a proxy computer, and then later inserte
Summary of the content on the page No. 15
2 – Installation 11 Setup for GB-Ware Installation The computer (either the intended firewall or an installation proxy computer) must be modified to boot using a CD-ROM drive. This enables the GNAT Box System Software installation CD to activate and install the GB-Ware firewall software when powering on the PC. Caution If installing GB-Ware using a proxy computer, temporarily disconnect other (non-GB-Ware) writable drives to prevent accidental erasure during firewall installation. GB-Ware will
Summary of the content on the page No. 16
12 GB-Ware Firewall Product Guide Caution Installing GB-Ware on a hard drive will erase its contents and replace them with GB-Ware. If you wish to keep the data on a hard drive, do not install GB-Ware on it; instead, install GB-Ware on a different hard drive. You may also wish to temporarily disconnect other (non- GB-Ware) hard drives to prevent accidental erasure during firewall installation. 2. Power on the computer. Insert the GNAT Box System installation CD into the system’s CD-ROM driv
Summary of the content on the page No. 17
2 – Installation 13 GNAT Box System Software Licensing Agreement Selecting a GB-Ware Runtime The GNAT Box System Software Runtime Installer screen will appear. If you are upgrading, verify that your configuration has been backed up to another location. Any information currently on the disk will be over-written during the installation. Select the desired GB-Ware runtime (executable) version from the list of products in step 2. Use the SPACE BAR to cycle through available options, or use the
Summary of the content on the page No. 18
14 GB-Ware Firewall Product Guide The serial version of the GB-Ware runtime installs factory default settings; a serial or temporary peer Ethernet connection can be used to change these settings. If you prefer to perform initial firewall configuration over the web or with GBAdmin, choose this option. The selection list also includes the Erase Disk function. This allows the user to clear all the disk data from the selected disk. Caution Using the ERASE DISK choice will erase a drive’s contents.
Summary of the content on the page No. 19
2 – Installation 15 Note USB pen drives may appear, but should not be selected for installation as they are not IDE-bootable devices. CD-ROM or DVD- ROM drives will not be displayed by the GB-Ware system installation process, as they are not writable discs. Other drives will not display. Device Designations Designation Description Device Geometry* da0 USB storage device [978/4/32] (Generic storage device) ad0 IDE storage device [978/4/32] (with device manufac- turer identification) *If ther
Summary of the content on the page No. 20
16 GB-Ware Firewall Product Guide Disk Re-formatting Warning It may take several minutes for the runtime to install. A pipe indicator (|) will be animated while the system installs. A message similar to the following will display when the system installation is complete: Loading runtime image for – succeeded Initializing disklabel for da0 – succeeded Initializing runtime slice 2 – succeeded Initializing runtime slice 1 – succeeded Completing Installation Your Compact Flash di
