User`s guide

Headquarters conﬁguration

Internet Interfaces

Follow the ISP’s instructions to set the interface connected to the Internet. Most ISP use

automatic conﬁguration of TCP/IP parameters by using DHCP protocol. In case of manual

conﬁguration, the following parameters are required for proper functionality of the Internet

interface: IP address, subnet mask, default gateway and at least one DNS server’s address.

The web interface of the company headquarter’s ﬁrewall should have a ﬁxed IP address to

make it possible for the ﬁlial’s server and VPN clients to connect to it (see requirements

in chapter 1). Suppose that the ISP has aasigned IP adddress 85.17.210.230. It is also

recommended to assign a DNS name (e.g. server.company.com) to this IP address; otherwise

all VPN clients will be required to deﬁne the server by the IP address.

Verify connectivity (i.e. by using the ping command or by opening a Web site using your

browser).

LAN Interface

The following parameters will be set at the LAN Interface:

• IP address — we will use the 192.168.1.1 IP address (refer to chapter 2.1).

• network mask — 255.255.255.0

• default gateway — no default gateway is allowed at this interface!

• DNS server — no DNS server should be set on this interface.

2.3 Kerio Control installation

Install Kerio Control by following the procedure corresponding with your server type.

Installation on Windows

Run the Kerio Connect installation ﬁle. Select Full installation.

If the installation program detects the Internet Connection Sharing service, it is recommended

to strictly disable this service, otherwise collisions might occur and Kerio Connect may work

incorrectly. It is also recommended to disable also other system services which might cause

collisions — Universal Plug and Play Device Host and SSDP Discovery Service.

Now set a password for access to administration (user Admin). If the installation is performed

remotely (e.g. via Remote Desktop), check the corresponding option to avoid blocking of

network traﬃc when the installation is completed.

Under usual circumstances, a reboot of the computer is not required after the installation is

completed (a restart may be required if the installation program rewrites shared ﬁles which

are currently in use). This will install the Kerio Control Engine low-level driver into the system