Since Policy Manager always saves changes before uploading them to the Firebox, it's simple to keep a version history and revert to a previous configuration if some changes didn't work as expected. You make as many changes as you want, but deploy them when you need, while in the WebUI every change ist 'live'. The Policy Manager allows you to edit the configuration of your firewall 'offline'. But when it comes to 'real' management, the 'heavy lifting', experienced WatchGuard users will use the tools in WSM, specially the Policy Manager and Firebox System Manager (FSM). This is ok to check some basic statistics, make some smaller configuration changes. If you don't know what WSM is, you are probably managing your firewall via WEB UI. The "WAN Interface" = whatever interface you are using to connect to the internet - it would also be the one VPN users are connecting to, so that is the port, that you would be interested to see it's statistics. The version of WSM should be the same or newer than the firmware of the firewall you are managing.
#WATCHGUARD DOWNLOAD SSL VPN CLIENT FOR FREE#
WSM = WatchGuard System Manager - a set of Windows tools and server components for firewall management that you can download for free from WatchGuard's download pages. When you try to limit the connectivity just to a few ports, dropping SMB and using SFTP is also useful - even when your connection is a faster one. Most SFTP servers will also allow you to integrate AV checks for files. On slow connections I prefer to use SFTP - it will log all file activity and it is a much more efficient protocol than SMB.
There you can select what statistics you want to watch, so you can have side by side graphs of CPU and throughput on the SSL VPN firewall rule.Īnd one additional hint: SMB is SLOW - and it is not really a safe protocol, since you have no logs about who accessed what files. If you are using WSM, run the performance console in Firebox System Manager. Have you checked the performance statistics on your WAN interface? Still in the end, you can not expect more performance than your WAN will allow. You just need to download and send the script file and your users are ready to go with a few clicks. The FB will even generate the required script files to automate the setup of native clients. While SSL VPN is the easiest to set up, today IKEv2 is the recommended choice, as it takes advantage of hardware acceleration.Īctually IKEv2 isn't difficult to set up.
0 kommentar(er)
