QUICK INSTALLATION GUIDE SnapGear Network Gateway Security SG300 SG560 SG565 SG580 Desktop Appliance www.securecomputing.
DESK_BODY.fm Page 2 Thursday, June 14, 2007 8:29 AM Copyright ©2007 Secure Computing Corporation. All rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of Secure Computing Corporation. Secure Computing, SecureSupport, SnapGear, and Webwasher are trademarks of Secure Computing Corporation, registered in the U.S.
DESK_BODY.fm Page 3 Thursday, June 14, 2007 8:29 AM Document conventions Bullet points shown below indicate you must choose only one of the options: Option 1 Option 2 Italics indicate a file or directory (/docs); placeholder text, and also refer to other publications, such as the SnapGear Administration Guide.
DESK_BODY.fm Page 4 Thursday, June 14, 2007 8:29 AM Quick setup This guide walks you through the installation of your SG unit. Installing the SG unit into a well-planned network is quick and easy; however, network planning is outside the scope of this guide. Take some time to plan your network prior to installing your SG unit.
DESK_BODY.fm Page 5 Thursday, June 14, 2007 8:29 AM Step 1 — Unpack the SG unit In addition to this document, check that you have the following items included with your SG unit: Power cable Power adaptor SG CD Network cable Take a few minutes to get familiar with the SG unit. On the rear panel of the SG unit, there are network, serial, and possibly USB ports, an erase button, and a power inlet. The front panel of the SG unit contains activity LEDs (lights) that vary slightly between models.
DESK_BODY.fm Page 6 Thursday, June 14, 2007 8:29 AM Step 3 — Set up a single PC to connect to the SG unit The SG unit ships with initial network settings of: • LAN IP address: • LAN subnet mask: 192.168.0.1 255.255.255.0 The SG unit needs an IP address suitable for your LAN before it is connected. You can choose to use the SG unit's initial network settings as a basis for your LAN settings.
DESK_BODY.fm Page 7 Thursday, June 14, 2007 8:29 AM Note: If there is more than one existing network connection, select the one corresponding to the network interface card to which the SG unit is attached. c. Select Internet Protocol (TCP/IP) and click Properties. The Internet Protocol (TCP/IP) Properties dialog box is displayed. d. Select Use the following IP address and enter: • IP address: • Subnet mask: • Default gateway: e. 192.168.0.100 255.255.255.0 192.168.0.
DESK_BODY.fm Page 8 Thursday, June 14, 2007 8:29 AM Step 4 — Set up the SG unit's password and LAN connection settings a. Launch your Web browser and navigate to 192.168.0.1. Note: If you are unable to browse to the SG unit at 192.168.0.1, or the initial username and password are not accepted, press the erase button on the SG unit's rear panel twice within 3 seconds, 1 second apart. Wait 20 30 seconds, and then try browsing to 192.168.0.1 again.
DESK_BODY.fm Page 9 Thursday, June 14, 2007 8:29 AM c. A log in prompt is displayed. Enter the initial user name and password for the SG unit: • User name: • Password: d. root default Click OK. The SG Unit Password page appears for you to enter a new password. . e. Enter and confirm a new password for your SG unit. This is the password for the user root, the main administrative user account on the SG unit. It is important you choose a password hard for others to guess, and keep it safe. f.
DESK_BODY.fm Page 10 Thursday, June 14, 2007 8:29 AM g . The LAN page of the quick setup wizard appears. . h. Enter a Hostname to identify the SG unit. The name must begin with an alpha character. The hostname defaults to the model number. i.
DESK_BODY.fm Page 11 Thursday, June 14, 2007 8:29 AM j. Click Next. If you did not select Manual configuration, skip to step m on page 12. If you selected Manual configuration, the Manual LAN Configuration page appears. . k. Enter an IP address and Subnet Mask for the SG unit's LAN connection. Take note of the IP address and subnet mask; you will need them later on. l. To enable the SG unit's built-in DHCP server, enter a range of addresses in DHCP Server Address Range.
DESK_BODY.fm Page 12 Thursday, June 14, 2007 8:29 AM m. Click Next. The ISP Connection page appears. . n. o. Select an option for your Internet Port Configuration: If you are connecting using a cable modem, select Cable Modem. If you are connecting using a regular analog modem, select Modem. If you are connecting using an ADSL modem, select ADSL to attempt automatic detection of your ADSL connection type. If you have a direct connection to the Internet (e.g.
DESK_BODY.fm Page 13 Thursday, June 14, 2007 8:29 AM For all other desktop models, the Switch Configuration page appears. Go to Step 5 — Configure the switch on page 15. If you selected Skip, the next page that appears depends on the SnapGear model you are setting up. If you are setting up an SG300, the Confirm Settings page appears. Go to Step 6 — Confirm settings; connect the SG unit to your LAN on page 16. For all other desktop models, the Switch Configuration page appears.
DESK_BODY.fm Page 14 Thursday, June 14, 2007 8:29 AM q. Click Next. If you chose DHCP, the Confirm Settings page appears if you are setting up an SG300. Go to Step 6 — Confirm settings; connect the SG unit to your LAN on page 16. For all other desktop models, the Switch Configuration page appears. Go to Step 5 — Configure the switch on page 15. If you chose Manual Configuration, the ISP Connection page for manually configuring the WAN interface appears. . 14 r.
DESK_BODY.fm Page 15 Thursday, June 14, 2007 8:29 AM Step 5 — Configure the switch Note: This page will only display if you are setting up the SG560, SG565 or SG580. Otherwise, skip to Step 6 — Confirm settings; connect the SG unit to your LAN on page 16. By default, the SG unit's switch A behaves as a conventional switching hub. However, it may be configured so that each port behaves as if it were physically separate from the others. a. Select a configuration for the SG unit's switch: .
DESK_BODY.fm Page 16 Thursday, June 14, 2007 8:29 AM b. Otherwise, select 4 LAN Ports. Click Next. The confirm Settings page appears. Step 6 — Confirm settings; connect the SG unit to your LAN a. Review your configuration selections. . b. If you are satisfied with your settings, click Finish to activate the new configuration. Note: If you changed the SG unit's LAN connection settings, it may become uncontactable at this point.
DESK_BODY.fm Page 17 Thursday, June 14, 2007 8:29 AM c. Connect the SG unit to your LAN if you have not already done so: If you are setting up the SG300, connect PCs and/or your LAN hub directly to its LAN switch. If you are setting up the SG560, SG565 or SG580 and have configured its switch as 4 LAN Ports, connect PCs and/or your LAN hub directly to switch A.
DESK_BODY.fm Page 18 Thursday, June 14, 2007 8:29 AM Step 7a — Automatic LAN configuration using the SG DHCP server By selecting Manual Configuration for the SG unit's LAN connection, and supplying the DHCP Server Address Range, the SG unit's DHCP server is already set up and running. Each PC on your LAN must now be set up to automatically obtain network settings. 18 a. Click Start > (Settings >) Control Panel and double-click Network Connections.
DESK_BODY.fm Page 19 Thursday, June 14, 2007 8:29 AM Step 7b — Automatic LAN configuration using an existing DHCP server If you chose to have the Obtain LAN IP address from a DHCP server on LAN option, it is strongly recommended you add a lease to your existing DHCP server to reserve the IP address you chose for the SG unit's LAN connection. If you chose to set the SG unit's LAN connection settings using Manual configuration, remove this address from the pool of available addresses. a.
DESK_BODY.fm Page 20 Thursday, June 14, 2007 8:29 AM Step 7c — Manual LAN configuration a. Click Start> (Settings >) Control Panel and double-click Network Connections. If presented with multiple connections, right-click on Local Area Connection (or appropriate network connection) and select Properties. b. Select Internet Protocol (TCP/IP) and click Properties.
DESK_BODY.fm Page 21 Thursday, June 14, 2007 8:29 AM Step 8 — Register your SG unit Quick setup is now complete. Quick setup is all you need to do to get basic network connectivity to the Internet. Network devices on the LAN should now be able to access the Internet in accordance with the settings you have configured and provided all physical network connections are in place. You must register your SG unit in order to receive technical support. A current e-mail address is required to register your product.
DESK_BODY.fm Page 22 Thursday, June 14, 2007 8:29 AM Product compliance For product compliance information, refer to Compliance.pdf on the SG CD in the /docs directory. Product specifications • • • • • • • Power (SG300): Power (SG560): Power (SG565): Power (SG580): Operating temperature: Storage temperature: Humidity: 12 VDC, 0.5 A 5 VDC, 1.2 A 5 VDC, 2 A 5 VDC, 1.
DESK_BODY.fm Page 23 Thursday, June 14, 2007 8:29 AM Technical support Secure Computing works closely with our reseller partners to offer the best worldwide Technical Support services. Your Secure Computing reseller is the first line of support when you have questions about our products and services; however, if you require additional assistance, contact us directly. • U.S. toll-free 1.800.700.8328 • International +1.651.628.1500 Contact technical support by e-mail at: support@securecomputing.com.
DESK_BODY.fm Page 24 Thursday, June 14, 2007 8:29 AM SnapGear Limited Hardware Warranty Secure Computing Corporation, on behalf of itself and its subsidiaries, (hereinafter "Secure Computing") warrants that its SnapGear hardware products will be free from defects in material and workmanship under normal use for a period of one (1) year from the date of purchase from Secure Computing or an authorized Secure Computing reseller.
DESK_BODY.fm Page 25 Thursday, June 14, 2007 8:29 AM SG Software License Agreement CAREFULLY READ THE FOLLOWING TERMS AND CONDITIONS BEFORE LOADING THE SOFTWARE. BY CLICKING "I ACCEPT" BELOW, OR BY INSTALLING, COPYING, OR OTHERWISE USING THE SOFTWARE, YOU ARE SIGNING THIS AGREEMENT, THEREBY BECOMING BOUND BY ITS TERMS.
DESK_BODY.fm Page 26 Thursday, June 14, 2007 8:29 AM 5. DISCLAIMER OF WARRANTY AND LIMITATION OF REMEDIES. THE WARRANTIES STATED HEREIN ARE IN LIEU OF ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING ANY WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SOME STATES AND COUNTRIES DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO THE ABOVE EXCLUSION MAY NOT APPLY TO YOU. THIS WARRANTY GIVES YOU SPECIFIC LEGAL RIGHTS. YOU MAY HAVE OTHER RIGHTS WHICH VARY BY STATE OR COUNTRY.
DESK_BODY.fm Page 27 Thursday, June 14, 2007 8:29 AM 9. EXPORT RESTRICTIONS. You agree to comply with all applicable United States export control laws, and regulations, as from time to time amended, including without limitation, the laws and regulations administered by the United States Department of Commerce and the United States Department of State. You have been advised that Software Products are subject to the U.S. Export Administration Regulations.
your trusted source for enterprise security TM Web Gateway – Comprehensive protection against malware, viruses, data leakage and Internet misuse, while ensuring policy enforcement, regulatory compliance, and a productive application environment. Messaging Gateway – Inbound defense against spam, viruses, denial-of-service and intrusions; outbound protection against data leaks and policy violations.
