Firebox M470 - Firewall WatchGuard - Free user manual and instructions

USER MANUAL Firebox M470 WatchGuard

1. Go to www.watchguard.com/activate

2. Log in to your WatchGuard account, or create a new account*.

*If you create a new account, return to www.watchguard.com/activate after you nish the account creation process. Connect Your Firebox and Power it On Make sure your computer is congured to use DHCP. When you connect to the Firebox, it will assign an IP address on the 10.0.1.0/24 network. Connect to the Web UI

1. Go to https://10.0.1.1:8080

You can safely ignore certicate warnings, because the Firebox uses a self-signed certicate.

2. Log in with the user name admin and the passphrase readwrite.

3. Follow the directions in the Web Setup Wizard to create a basic conguration le for a

new Firebox. Click More Information if you have questions.

4. When the Wizard completes, log in to the Web UI with the admin user account and the

Admin passphrase you set during the Wizard.

5. Install the Firebox in your network.

Eth 1 Eth 0 English ComputerInternet3 After you run the Web Setup Wizard your Firebox has a basic conguration:• Allows outbound FTP, Ping, DNS, TCP, and UDP connections• Blocks all unrequested trac from the external network• Inspects outgoing FTP, HTTP, and HTTPS trac• Uses licensed security services to protect the trusted and optional networks Next Steps Congratulations! You have nished basic setup of your Firebox. You can use the Web UI to view and edit your conguration and to manage and monitor your Firebox. Or, you can download and install WatchGuard System Manager (WSM) and use Policy Manager and the WSM suite of management and monitoring tools. Here are some recommendations to help you get started: Verify your Internet connectivity

• With your Firebox installed in your network, make sure that your users can successfully browse the Internet. Get the latest software To upgrade the Firebox OS: 1. Log in to Fireware Web UI. 2. Select System > Upgrade OS.To get the latest version of WSM, WatchGuard Dimension, VPN clients, and other software for your Firebox:

1. Go to www.watchguard.com/support and click Download Software.

2. Find the software downloads page for the Firebox M370/470/570/670 and select the software you want to install.

Explore the Features and Functions of Your Firebox Browse the Web UI or the tools in WatchGuard System Manager and click Help on any page or dialog box to learn more about the management, monitoring, and security features of your Firebox. English English4 About the Firebox Status Lights Indicators for RJ45 interfaces Interfaces 0 - 7 each have two indicators. The right indicator shows the interface connection status. The left indicator shows interface activity. Indicator Indicator color Interface Status Connection (right) Yellow Link at 1000 Mbps Green Link at 100 Mbps Not lit Link at 10 Mbps or no link Activity (left) Yellow, blinks Power on, network activity Not lit Power o, no connections Storage ( ) – When there is activity on the mSATA card or hard disk, the storage indicator is yellow. Arm/Disarm ( ) – When the Firebox is armed and ready to pass trac, this indicator is green. When the Firebox is powered on, but not ready to pass trac, this indicator is red. Power ( ) – The power indicator on the left front of the Firebox is green when the Firebox is powered on. Power Button ( ) – The Power button on the front of the Firebox is lit to indicate power status. It is green when the Firebox is powered on, and red when power is available, but the Firebox is powered o. When the Power button is red, press this button to power on the Firebox. When the Power button is green, press and hold it for ve seconds to power o the Firebox.5 Install Interface Modules For the Firebox M470, M570 and M670 you can install any supported interface module. You must install the interface modules before you can enable the interfaces in the Firebox conguration. The supported interfaces modules are:

• WatchGuard Firebox M 4 Port 10 Gb SFP+ Fiber Module Important: You must power o the Firebox before you install or remove an interface module. For details about available interface modules and installation instructions, see the Hardware Guide available at: www.watchguard.com/help/documentation/hardware.asp Install Your Firebox For instructions to install your Firebox in a network rack, see the Firebox M370/470/570/670 Hardware Guide. Reset the Firebox to Factory-Default Settings If you ever need to, you can restore your Firebox to its factory-default settings. For example, if you do not know the administrator account passphrase or you want to start over with a new conguration, you can reset your Firebox. Make sure you back up your Firebox conguration before you reset your Firebox in case you want to restore it in the future. For information about how to reset your Firebox, see the Firebox M370/470/570/670 Hardware Guide, available at: www.watchguard.com/help/documentation/hardware.asp English6 激活您的 Firebox

1. www.watchguard.com/activate

WatchGuard Dimension VPN clients

1. Visite www.watchguard.com/activate

1. Acesse www.watchguard.com/activate

網址是：www.watchguard.com/help/documentation/hardware.asp 繁體中文42 Notices: All WatchGuard products are designed and tested to meet strict safety requirements. These requirements include product safety approvals and other global compliance standards. Please read the following instructions carefully before operating the product, and refer to them as needed to ensure the continued safe operation of your product. Additional information can be found in the Hardware Guide located on the WatchGuard website: http://www.watchguard.com/help/documentation/hardware.asp Product Safety Certication The WatchGuard product is safety certied under the following standards:

• Do not place objects on the power cord.

• Do not obstruct the ventilation openings. These openings prevent overheating of the machine.

• Never push objects of any kind into slots or openings on this equipment. Making a contact with a voltage point or shorting out a part may result in re or electrical shock.

• When removing or installing an appliance, follow the general installation safety instructions.

• You must disconnect the AC power cord from the Firebox before you remove the cover of the Firebox for any reason.

• There is risk of explosion if the battery is replaced by an incorrect type. Dispose of used batteries according to the manufacturer’s instructions. Disclaimer WatchGuard shall not be held liable if the end user alters, modies, or repairs any WatchGuard hardware appliance.Certications

Federal Communication Commission Interference Statement This equipment has been tested and found to comply with the limits for a Class A digital Firebox, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.) This equipment complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This Firebox may not cause harmful interference, and (2) This Firebox must accept any interference received, including interference that may cause undesired operation. RoHS Statement The member states of the European Union approved directive 2002/95/EC, Restrictions of Hazardous Substances (“RoHS directive”‘) that became valid on July 1, 2006. It states that all new electrical and electronic equipment put on the market within the member states must not contain certain hazardous materials. This Firebox complies with the European Union’s R0HS directive 2002/95/EC and similar regulations that may be adopted by other countries for European Sales.46 WEEE Statement WEEE is a general set of requirements dictated in the EU Directive 2002/96/EC. This Directive mandated that member EU countries enact regulations governing the Waste of Electrical and Electronic Equipment (WEEE). The Directive, and its individual transpositions into specic country laws and legislation, is aimed at the reduction of WEEE through reuse, recovery, and recycling of WEEE. WatchGuard is working in partnership with our European Union (EU) distribution partners to ensure that our products are in compliance with the WEEE statutes, and that the recovery of our product per the specic EU country legislative requirements is seamless for our product’s end users. If you have a WatchGuard product that is at its end of life and needs to be disposed of, please contact WatchGuard Customer Care Department at: U.S. Customers: 877.232.3531 International Customers: +1.206.613.0456 WatchGuard is reasonably condent that our products do not contain any substances or hazardous materials presently banned by any legislation, and do not present a risk due to hazardous materials. WEEE recovery professionals should also note that these products do not have any materials that are of particular high value in their individual form. REACH The new EU chemicals policy REACH (Registration, Evaluation, Authorization and restriction of Chemicals) came into eect on June 1, 2007. REACH is Europe’s new chemicals legislation, which is applicable in all 27 EU Member States as well as the EFTA European Economic Area (EEA). REACH creates a new system for gathering information, assessing risks to human health and the environment, and authorizing or restricting the marketing and use of chemicals produced or supplied in the EEA. REACH has an impact on EEA producers and importers of nished products and users of chemicals in the course of industrial or professional activities. WatchGuard supports the overall REACH objective of improving the protection of human health and the environment and will meet all applicable REACH requirements. WatchGuard is strongly committed to working with our customers and supply chain to dene and implement the REACH requirements and ensure a smooth transition to compliance. One of the REACH requirements is that manufacturers and importers have the duty to register substances they are producing or importing. In accordance with the regulations, the products of WatchGuard do not need to be registered for the following reasons:Certications

• WatchGuard does not import more than 1 metric ton per year of a substance as dened by REACH.

• WatchGuard products are non-chemical products that are not designed to release any substance under normal and reasonably predictable application.

” indicates that the percentage content of the restricted substance does not exceed the percentage of reference value of presence. Note 3：The “−” indicates that the restricted substance corresponds to the exemption.Certications

DECLARATION OF CONFORMITY

Immunity: EN 55024: 2010 EN 61000-4-2:2009 EN 61000-4-3:2006+A1:2008+A2:2010 EN 61000-4-4:2012 EN 61000-4-5:2014 EN 61000-4-6:2014+AC: 2015 EN 61000-4-8:2010 EN 61000-4-11:2004 Signature: Full Name: Laurence Huang Position: Manufacturing Program Manager Date: 25 Feb 201750 Limited Hardware Warranty This Limited Hardware Warranty (the “Warranty”) applies to the enclosed hardware product, not including any associated software, which is licensed pursuant to a separate end-user license agreement and warranty (the “Product”). BY USING THE PRODUCT, YOU (either an individual or a single entity) AGREE TO THE TERMS HEREOF. If you do not agree to these terms, please return this package, along with proof of purchase, to the authorized dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc. (“WatchGuard”) and you agree as set forth below or on the reverse side of this card, as applicable.

1. LIMITED WARRANTY. WatchGuard warrants that upon delivery and for one (1) year thereafter (the “Warranty

Period”): (a) the Product will be free from material defects in materials and workmanship, and (b) the Product, when properly installed and used for its intended purpose and in its intended operating environment, will perform substantially in accordance with WatchGuard applicable specications. This warranty does not apply to any Product that has been: (i) altered, repaired or modied by any party other than WatchGuard except for the replacement or inclusion of specied components authorized in, and performed in strict accordance with, documentation provided by WatchGuard; or (ii) damaged or destroyed by force majeure events, accidents, power spikes or similar events or by any intentional, reckless or negligent acts or omissions of any party. You may have additional warranties with respect to the Product from the manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby release WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on account of, any such warranties or any breach thereof.

2. REMEDIES. If any Product does not comply with the WatchGuard warranties set forth in Section 1 above,

WatchGuard will, following the receipt of the product you claim is defective and at its option, either (a) repair the Product, or (b) replace the Product with a like or similar product; provided, that you will be responsible for returning the Product and for all costs of shipping and handling. Repair or replacement of the Product shall not extend the Warranty Period. Any Product, component, part or other item replaced by WatchGuard becomes the property of WatchGuard. WatchGuard shall not be responsible for return of or damage to any software, rmware, information or data contained in, stored on, or integrated with any returned Products.

5. MISCELLANEOUS PROVISIONS. This Warranty will be governed by the laws of the state of Washington,

U.S.A., without reference to its choice of law rules. The provisions of the 1980 United Nations Convention on Contracts for the International Sales of Goods, as amended, shall not apply. You agree not to directly or indirectly transfer the Product or use of the product or associated documentation to any country to which such transfer would be prohibited by the U.S. Export laws and regulations. If any provision of this Warranty is found to be invalid or unenforceable, then the remainder shall have full force and eect and the invalid provision shall be modied or partially enforced to the maximum extent permitted by law to eectuate the purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the Product, and supersedes any prior purchase order, communications, advertising or representations concerning the Product AND BY USING THE PRODUCT YOU AGREE TO THESE TERMS. IF THE PRODUCT IS BEING USED BY AN ENTITY, THE INDIVIDUAL INDICATING AGREEMENT TO THESE TERMS BY USING THE PRODUCT REPRESENTS AND WARRANTS THAT (A) SUCH INDIVIDUAL IS DULY AUTHORIZED TO ACCEPT THE WARRANTY ON BEHALF OF THE ENTITY AND TO BIND THE ENTITY TO THE TERMS OF THIS WARRANTY; (B) THE ENTITY HAS THE FULL POWER, CORPORATE OR OTHERWISE, TO ENTER INTO THE WARRANTY AND PERFORM ITS OBLIGATIONS UNDER THE WARRANTY AND; (C) THE WARRANTY AND THE PERFORMANCE OF THE ENTITY’S OBLIGATIONS UNDER THE WARRANTY DO NOT VIOLATE ANY THIRD-PARTY AGREEMENT TO WHICH THE ENTITY IS A PARTY. No change or modication of the Warranty will be valid unless it is in writing and is signed by WatchGuard.ADDRESS: 505 Fifth Avenue South, Suite 500, Seattle, WA 98104 WEB: www.watchguard.com • U.S. SALES: 1.800.734.9905 • INTERNATIONAL SALES: +1.206.613.0895 © 2017 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard Logo, Fireware, and LiveSecurity are registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other trademarks and tradenames are the property of their respective owners.

+1.206.613.0456 (all other countries) www.watchguard.com/support