Installation guide
Table Of Contents
- Introduction
- Headquarters configuration
- Selection of IP addresses for LAN
- Configuration of network interfaces of the Internet gateway
- Kerio Control installation
- Kerio Control Administration interface and product activation
- Setting connection and basic traffic rules
- DHCP Server Configuration
- DNS configuration
- Web interface and SSL-VPN certificates
- Mapping of user accounts and groups from the Active Directory
- Address Groups and Time Ranges
- Web Rules Definition
- FTP Policy Configuration
- Antivirus Scanning Configuration
- Intrusion Prevention System
- Enabling access to local services from the Internet
- Secured access of remote clients to LAN
- LAN Hosts Configuration
- Viewing statistics of Internet usage and user browsing behavior
- Configuration of the LAN in a filial office
- Interconnection of the headquarters and branch offices
- Used open source items
- Legal Notices
20
Chapter 3
Configuration of the LAN in a filial office
For quick configuration of the filial’s LAN, it is possible to follow similar method as for the
headquarter’s network (see chapter 2). The only difference is in DNS configuration. Supposing
that there is no domain server or any other DNS server in the filial’s network. The Kerio
Control’s DNS module will be used as the primary DNS server.
3.1 Configuration of network interfaces of the Internet gateway
Set a fixed IP address (e.g. 10.1.1.1) at the firewall’s interface connected to the local network.
Make sure that no default gateway is set on this interface! No DNS server should be set here
as well!
Follow the ISP’s instructions to set the interface connected to the Internet.
3.2 DNS configuration
In Configuration → DNS, keep the default settings (the DNS forwarder service and simple
DNS translation with the hosts file and a table of leased addresses are allowed) and set the
advanced options:
• Enter the local DNS domain name — filial.company.com.
• Enable the Use custom forwarding option The settings are addressed in details in
chapter 4.2.
• It is recommended to add a record about the server (or about other hosts to which
a fixed IP address will be assigned) to the hosts file:
10.1.1.1 server