MS3AE5W Security Network Appliance T35-W Users Manual

 

Firebox T35 / T35-W HW Models: MS3AE5, MS3AE5W Quick Start Guide Guide de dmarrage rapide Kurzanleitung Guida introduttiva Gua Rpida Guia de incio rpido WatchGuard Technologies, Inc. E n g l i s h Activate Your Device 1. Go to www.watchguard.com/activate 2. Log in to your WatchGuard account, or create a new account*.

*If you create a new account, return to www.watchguard.com/activate after you finish the account creation process. 3. Type the serial number for your device. 4. During activation, select your setup method:

RapidDeploy QuickStart Automatically download and apply a QuickStart configuration file to your device, pre-configured with security settings recommended by WatchGuard. Classic Activation Use the Web Setup Wizard to create a basic configuration file for your device. 5. Use the setup directions in this guide that match the method you selected. 2 3 RapidDeploy QuickStart Setup 1. Connect Your Device and Power it On Make sure the computers on your network are configured to use DHCP. When you install your Firebox, it will assign an IP address on the 10.0.1.0/24 network. Your Network Internet Classic Activation Setup 1. Connect Your Device and Power it On Make sure your computer is configured to use DHCP. When you connect to the Firebox, it will assign an IP address on the 10.0.1.0/24 network. Computer Internet E n g l i s h 2. Connect to the Web UI A. Go to https://10.0.1.1:8080 B. You can safely ignore any certificate warnings you see because the device uses a self-signed certificate. C. Log in with the user account admin and the Admin (readwrite) passphrase you set during activation. Your device has a basic configuration:

Allows outbound TCP, UDP, and ping traffic Blocks all unrequested traffic from the external network Includes optimized security settings Uses licensed security services to protect the trusted and optional networks 4 2. Connect to the Web UI A. Go to https://10.0.1.1:8080 B. You can safely ignore certificate warnings, because the device uses a self-signed certificate. C. Log in with the user name admin and the passphrase readwrite. D. Follow the directions in the Web Setup Wizard to create a basic configuration file for a new device. Click More Information if you have questions. E. When the Wizard completes, log in to the Web UI with the admin user account and the Admin (readwrite) passphrase you set during the Wizard. F. Install the Firebox in your network. Your device has a basic configuration:

Allows outbound TCP, UDP, and ping traffic Blocks all unrequested traffic from the external network Inspects outgoing FTP, HTTP, and HTTPS traffic Uses licensed security services to protect the trusted and optional networks 5 Next Steps Congratulations! You have finished basic setup of your Firebox. You can use the Web UI to view and edit your configuration and to manage and monitor your Firebox. Or, you can download and install WatchGuard System Manager (WSM) and use Policy Manager and the WSM suite of management and monitoring tools. Here are some recommendations to help you get started:

Verify your Internet connectivity With your Firebox installed in your network, make sure that your users can successfully browse the Internet. Get the latest software To upgrade the Firebox OS:

1. Log in to Fireware Web UI. 2. Select System > Upgrade OS. To get the latest version of WSM, WatchGuard Dimension, VPN clients, and other software for your Firebox:

1. Go to www.watchguard.com/support and click Download Software. 2. Find the software downloads page for the Firebox T35 and select the software you want to install. Explore the Features and Functions of Your Firebox Browse the Web UI or the tools in WatchGuard System Manager and click Help on any page or dialog box to learn more about the management, monitoring, and security features of your Firebox. About the Device Status Lights Fail Over Lights when there is a WAN failover from the primary external interface to the backup interface. WAP - (Wireless models only) Lights when the device is activated as a wireless access point or as a wireless client. Network interface status indicators The Firebox T35 has five network interfaces. There are two status indicators for each interface. E n g l i s h Indicator 1000 10/100 Indicator color Yellow Blinks*

Green Interface Status Link speed: 1000 Mbps Data sent and received Link speed: 10 Mbps or 100 Mbps Data sent and received Blinks*

* Blink speed increases as the data flow increases Status Shows when there is a management connection to the device. The Status indicator is lit for 30 seconds after you connect to the device with the Fireware Web UI or the command line interface. It is also lit when the device is polled by WatchGuard System Manager. Mode Shows the status of the external network connection. If the device can connect to the external network and send traffic, the indicator is green. The indicator flashes if the device cannot connect to the external network and send traffic. Attn Lights when you start the device with the Reset button pressed. Power ( ) The power indicator is lit when the device is on. 6 7 Reset the Firebox to Factory-Default Settings If you ever need to, you can restore your Firebox to its factory-default settings. For example, if you do not know your administrator account passphrase or you want to start over with RapidDeploy QuickStart, you can reset your device. 1. www.watchguard.com/activate 2. WatchGuard *

* www.watchguard.com/activate For more information, see the Hardware Guide for your Firebox, available at:

www.watchguard.com/help/documentation/hardware.asp 3. 4. WatchGuard 5. 8 9 1. DHCPIP Firebox 10.0.1.0/24 IP Internet 1. DHCPIP Firebox 10.0.1.0/24 IP Internet 2. A. https://10.0.1.1:8080 B. C. admin readwrite TCPUDP Ping 2. A. https://10.0.1.1:8080 B. C. admin readwrite D.

(More Information) E. admin readwrite F. Firebox TCPUDP Ping 10 11 FTPHTTP HTTPS Firebox Firebox WatchGuard WSM WSM Internet Firebox Firebox 1. Fireware 2. >

Firebox WSMWatchGuard DimensionVPN 1. www.watchguard.com/support 2. Firebox T30/T50 Firebox WatchGuard Firebox Fail Over WAN WAP Firebox T35 5 1000 10/100

*

*

1000 Mbps 10 Mbps 100 Mbps

*

Status Fireware 30 WatchGuard System Manager Mode Attn (Reset) Power (

) 12 13 Firebox Firebox FireboxHardware Guide www.watchguard.com/help/documentation/hardware.asp F r a n a i s Activation de votre appareil 1. Rendez-vous l'adresse www.watchguard.com/activate 2. Connectez-vous votre compte WatchGuard ou crez un nouveau compte*.

*Si vous crez un nouveau compte, retournez l'adresse www.watchguard.com/activate la fin du processus de cration de compte. 3. Saisissez le numro de srie de votre appareil. 4. Lors de l'activation, slectionnez votre mthode de configuration:

RapidDeploy QuickStart: tlchargement et application automatiques d'un fichier de configuration QuickStart sur votre appareil. Ce fichier est pr-configur avec les paramtres de scurit recommands par WatchGuard. Classic Activation: utilisation de l'Assistant de configuration Web pour gnrer un fichier de configuration de base pour votre appareil. 5. Suivez les instructions de configuration correspondant la mthode slectionne. 14 15 Configuration RapidDeploy QuickStart 1. Branchement et mise sous tension de votre appareil Assurez-vous que les ordinateurs de votre rseau sont configurs pour utiliser le protocole DHCP. Lorsque vous installez votre Firebox, il attribue une adresseIP sur le rseau 10.0.1.0/24 Votre rseau Internet Configuration Classic Activation 1. Branchement et mise sous tension de votre appareil Assurez-vous que votre ordinateur est configur pour utiliser le protocole DHCP. Lorsque vous connectez votre Firebox, il attribue une adresseIP sur le rseau 10.0.1.0/24 Ordinateur Internet F r a n a i s 2. Connexion l'interface utilisateur Web A. Rendez-vous l'adresse https://10.0.1.1:8080 B. Votre appareil utilisant un certificat auto-sign, vous pouvez, sans risque, ignorer les avertissements lis aux certificats. C. Connectez-vous avec le compte utilisateur admin et le mot de passe Admin

(readwrite) que vous avez dfinis lors de l'activation. Votre appareil prsente une configuration de base:

Trafic sortant TCP, UDP et Ping autoriss Blocage de tout le trafic non demand en provenance du rseau externe Paramtres de scurit optimiss Utilisation de services de scurit sous licence pour protger les rseaux approuvs et en option 16 2. Connexion l'interface utilisateur Web A. Rendez-vous l'adresse https://10.0.1.1:8080 B. Votre appareil utilisant un certificat auto-sign, vous pouvez, sans risque, ignorer les avertissements lis aux certificats. C. Connectez-vous avec le nom d'utilisateur admin et le mot de passe readwrite. D. Suivez les instructions de l'Assistant de configuration Web pour gnrer un fichier de configuration pour un nouvel appareil. Si vous avez des questions, cliquez sur Plus d'informations. E. Une fois que l'Assistant a termin, connectez-vous l'interface utilisateur Web avec le nom d'utilisateur admin et le mot de passe Admin (readwrite) que vous avez dfinis dans l'Assistant. Installez le Firebox dans votre rseau. F. Votre appareil prsente une configuration de base:

Trafic sortant TCP, UDP et Ping autoriss Blocage de tout le trafic non demand en provenance du rseau externe Inspection du trafic sortant FTP, HTTP et HTTPS Utilisation de services de scurit sous licence pour protger les rseaux approuvs et en option 17 tapes suivantes Flicitations! Vous avez prsent termin la configuration de base de votre Firebox. Vous pouvez utiliser linterface utilisateur Web pour consulter et modifier votre configuration, mais aussi pour grer et contrler votre Firebox. Autrement, vous pouvez tlcharger et installer WatchGuard System Manager (WSM) et utiliser Policy Manager et la suite WSM doutils de gestion et de surveillance. Voici quelques recommandations pour dbuter:

Vrifiez votre connectivit Internet Une fois votre Firebox install dans votre rseau, assurez-vous que vos utilisateurs peuvent naviguer correctement sur Internet. Procurez-vous le logiciel le plus rcent Pour mettre niveau le systme dexploitation du Firebox:

1. Connectez-vous linterface utilisateur Web de Fireware. 2. Slectionnez System > Upgrade OS (Systme > Mise niveau du systme dexploitation). Pour obtenir la toute dernire version de WSM, de WatchGuard Dimension, des clients VPN et dautres logiciels pour votre Firebox:

1. Rendez-vous ladresse www.watchguard.com/support et cliquez sur Download Software (Tlchargements de logiciels). 2. Recherchez la page des tlchargements de logiciels pour le FireboxT30/T50 et slectionnez le logiciel installer. Examen des fonctions de votre Firebox Accdez linterface utilisateur Web ou aux outils de WatchGuard System Manager et cliquez sur licne dAide dune page ou dune bote de dialogue pour en savoir plus sur les fonctions de gestion, de surveillance et de scurit de votre Firebox. F r a n a i s propos des tmoins d'tat de l'appareil Fail Over (Basculement): s'allume en cas de basculement WAN depuis l'interface externe principale vers l'interface de secours. WAP (modles sans fil uniquement): s'allume lorsque l'appareil est activ en tant que point d'accs sans fil ou en tant que client sans fil. Indicateurs d'tat des interfaces rseau: le Firebox T35 possde cinq interfaces rseau. Chaque interface comporte deux indicateurs d'tat. Indicateur 1000 10/100 Couleur de l'indicateur Jaune Clignote*

Vert Clignote*

tat de l'interface Vitesse des liens: 1000 Mbps Donnes envoyes et reues Vitesse des liens: 10 Mbps ou 100 Mbps Donnes envoyes et reues

* La vitesse de clignotement augmente avec le dbit du flux de donnes Status (tat): indique qu'il y a une connexion de gestion avec l'appareil. L'indicateur d'tat s'allume pendant 30 secondes aprs avoir connect l'appareil l'interface utilisateur Web de Fireware ou l'interface de ligne de commande. Il s'allume galement lorsque l'appareil est sond par WatchGuard System Manager. Mode: indique l'tat de la connexion du rseau externe. Si l'appareil peut se connecter au rseau externe et envoyer du trafic, cet indicateur est vert. Si l'appareil ne peut pas se connecter au rseau externe et envoyer du trafic, cet indicateur clignote. Attn: s'allume lorsque vous dmarrez l'appareil tout en maintenant le bouton Reset

(Rinitialiser) enfonc. Power (Alimentation) (

sous tension.

): l'indicateur d'alimentation s'allume lorsque l'appareil est 18 19 Rtablissement des paramtres d'usine du Firebox En cas de besoin, vous pouvez rinitialiser votre Firebox sur ses paramtres d'usine. Par exemple, vous pouvez rinitialiser votre appareil si vous ne connaissez pas le mot de passe de votre compte administrateur ou si vous souhaitez recommencer l'aide de RapidDeploy QuickStart. Pour en savoir plus, reportez-vous au Guide du matriel pour votre Firebox, disponible l'adresse suivante:

www.watchguard.com/help/documentation/hardware.asp Gert aktivieren 1. Rufen Sie die Website www.watchguard.com/activate auf. 2. Melden Sie sich bei Ihrem WatchGuard-Account an oder erstellen Sie ein neues Konto*.

*Falls Sie ein neues Konto erstellen, kehren Sie nach erfolgreichem Abschluss zur Seite www.watchguard.com/activate zurck. 3. Geben Sie die Seriennummer Ihres Gerts ein. 4. Whlen Sie bei der Aktivierung eines der folgenden Setup-Verfahren aus:

D e u t s c h RapidDeploy-Schnellstart Sie knnen automatisch eine Schnellstart-

Konfigurationsdatei auf Ihr Gert herunterladen und ausfhren. Hierbei sind die von WatchGuard empfohlenen Sicherheitseinstellungen bereits vorkonfiguriert. Klassische Aktivierung Erstellen Sie mithilfe des Web-Setup-Assistenten eine Basiskonfigurationsdatei fr Ihr Gert. 5. Folgen Sie den Setup-Anweisungen in diesem Handbuch fr das von Ihnen gewhlte Verfahren. 20 21 Setup mit RapidDeploy-Schnellstart 1. Gert anschlieen und einschalten Stellen Sie sicher, dass die Computer in Ihrem Netzwerk fr die Verwendung von DHCP konfiguriert sind. Wenn Sie Ihre Firebox installieren, wird eine IP-Adresse im Netzwerk 10.0.1.0/24 zugewiesen. Ihr Netzwerk Internet 2. Verbindung zum Web-Interface herstellen A. Rufen Sie die Website https://10.0.1.1:8080 auf. B. Etwaig angezeigte Zertifikatswarnungen knnen Sie ignorieren, da das Gert ein selbstsigniertes Zertifikat verwendet. C. Melden Sie sich mit dem Benutzerkonto admin und dem Admin-Kennwort

(readwrite) an, das Sie whrend der Aktivierung festgelegt haben. Ihr Gert verfgt ber die folgende Basiskonfiguration:

Untersttzung fr ausgehenden TCP-, UDP- und Ping-Datenverkehr Blockierung von nicht angefordertem Datenverkehr aus dem externen Netzwerk Bereitstellung optimierter Sicherheitseinstellungen Verwendung lizenzierter Sicherheitsdienste zum Schutz vertrauenswrdiger und optionaler Netzwerke 22 Setup mit klassischer Aktivierung 1. Gert anschlieen und einschalten Stellen Sie sicher, dass Ihr Computer fr die Verwendung von DHCP konfiguriert ist. Wenn Sie eine Verbindung zu Ihrer Firebox herstellen, wird eine IP-Adresse im Netzwerk 10.0.1.0/24 zugewiesen. Internet Computer D e u t s c h 2. Verbindung zum Web-Interface herstellen A. Rufen Sie die Website https://10.0.1.1:8080 auf. B. Eventuell angezeigte Zertifikatswarnungen knnen Sie ignorieren, da das Gert ein selbstsigniertes Zertifikat verwendet. C. Melden Sie sich mit dem Benutzernamen admin und dem Kennwort readwrite an. D. Folgen Sie den Anweisungen im Web-Setup-Assistenten, um eine Basiskonfigurationsdatei fr ein neues Gert zu erstellen. Klicken Sie bei weiteren Fragen auf More Information. E. Melden Sie sich nach Abschluss des Assistenten mit dem Benutzerkonto admin und dem Admin-Kennwort (readwrite), das Sie mit dem Assistenten festgelegt haben, an der Web-Schnittstelle an. Installieren Sie die Firebox in Ihrem Netzwerk. F. Ihr Gert verfgt ber die folgende Basiskonfiguration:

Untersttzung fr ausgehenden TCP-, UDP- und Ping-Datenverkehr Blockierung von nicht angefordertem Datenverkehr aus dem externen Netzwerk Prfung von ausgehendem FTP-, HTTP- und HTTPS-Datenverkehr Verwendung lizenzierter Sicherheitsdienste zum Schutz vertrauenswrdiger und optionaler Netzwerke 23 Weitere Schritte Herzlichen Glckwunsch! Sie haben das Basis-Setup fr Ihre Firebox abgeschlossen. ber das Web-Interface knnen Sie Ihre Konfiguration anzeigen lassen sowie bearbeiten und Ihre Firebox verwalten und berwachen. Alternativ knnen Sie den WatchGuard System Manager (WSM) herunterladen und installieren und den Policy Manager und die WSM-

Suite mit Management- und berwachungstools verwenden. Tipps fr den Start:

Internetverbindung berprfen Stellen Sie sicher, dass Ihre Nutzer nach der Installation der Firebox im Netzwerk problemlos im Internet navigieren knnen. Neueste Software implementieren So fhren Sie ein Upgrade des Firebox-Betriebssystems durch:

1. Melden Sie sich beim Fireware Web UI an. 2. Whlen Sie die Option System > Upgrade OS aus. So rufen Sie die neueste Version von WSM, WatchGuard Dimension, VPN-Clients und anderer Software fr die Firebox ab:

1. Rufen Sie die Website www.watchguard.com/support auf, und klicken Sie auf Download Software. 2. Gehen Sie auf die Seite mit den Software-Downloads fr die Firebox T30/T50, und whlen Sie die zu installierende Software aus. Merkmale und Funktionen der Firebox erkunden Durchsuchen Sie das Web-Interface oder die Tools in WatchGuard System Manager und klicken Sie auf einer beliebigen Seite oder in einem beliebigen Dialogfeld auf Help, um weitere Informationen zu den Verwaltungs-, berwachungs- und Sicherheitsmerkmalen Ihrer Firebox zu erhalten. D e u t s c h Informationen zu den Statusanzeigen des Gerts Fail Over Diese Anzeige leuchtet bei WAN-Failover zwischen der primren externen Schnittstelle und der Backup-Schnittstelle. WAP (nur bei Drahtlosmodellen) Diese Anzeige leuchtet, wenn das Gert als Wireless Access Point oder als drahtloser Client aktiviert wurde. Statusanzeigen der Netzwerkschnittstellen Die Firebox T35 verfgt ber fnf Netzwerkschnittstellen. Fr jede Schnittstelle gibt es zwei Statusanzeigen. Anzeige 1000 10/100 Farbsignal Gelb Blinkt*

Grn Blinkt*

Schnittstellenstatus Verbindungsgeschwindigkeit: 1000 MBit/s Daten werden gesendet und empfangen Verbindungsgeschwindigkeit: 10 MBit/s oder 100 MBit/s Daten werden gesendet und empfangen

* Bei zunehmendem Datenverkehr erhht sich die Blinkfrequenz Status Zeigt an, ob eine Verwaltungsverbindung zum Gert besteht. Die Statusanzeige leuchtet 30 Sekunden lang, nachdem Sie ber das Fireware-Web-Interface oder das Kommandozeileninterface die Verbindung zum Gert hergestellt haben. Sie leuchtet auerdem, wenn das Gert vom WatchGuard System Manager abgefragt wird. Mode Zeigt den Status der externen Netzwerkverbindung an. Die Anzeige leuchtet grn, wenn das Gert eine Verbindung zum externen Netzwerk herstellen und Datenverkehr senden kann. Die Anzeige blinkt, wenn das Gert keine Verbindung zum externen Netzwerk herstellen und keinen Datenverkehr senden kann. Attn Diese Anzeige leuchtet, wenn Sie das Gert mit gedrckter Reset-Taste starten. Ein/Aus (

) Diese Anzeige leuchtet, wenn das Gert eingeschaltet ist. 24 25 Zurcksetzen der Firebox auf die Standard-

Werkseinstellungen Falls erforderlich, lassen sich jederzeit die Werkseinstellungen Ihrer Firebox wiederherstellen. Sie knnen Ihr Gert beispielsweise zurcksetzen, wenn Sie Ihr Kennwort fr das Administratorkonto vergessen haben oder den RapidDeploy QuickStart durchfhren mchten. Weitere Informationen finden Sie im Hardwarehandbuch fr Ihre Firebox. Sie finden es unter:

www.watchguard.com/help/documentation/hardware.asp I t a l i a n o Attivazione del dispositivo 1. Vai su www.watchguard.com/activate 2. Accedi al tuo account WatchGuard, oppure creane uno nuovo*.

*Se crei un nuovo account, ritorna a www.watchguard.com/activate dopo aver terminato la procedura di creazione dellaccount. 3. Digita il numero di serie del tuo dispositivo. 4. Durante lattivazione, seleziona il metodo di installazione preferito:

RapidDeploy QuickStart Scarica automaticamente e applica il file di configurazione sul tuo dispositivo, con le impostazioni di sicurezza consigliate da WatchGuard. Attivazione classica Utilizza la procedura guidata, attraverso linterfaccia di gestione via Web, per creare il file di configurazione base per il tuo dispositivo. 5. Utilizza le istruzioni per linstallazione contenute in questa guida, corrispondenti al metodo selezionato. 26 27 Impostazione di RapidDeploy QuickStart 1. Collegamento e accensione del dispositivo Assicurati che i computer collegati alla rete siano configurati per utilizzare il protocollo DHCP. Quando installi il tuo Firebox, questo assegner al computer un indirizzo IP nella sottorete 10.0.1.0/24 La tua rete Impostazioni di attivazione classiche 1. Collegamento e accensione del dispositivo Verifica che il computer in uso sia configurato per utilizzare il protocollo DHCP. Quando installi il tuo Firebox, questo assegner al computer un indirizzo IP nella sottorete 10.0.1.0/24 Internet Computer I t a l i a n o Internet 2. Collegamento all'interfaccia di gestione via Web A. Vai all'indirizzo https://10.0.1.1:8080 B. Puoi ignorare l'avviso di sito web non sicuro dovuto al certificato SSL, perch il dispositivo utilizza un certificato auto-firmato. C. Accedi con laccount utente admin e la passphrase di amministratore (readwrite) impostata durante lattivazione. Il dispositivo contiene una configurazione di base:

Consente il traffico TCP e UDP in uscita, e il ping Blocca tutto il traffico non richiesto dalla rete esterna Include impostazioni di sicurezza ottimizzate Utilizza i servizi di sicurezza concessi in licenza per proteggere le reti affidabili e opzionali 28 2. Collegamento all'interfaccia di gestione via Web A. Vai all'indirizzo https://10.0.1.1:8080 B. Puoi ignorare tranquillamente qualsiasi avviso di certificato visualizzato perch il dispositivo utilizza un certificato autofirmato. C. Accedi con il nome utente admin e la passphrase readwrite. D. Per creare un file di configurazione di base per il nuovo dispositivo, segui le indicazioni contenute nella procedura guidata per linstallazione basata sul Web. In caso di domande, fai clic su Ulteriori informazioni. E. Una volta completata la procedura guidata, accedi allinterfaccia di gestione via Web con laccount utente admin e la password (readwrite), impostata durante la procedura guidata. Installa il Firebox nella tua rete. F. Il dispositivo contiene una configurazione di base:

Consente il traffico TCP e UDP in uscita, e il ping Blocca tutto il traffico non richiesto dalla rete esterna Ispeziona il traffico in uscita FTP, HTTP e HTTPS Utilizza i servizi di sicurezza concessi in licenza per proteggere le reti affidabili e opzionali 29 Passaggi successivi Congratulazioni! Linstallazione di base di Firebox completata. Per visualizzare e modificare la configurazione in uso e per gestire e monitorare Firebox, utilizza linterfaccia di gestione via Web. In alternativa, possibile scaricare e installare WatchGuard System Manager (WSM) e utilizzare Policy Manager e la suite di strumenti gestionali e di monitoraggio WSM. Di seguito alcuni consigli utili per iniziare:

Verifica della connessione a Internet Dopo avere installato Firebox nella tua rete, verifica che gli utenti possano navigare in Internet senza problemi. Aggiornamento del software Per aggiornare il sistema operativo Firebox:

1. Accedi allinterfaccia utente Web Fireware. 2. Seleziona System > Upgrade OS. Per ottenere lultima versione di WSM, WatchGuard Dimension, client VPN e altro software per Firebox:

1. Vai su www.watchguard.com/support e fai clic su Download Software. 2. Cerca la pagina per scaricare il software di Firebox T30/T50 e seleziona il software che desideri installare. Esplorazione delle caratteristiche e delle funzionalit di Firebox Per ulteriori informazioni sulle funzionalit di gestione, monitoraggio e sicurezza di Firebox, sfogliare linterfaccia utente basata sul web o gli strumenti di WatchGuard System Manager e fare clic su ? o su qualsiasi altra pagina o finestra di dialogo. Informazioni sulle spie di stato del dispositivo Fail Over Si accende in caso di failover WAN dallinterfaccia esterna primaria allinterfaccia di backup. WAP (Solo nei modelli wireless) Si accende quando il dispositivo viene attivato come un punto di accesso wireless o un come un client wireless. Indicatori di stato della scheda di rete Firebox T35 ha cinque interfacce di rete. Per ogni scheda sono disponibili due indicatori di stato. I t a l i a n o Indicatore 1000 10/100 Colore dellindicatore Giallo Lampeggi*

Verde Lampeggi*

Stato dellinterfaccia Velocit collegamento: 1000 Mbps Dati inviati e ricevuti Velocit collegamento: 10 Mbps o 100 Mbps Dati inviati e ricevuti

* La velocit di lampeggio aumenta insieme allincremento del flusso di dati Stato Si accende quando viene stabilita una connessione per la gestione del dispositivo. Lindicatore di stato si accende per 30 secondi una volta collegatisi al dispositivo mediante linterfaccia utente basata sul web di Fireware o linterfaccia a riga di comando. Si accende anche quando il dispositivo viene sondato da WatchGuard System Manager. Modo Mostra lo stato della connessione alla rete esterna. Se il dispositivo pu collegarsi alla rete esterna e inviare traffico, lindicatore verde. Se il dispositivo non pu collegarsi alla rete esterna e inviare traffico, lindicatore lampeggia. Attn Si accende quando il dispositivo viene avviato premendo il pulsante Reset. Alimentazione (

viene acceso.

) Lindicatore dellalimentazione si accende quando il dispositivo 30 31 Ripristino delle impostazioni di fabbrica predefinite di Firebox Se necessario, possibile ripristinare le impostazioni di fabbrica di Firebox. Per esempio, il dispositivo pu essere ripristinato se non conosci la passphrase dellaccount administrator o se desideri ricominciare la procedura con RapidDeploy QuickStart. Per maggiori informazioni, consulta la Guida all'hardware del tuo Firebox, disponibile allindirizzo:

www.watchguard.com/help/documentation/hardware.asp 1. www.watchguard.com/activate 2. WatchGuard*

*

www.watchguard.com/activate 3. 4. RapidDeploy QuickStart QuickStart WatchGuard 5. 32 33 RapidDeploy QuickStart 1. DHCP Firebox10.0.1.0/24IP 1. DHCPFirebox 10.0.1.0/24IP 2. WebUI A. https://10.0.1.1:8080 B. Firebox C. admin readwrite TCPUDPping 34 2. WebUI A. https://10.0.1.1:8080 B. Firebox C. adminreadwrite D.

[More Information]

E. admin readwriteUI F. Firebox TCPUDPping FTPHTTPHTTPS 35 Firebox Web UI Firebox / WatchGuard System ManagerWSM Policy Manager WSM /

Firebox Firebox OS 1. Fireware Web UI 2. System > Upgrade OS Firebox WSMWatchGuard DimensionVPN clients

:

1. www.watchguard.com/support Download Software 2. Firebox T30/T50 Firebox Firebox UI WatchGuard System Manager [Help]

Fail Over WAN WAP -

Firebox T355 2 1000

*

*

: 1000 Mbps

: 10 Mbps 100 Mbps

*

Status Fireware Web UI30 WatchGuard System Manager Mode Attn Power (

) 10/100 36 37 Firebox Firebox RapidDeploy QuickStart Firebox www.watchguard.com/help/documentation/hardware.asp 1. www.watchguard.com/activate . 2. WatchGuard *. 3. . 4. .

* www.watchguard.com/activate . RapidDeploy QuickStart WatchGuard QuickStart

. Classic Activation Web Setup Wizard . 5. . 38 39 RapidDeploy QuickStart 1. DHCP . Firebox 10.0.1.0/24 IP . Classic Activation 1. DHCP . Firebox 10.0.1.0/24 IP . 2. Web UI A. https://10.0.1.1:8080 . B. . C. admin Admin (readwrite) . TCP, UDP Ping

. 40 2. Web UI A. https://10.0.1.1:8080 . B. . C. admin readwrite . D. Web Setup Wizard . More Information . E. admin Admin (readwrite) Web UI . F. Firebox . TCP, UDP Ping FTP, HTTP HTTPS

. 41

! Firebox . Web UI Firebox . WatchGuard System Manager

(WSM) Policy Manager WSM

. . Firebox . Firebox OS . 1. Fireware Web UI . 2. System > Upgrade OS . WSM, WatchGuard Dimension, VPN Firebox . 1. www.watchguard.com/support Download Software . 2. Firebox T30/T50

. Firebox Web UI WatchGuard System Manager Help Firebox , . Fail Over WAN . WAP - ( ) . Firebox T35 .

: 1000Mbps

*

: 10Mbps

*

100Mbps 10/100 1000

* . Status . Fireware Web UI 30 . WatchGuard System Manager

. Mode . Attn Reset . Power (

) . 42 43 Firebox Firebox . , RapidDeploy QuickStart . Firebox . . www.watchguard.com/help/documentation/hardware.asp E s p a o l Active su dispositivo 1. Visite www.watchguard.com/activate 2. Inicie sesin con su cuenta de WatchGuard o cree una cuenta nueva*.

*Si usted crea una cuenta nueva, regrese a www.watchguard.com/activate luego de finalizar el proceso de creacin de la cuenta. 3. Ingrese el nmero de serie de su dispositivo. 4. Durante la activacin, seleccione su mtodo de instalacin:

Inicio rpido de RapidDeploy: automticamente descargue y aplique un archivo de configuracin de inicio rpido en su dispositivo, configurado previamente con la configuracin de seguridad recomendada por WatchGuard. Activacin clsica: use el asistente de instalacin web para crear un archivo de configuracin bsico para su dispositivo. 5. Use las directivas de instalacin de esta gua que correspondan al mtodo que seleccion. 44 45 Instalacin del inicio rpido RapidDeploy 1. Conecte su dispositivo y encindalo Asegrese de que los equipos de su red estn configurados para usar DHCP. Cuando instale su Firebox, este le asignar una direccin IP en la red 10.0.1.0/24 Su red Internet 2. Conctese a la interfaz de usuario web A. Vaya a https://10.0.1.1:8080 B. De manera segura, puede ignorar cualquier certificado de advertencia que vea debido a que el dispositivo usa un certificado con firma automtica. C. Inicie sesin con la cuenta de usuario admin y la frase de contrasea de Administrador

(readwrite) que estableci durante la activacin. Su dispositivo tiene una configuracin bsica:

Permite trfico ping, UDP y TCP saliente Bloquea todo el trfico no solicitado de la red externa Incluye configuracin de seguridad optimizada Usa servicios de seguridad con licencia para proteger las redes confiablesy opcionales. 46 Instalacin de activacin clsica 1. Conecte su dispositivo y encindalo Asegrese de que su equipo est configurado para usar DHCP. Cuando se conecte a su Firebox, este le asignar una direccin IP en la red 10.0.1.0/24 Equipo Internet E s p a o l 2. Conctese a la interfaz de usuario web A. Vaya a https://10.0.1.1:8080 B. De manera segura, puede ignorar cualquier certificado de advertencia debido a que el dispositivo usa un certificado con firma automtica. C. Inicie sesin con el nombre de usuario admin y la frase de contrasea readwrite. D. Siga las directivas en el asistente de instalacin web para crear un archivo de configuracin bsico para un dispositivo nuevo. Haga clic en Ms informacin si tiene preguntas. E. Cuando el asistente finalice, inicie sesin en la interfaz de usuario web con la cuenta de usuario admin y la frase de contrasea de Administrador (readwrite) que estableci durante el asistente. Instale el Firebox en su red F. Su dispositivo tiene una configuracin bsica:

Permite trfico ping, UDP y TCP saliente Bloquea todo el trfico no solicitado de la red externa Inspecciona trfico HTTPS, HTTP y FTP saliente. Usa servicios de seguridad con licencia para proteger las redes confiablesy opcionales. 47 Prximos pasos Felicitaciones! Ha finalizado la instalacin bsica de su Firebox. Puede usar la interfaz de usuario web para ver y editar su configuracin, y para administrar y controlar su Firebox. O bien, puede descargar e instalar WatchGuard System Manager (WSM) y usar la funcin Policy Manager y el conjunto de herramientas de gestin y supervisin de WSM. A continuacin, presentamos algunas recomendaciones para ayudarlo a comenzar:

Con su Firebox instalado en su red, asegrese de que sus usuarios puedan navegar Verifique su Conexin a Internet correctamente en Internet. Obtenga el Software ms Reciente Para actualizar el SO Firebox:

1. Inicie sesin en la interfaz de usuario web de Fireware. 2. Seleccione System (Sistema) > Upgrade OS (Actualizar SO). Para obtener la versin ms reciente de WSM, WatchGuard Dimension, clientes de VPN y otro software para su Firebox:

1. Visite www.watchguard.com/support y haga clic en Download Software

(Descargas de software). 2. Encuentre la pgina de descargas de software para el Firebox T30/T50 y seleccione el software que desee instalar Explore las Caractersticas y Funciones de su Firebox Explore la interfaz de usuario web o las herramientas de WatchGuard System Manager y haga clic en Help (Ayuda) en cualquier pgina o cuadro de dilogo para aprender ms sobre las caractersticas de seguridad, control y gestin de su Firebox. E s p a o l Acerca de las luces de estado del dispositivo Conmutacin por error: las luces se encienden cuando hay una conmutacin por error de WAN de la interfaz externa principal a la interfaz de copia de seguridad. WAP: (nicamente en modelos inalmbricos) las luces se encienden cuando el dispositivo est activado como punto de acceso inalmbrico o como cliente inalmbrico. Indicadores de estado de la interfaz de la red: el Firebox T35 tiene cinco interfaces de red. Hay dos indicadores de estado para cada interfaz. Indicador 1000 10/100 Color del indicador Amarillo Las luces parpadean*

Verde Las luces parpadean*

Estado de interfaz Velocidad de vnculo: 1000Mbps Datos enviados y recibidos Velocidad de vnculo: 10Mbps o 100Mbps Datos enviados y recibidos

* La velocidad de parpadeo de las luces aumenta a medida que el flujo de datos aumenta Estado: muestra cuando hay una conexin de administracin al dispositivo. El indicador de estado est iluminado durante 30 segundos despus de que usted se conecta al dispositivo con la interfaz de usuario web de Fireware o con la interfaz de lnea de comandos. Tambin est iluminado cuando WatchGuard System Manager realiza un sondeo en el dispositivo. Modo: muestra el estado de la conexin de red externa. Si el dispositivo se puede conectar a la red externa y enviar trfico, el indicador se muestra de color verde. El indicador se enciende y apaga de forma intermitente si el dispositivo no se puede conectar a la red externa y enviar trfico. Attn: las luces se encienden cuando enciende el dispositivo con el botn para reiniciar apretado. Encendido (

est encendido.

): el indicador de encendido est iluminado cuando el dispositivo 48 49 Restablecimiento del Firebox a la configuracin predeterminada de fbrica Si alguna vez lo necesita, puede restaurar su Firebox a la configuracin predeterminada de fbrica. Por ejemplo, si no conoce la frase de contrasea de su cuenta de administrador o quiere comenzar de nuevo con el inicio rpido RapidDeploy, puede restablecer su dispositivo. Para obtener ms informacin, consulte la gua de hardware de su Firebox, disponible en:

www.watchguard.com/help/documentation/hardware.asp P o r t u g u s Ative o dispositivo 1. Acesse www.watchguard.com/activate 2. Faa login na conta WatchGuard ou crie uma conta nova*.

*Se for criar uma conta nova, volte a www.watchguard.com/activate depois de concludo o processo de criao de conta. 3. Insira o nmero de srie do dispositivo. 4. Durante a ativao, selecione o mtodo de configurao:

RapidDeploy QuickStart baixe e aplique automaticamente um arquivo de configurao QuickStart no dispositivo, pr-configurado com as configuraes de segurana recomendadas pela WatchGuard. Ativao clssica use o Assistente de Configurao pela Web para criar um arquivo de configurao bsica para o dispositivo. 5. Use as orientaes de configurao neste guia que correspondam ao mtodo selecionado. 50 51 Configurao RapidDeploy QuickStart 1. Conecte o dispositivo e ligue-o Certifique-se de que os computadores da rede estejam configurados para usar DHCP. Ao instalar o Firebox, ele atribuir um endereo IP na rede 10.0.1.0/24 Sua rede Internet 2. Conecte interface de usurio da web A. Acesse https://10.0.1.1:8080 B. seguro ignorar os avisos de certificado exibidos porque o dispositivo usa um certificado autoassinado. C. Faa login com a conta de usurio admin e a senha do Admin (readwrite) definida durante a ativao. O dispositivo tem uma configurao bsica:

Permite TCP, UDP e trfego de ping de sada Bloqueia todo trfego no solicitado da rede externa Contm configuraes de segurana otimizadas Usa servios de segurana licenciados para proteger as redes opcionais e confiveis 52 Configurao de ativao clssica 1. Conecte o dispositivo e ligue-o Certifique-se de que o computador esteja configurado para usar DHCP. Ao conectar-se ao Firebox, ele atribuir um endereo IP na rede 10.0.1.0/24 Computador Internet P o r t u g u s 2. Conecte interface de usurio da web A. Acesse https://10.0.1.1:8080 B. seguro ignorar os avisos de certificado porque o dispositivo usa um certificado autoassinado. C. Faa login com o nome de usurio admin e a senha readwrite. D. Siga as instrues no Assistente de Configurao da Web para criar um arquivo de configurao bsica para o dispositivo. Em caso de dvidas, clique em Mais informaes. E. Na concluso do assistente, faa login na interface de usurio da web com a conta de usurio admin e a senha do Admin (readwrite) definida durante o Assistente. Instale o Firebox na rede. F. O dispositivo tem uma configurao bsica:

Permite TCP, UDP e trfego de ping de sada Bloqueia todo trfego no solicitado da rede externa Inspeciona o trfego de sada de FTP, HTTP e HTTPS Usa servios de segurana licenciados para proteger as redes opcionais e confiveis 53 Prximas etapas Parabns! Voc concluiu a configurao bsica do Firebox. Use a interface de usurio da web para editar as configuraes e para gerenciar e monitorar o Firebox. Ou voc pode fazer o download e instalar o WatchGuard System Manager (WSM) e usar o Policy Manager e o conjunto WSM de ferramentas de gerenciamento e monitoramento. Eis algumas recomendaes para ajudar no incio:

Verifique a conectividade com a internet Com o Firebox instalado na rede, certifique-se de que os usurios consigam navegar na internet. Obtenha o software mais recente Para atualizar o Firebox OS:

1. Faa login na interface de usurio da web do Fireware. 2. Selecione System > Upgrade OS (Sistema > Atualizar SO). Para obter a verso mais recente do WSM, do WatchGuard Dimension, dos clientes VPN e outros softwares para o Firebox:

1. Acesse www.watchguard.com/support e clique em Download Software

(Baixar software). 2. Localize a pgina de downloads de software do Firebox T30/T50 e selecione o software que deseja instalar. Explore os recursos e as funes do Firebox Abra a interface de usurio da web ou as ferramentas no WatchGuard System Manager e clique em Help (Ajuda) em qualquer pgina ou caixa de dilogo para saber mais sobre os recursos de gerenciamento, monitoramento e segurana do Firebox. P o r t u g u s Sobre as luzes de estado do dispositivo Fail Over acende quando existe um failover de WAN a partir da interface externa principal para a interface de backup. WAP (somente modelos sem fio) acende quando o dispositivo ativado como um ponto de acesso sem fio ou um cliente sem fio. Indicadores de estado da interface de rede o Firebox T35 tem cinco interfaces de rede. Existem dois indicadores de status de cada interface. Indicador 1.000 10/100 Cor do indicador Amarelo Intermitente*

Verde Intermitente*

Estado da interface Velocidade do link: 1.000 Mbps Dados enviados e recebidos Velocidade do link: 10 Mbps ou 100 Mbps Dados enviados e recebidos

* A velocidade da intermitncia aumenta proporcionalmente ao aumento do fluxo de dados Status indica que existe uma conexo de gerenciamento com o dispositivo. O indicador Status acende por 30 segundos depois de conectar ao dispositivo pela interface de usurio da web do Fireware ou pela interface de linha de comando. Ela tambm acende quando o dispositivo sondado pelo WatchGuard System Manager. Mode indica o status da conexo de rede externa. Se o dispositivo puder se conectar com a rede externa e enviar trfego, a luz ficar verde. O indicador piscar se o dispositivo no puder se conectar com a rede externa e enviar trfego. Attn acende ao iniciar o dispositivo com o boto Reset pressionado. Power (

) o indicador de alimentao acende quando o dispositivo est ligado. 54 55 Redefina o Firebox com as configuraes padro de fbrica Se for necessrio, possvel restaurar as configuraes padro de fbrica do Firebox. Por exemplo, se no souber a senha da conta do administrador ou quiser reiniciar o RapidDeploy QuickStart, voc pode redefinir o dispositivo. 1. www.watchguard.com/activate 2. WatchGuard *

* www.watchguard.com/activate Para obter mais informaes, consulte o guia de hardware do seu Firebox, disponvel em:

www.watchguard.com/help/documentation/hardware.asp 3. 4. RapidDeploy QuickStart () QuickStart WatchGuard Classic Activation () 5. 56 57 RapidDeploy QuickStart () 1. DHCP Firebox 10.0.1.0/24 IP Classic Activation () 1. DHCP Firebox 10.0.1.0/24 IP 2. Web UI A. https://10.0.1.1:8080 B. C. admin Admin (readwrite) TCPUDP Ping 2. Web UI A. https://10.0.1.1:8080 B. C. D. Web admin readwrite

[More Information] () admin Admin (readwrite) Web UI Firebox E. F. TCPUDP Ping 58 59 FTP HTTP HTTPS Firebox Web UI Firebox WatchGuard System Manager (WSM) Policy Manager WSM Firebox Firebox OS 1. Fireware Web UI 2. [System] () > [Upgrade OS] ( OS) WSMWatchGuard DimensionVPN Firebox 1. www.watchguard.com/support [Download Software]

2. Firebox T30/T50

() Firebox Web UI WatchGuard System Manager

[Help] () Firebox

(Fail Over) WAN WAP - () Firebox T35 1000 10/100

*

*

1000 Mbps 10 Mbps 100 Mbps

*

(Status) Fireware Web UI Status () 30 WatchGuard System Manager (WatchGuard

)

(Mode)

(Attn) []

(Power) 60 61 Firebox Firebox RapidDeploy QuickStart () Firebox www.watchguard.com/help/documentation/hardware.asp 62 63 Certifications Notices:

All WatchGuard products are designed and tested to meet strict safety requirements. These requirements include product safety approvals and other global compliance standards. Please read the following instructions carefully before operating the product, and refer to them as needed to ensure the continued safe operation of your product. Additional information can be found in the Hardware Guide located on the WatchGuard website:

http://www.watchguard.com/help/documentation/hardware.asp Product Safety Certification The WatchGuard product is safety certified under the following standards:

CAN/CSA C22.2 No.60950-1-07, Second Edition 2014-10 UL 60950-1, Second Edition 2014-10-14 EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013 Safety Warning Do not place objects on the power cord. Do not obstruct the ventilation openings. These openings prevent overheating of the machine. Never push objects of any kind into slots or openings on this equipment. Making a contact with a IEC 60950-1, 2005+A1:2009+A2:2013 voltage point or shorting out a part may result in fire or electrical shock. When removing or installing an appliance, follow the general installation safety instructions. You must disconnect the AC power cord from the Firebox before you remove the cover of the Firebox for any reason. There is risk of explosion if the battery is replaced by an incorrect type. Dispose of used batteries according to the manufacturers instructions. Disclaimer WatchGuard shall not be held liable if the end user alters, modifies, or repairs any WatchGuard hardware appliance. Hinweise Zur Sicherheit Alle WatchGuard Produkte werden entwickelt und getestet, um strenge Sicherheitsanforderungen zu erfllen. Diese Anforderungen umfassen Produktsicherheit Zulassungen und andere globale Compliance- Standards. Bitte lesen Sie die folgenden Anweisungen sorgfltig, bevor Sie das Produkt, und bezeichnen sie als notwendig, um den sicheren Betrieb des Gerts zu gewhrleisten. Weitere Informationen finden Sie in der elektronischen Hardware Guide. Die WatchGuard Produkt ist Sicherheit unter den folgenden Normen zertifiziert:

CAN/CSA C22.2 No.60950-1-07, Second edition 2014-14 UL 60950-1, Second Edition 2014-10-14 EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013 Sicherheitshinweis Legen Sie keine Gegenstnde auf das Netzkabel. Verdecken Sie nicht die Lftungsffnungen. Diese ffnungen verhindern eine berhitzung IEC 60950-1:2005+A1:2009+A2:2013 der Maschine Stecken Sie niemals Gegenstnde jeglicher Art in die Schlitze oder ffnungen des Gerts stecken. Der Kontakt mit einem spannungsfhrenden Punkt oder das Kurzschlieen eines Bauteils kann zu einem Brand oder elektrischen Schlag fhren. Beim Entfernen oder Installieren eines Gertes, nach den allgemeinen Installation Sicherheitshinweise. 64 65 Certifications Aviso De Seguridad Todos los productos WatchGuard estn diseados y probados para satisfacer estrictos requisitos de seguridad. Estos requisitos incluyen la homologacin de productos de seguridad y otras normas de cumplimiento global. Por favor, lea atentamente las siguientes instrucciones antes de utilizar el producto, y se refieren a ellos como sea necesario para garantizar el funcionamiento seguro y continuo de su producto. Informacin adicional se puede encontrar en la Gua del usuario electrnica. Certificacin de seguridad del producto El producto tiene certificacin de seguridad WatchGuard bajo las siguientes normas:

CAN/CSA C22.2 No.60950-1-07, Second edition 2014-14 UL 60950-1, Second Edition 2014-10-14 EN 60950-1:2006+A11:2009+A1:2010+A12:2011+A2:2013 Advertencia de seguridad No coloque objetos sobre el cable de alimentacin. No obstruya las aberturas de ventilacin. Estas aberturas evitan el sobrecalentamiento de IEC 60950-1:2005+A1:2009+A2:2013 la mquina. Nunca introduzca objetos de ningn tipo en las ranuras o aberturas del equipo. El contacto con puntos de voltaje o el cortocircuito de una pieza podra provocar un incendio o una descarga elctrica. Al extraer o instalar un electrodomstico, siga las instrucciones generales de instalacin de seguridad. CE Notice:

The CE symbol on your WatchGuard Technologies equipment indicates that it is in compliance with the Electromagnetic Compatibility (EMC) directive and the Low Voltage Directive (LVD) of the European Union (EU). Federal Communication Commission Interference Statement Operations in the 5.15-5.25GHz band are restricted to indoor usage only. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

Reorient or relocate the device. Connect the equipment into an outlet on a circuit different from that to which the receiver Increase the separation between the equipment and receiver. is connected. Consult the dealer or an experienced radio/TV technician for help. FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the users authority to operate this equipment. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. IMPORTANT NOTE:

FCC Radiation Exposure Statement: (Wireless) This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. 66 67 Certifications Europe EU Declaration of Conformity (Wireless) This device complies with the essential requirements of the RED 2014/53/EU. The following test methods have been applied in order to prove presumption of conformity with the essential requirements of the RED 2014/53/EU:

EN 60950-1 - Safety of Information Technology Equipment EN 50385 - Generic standard to demonstrate the compliance of electronic and electrical apparatus with the basic restrictions related to human exposure to electromagnetic fields (0 Hz - 300 GHz) EN 300 328 - Electromagnetic compatibility and Radio spectrum Matters (ERM); Wideband Transmission systems; Data transmission equipment operating in the 2,4 GHz ISM band and using spread spectrum modulation techniques; Harmonized EN covering essential requirements under article 3.2 of the RED Directive EN 301 893 - Broadband Radio Access Networks (BRAN); 5 GHz high performance RLAN; Harmonized EN covering essential requirements of article 3.2 of the RED Directive EN 301 489-1 - Electromagnetic compatibility and Radio Spectrum Matters (ERM); ElectroMagnetic Compatibility (EMC) standard for radio equipment and services; Part 1: Common technical requirements EN 301 489-17 - Electromagnetic compatibility and Radio spectrum Matters (ERM); ElectroMagnetic Compatibility (EMC) standard for radio equipment and services; Part 17: Specific conditions for 2.4 GHz wideband transmission systems and 5 GHz high performance RLAN equipment This device is a 5GHz wideband transmission system (transceiver), intended for use in all EU member states and EFTA countries, except in France and Italy where restrictive use applies. In Italy the end-user should apply for a license at the national spectrum authorities in order to obtain authorization to use the device for setting up outdoor radio links and/or for supplying public access to telecommunications and/or network services. This device may not be used for setting up outdoor radio links in France and in some areas the RF output power may be limited to 10 mW EIRP in the frequency range of 2454 2483.5 MHz. For detailed information the end-user should contact the national spectrum authority in France. RoHS Statement The member states of the European Union approved directive 2002/95/EC, Restrictions of Hazardous Substances (RoHS directive) that became valid on July 1, 2006. It states that all new electrical and electronic equipment put on the market within the member states must not contain certain hazardous materials. This device complies with the European Unions R0HS directive 2002/95/EC and similar regulations that may be adopted by other countries for European Sales. WEEE Statement WEEE is a general set of requirements dictated in the EU Directive 2002/96/EC. This Directive mandated that member EU countries enact regulations governing the Waste of Electrical and Electronic Equipment (WEEE). The Directive, and its individual transpositions into specific country laws and legislation, is aimed at the reduction of WEEE through reuse, recovery, and recycling of WEEE. WatchGuard is working in partnership with our European Union (EU) distribution partners to ensure that our products are in compliance with the WEEE statutes, and that the recovery of our product per the specific EU country legislative requirements is seamless for our products end users. If you have a WatchGuard product that is at its end of life and needs to be disposed of, please contact WatchGuard Customer Care Department at:

U.S. Customers: 877.232.3531 International Customers: +1.206.613.0456 WatchGuard is reasonably confident that our products do not contain any substances or hazardous materials presently banned by any legislation, and do not present a risk due to hazardous materials. WEEE recovery professionals should also note that these products do not have any materials that are of particular high value in their individual form. REACH The new EU chemicals policy REACH (Registration, Evaluation, Authorization and restriction of Chemicals) came into effect on June 1, 2007. REACH is Europes new chemicals legislation, which is applicable in all 27 EU Member States as well as the EFTA European Economic Area (EEA). REACH creates a new system for gathering information, assessing risks to human health and the environment, and authorizing or restricting the marketing and use of chemicals produced or 68 69 Certifications supplied in the EEA. REACH has an impact on EEA producers and importers of finished products and users of chemicals in the course of industrial or professional activities. WatchGuard supports the overall REACH objective of improving the protection of human health and the environment and will meet all applicable REACH requirements. WatchGuard is strongly committed to working with our customers and supply chain to define and implement the REACH requirements and ensure a smooth transition to compliance. One of the REACH requirements is that manufacturers and importers have the duty to register substances they are producing or importing. In accordance with the regulations, the products of WatchGuard do not need to be registered for the following reasons:

WatchGuard does not import more than 1 metric ton per year of a substance as defined by REACH. WatchGuard products are non-chemical products that are not designed to release any substance under normal and reasonably predictable application. Our products do not contain the listed substances at more than 0.1% by weight of the whole product/part. Industry Canada statement:

This device complies with RSS-247 of the Industry Canada Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. CAN ICES-

3(B)/NMB-3(B) Ce dispositif est conforme la norme CNR-247 dIndustrie Canada applicable aux appareils radio exempts de licence. Son fonctionnement est sujet aux deux conditions suivantes: (1) le dispositif ne doit pas produire de brouillage prjudiciable, et (2) ce dispositif doit accepter tout brouillage reu, y compris un brouillage susceptible de provoquer un fonctionnement indsirable. Caution: (Wireless) The device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;

Avertissement:

Les dispositifs fonctionnant dans la bande 5150-5 250 MHz sont rservs uniquement pour une utilisation lintrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux. For Mobile Device Usage (Wireless) Radiation Exposure Statement:

This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. Dclaration dexposition aux radiations:

Cet quipement est conforme aux limites dexposition aux rayonnements IC tablies pour un environnement non contrl. Cet quipement doit tre install et utilis avec un minimum de 20cm de distance entre la source de rayonnement et votre corps. France (Wireless) Les dispositifs fonctionnant dans la bande 5150-5250 MHz est rserv une utilisation en intrieur pour rduire le risque de brouillage prjudiciable aux systmes mobiles par satellite utilisant les mmes canaux;

Japan VCCI Notice (Class A ITE) VCCIA VCCI-A 70 71 Certifications Taiwan Class A Notice:

MS3AE5,MS3AE5W,MS5AE5,MS5AE5W Equipment name Type designation (Type) Restricted substances and its chemical symbols nit Lead

(Pb) Mercury Cadmium

(Hg)

(Cd) Hexavalent chromium

(Cr+6) Polybrominated biphenyls

(PBB) Polybrominated diphenyl ethers

(PBDE) PCBA Power Supply ME metal part ME plastic part

(:

) Accessory

(cable, etc.) 1.0.1 wt %0.01 wt %

Note 1Exceeding 0.1 wt % and exceeding 0.01 wt % indicate that the percentage content of the restricted substance exceeds the reference percentage value of presence condition. 2. Note 2 indicates that the percentage content of the restricted substance does not exceed the percentage of reference value of presence. 3. Note 3The indicates that the restricted substance corresponds to the exemption. 72 Taiwan NCC

, ,

,

, , MPE(MPE) 1mW/cm20.338 mW/cm2 Mexico Notice:

La operacin de este equipo est sujeta a las siguientes dos condiciones:

(i) es posible que este equipo o dispositivo no cause interferencia perjudicial y

(ii) este equipo o dispositivo debe aceptar cualquier interferencia, incluyendo la que pueda causar su operacin no deseada. 73 Certifications Declaration of Conformity WatchGuard Technologies, Inc. 505 Fifth Ave. S., Suite 500 Seattle, WA 98104 USA WatchGuard Technologies Inc. hereby declares that the product(s) listed below conform to the Product (s):

European Union directives and standards identified in this declaration. WatchGuard Model: Firebox T35-W and Firebox T35, Hardware Model: MS3AE5W and MS3AE5 EU Directive(s):

Low Voltage (2006/95/EC) Electromagnetic Compatibility (2004/108/EC) RoHS (2002/95/EC) WEEE Directive 2002/96/EC REACH EC 1907/2006 The Radio Equipment Directive (2014/53/EU) Common Standard(s):

EN 60950-1:2006+A11+A1+A12 EN55032:2012/AC:2013 EN 55024:2010 EN 50385:2002 EN 61000-3-2:2014 Class A EN 61000-3-3:2013 EN 61000-4-2:2009 EN 61000-4-3:2006+A1:2008+A2:2010 EN 61000-4-4:2012 EN 61000-4-5:2014 EN 61000-4-6:2014 EN 61000-4-11:2004 Wireless Standard(s):

EN 301 489-1 v2.1.1 EN 301 489-17 v3.1.1 EN 300 328 v2.1.1 EN 301 893 v2.2.1 Safety for ITE Class A Emissions for ITE Immunity for ITE EMC and Radio Spectrum Matters EMC and Radio Spectrum Matters Radio Spectrum Matters Broadband Radio Access Networks This device complies with Directive 2014/53/EU issued by the Commission of the European Community. Manufacturer / Hersteller:

WatchGuard Technologies 505 5th Ave S. Suite 500, Seattle, WA 98104 USA Wireless Access Point Firebox T35-W and Firebox T35 802.11a,b,g,n,ac (2.4Ghz & 5GHz) Indoor Access Point Class II Radio Equipment / Funkanlage:

Type Designation / Typenbezeichnung:

Specifications / Technische Daten:

Intended Purpose / Verwendungszweck:

Equipment Class / Betriebsmittel der Klasse:

The above device complies with the essential requirements and other relevant provisions to Directive 2014/53/EU when used for its intended purpose. This equipment may be operated in the USA, Canada, & Europe Union. Warning! This is a Class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures. The frequency and maximum transmitted power limit in EU are listed as belows, 2412 - 2472 MHz: 20 dBm 5150 - 5350 MHz: 20 dBm Restrictions: France les dispositifs fonctionnant dans la bande 5150-5250 MHz sont rservs uniquement pour une utilisation lintrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux Warnung! Dies ist eine Einrichtung der Klasse A. Diese Einrichtung kann im Wohnbereich Funkstrungen verursachen. In diesem Fall kann vom Betreiber verlangt werden, angemessene Manahmen durchzufhren Einschrnkungen: Frankreich Gerte, die im Band 5150-5250 MHz ist nur fr den Innenbereich, um das Risiko von Strungen des mobilen Satelliten-Systeme, die die gleichen Kanle Signature Full Name:

Position: Manufacturing Program Manager Date: July 21, 2017 Laurence Huang 74 75 Certifications Limited Hardware Warranty This Limited Hardware Warranty (the Warranty) applies to the enclosed hardware product, not including any associated software, which is licensed pursuant to a separate end-user license agreement and warranty (the Product). BY USING THE PRODUCT, YOU (either an individual or a single entity) AGREE TO THE TERMS HEREOF. If you do not agree to these terms, please return this package, along with proof of purchase, to the authorized dealer from which you purchased it for a full refund. WatchGuard Technologies, Inc. (WatchGuard) and you agree as set forth below or on the reverse side of this card, as applicable. 1. LIMITED WARRANTY. WatchGuard warrants that upon delivery and for one (1) year thereafter (the Warranty Period): (a) the Product will be free from material defects in materials and workmanship, and (b) the Product, when properly installed and used for its intended purpose and in its intended operating environment, will perform substantially in accordance with WatchGuard applicable specifications. This warranty does not apply to any Product that has been: (i) altered, repaired or modified by any party other than WatchGuard except for the replacement or inclusion of specified components authorized in, and performed in strict accordance with, documentation provided by WatchGuard; or (ii) damaged or destroyed by force majeure events, accidents, power spikes or similar events or by any intentional, reckless or negligent acts or omissions of any party. You may have additional warranties with respect to the Product from the manufacturers of Product components. However, you agree not to look to WatchGuard for, and hereby release WatchGuard from any liability for, performance of, enforcement of, or damages or other relief on account of, any such warranties or any breach thereof. 2. REMEDIES. If any Product does not comply with the WatchGuard warranties set forth in Section 1 above, WatchGuard will, following the receipt of the product you claim is defective and at its option, either (a) repair the Product, or (b) replace the Product with a like or similar product; provided, that you will be responsible for returning the Product and for all costs of shipping and handling. Repair or replacement of the Product shall not extend the Warranty Period. Any Product, component, part or other item replaced by WatchGuard becomes the property of WatchGuard. WatchGuard shall not be responsible for return of or damage to any software, firmware, information or data contained in, stored on, or integrated with any returned Products. 3. DISCLAIMER AND RELEASE. THE WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD, AND YOUR REMEDIES, SET FORTH IN PARAGRAPHS 1 AND 2 ABOVE ARE EXCLUSIVE AND IN SUBSTITUTION FOR, AND YOU HEREBY WAIVE, DISCLAIM AND RELEASE ANY AND ALL OTHER WARRANTIES, OBLIGATIONS AND LIABILITIES OF WATCHGUARD AND ALL OTHER RIGHTS, CLAIMS AND REMEDIES YOU MAY HAVE AGAINST WATCHGUARD, EXPRESS OR IMPLIED, ARISING BY LAW OR OTHERWISE, WITH RESPECT TO ANY NONCONFORMANCE OR DEFECT IN THE PRODUCT (INCLUDING, BUT NOT LIMITED TO, ANY IMPLIED WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, ANY IMPLIED WARRANTY ARISING FROM COURSE OF 76 PERFORMANCE, COURSE OF DEALING, OR USAGE OF TRADE, ANY WARRANTY OF NONINFRINGEMENT, ANY WARRANTY OF UNINTERRUPTED OR ERROR-FREE OPERATION, ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY IN TORT, WHETHER OR NOT ARISING FROM THE NEGLIGENCE (WHETHER ACTIVE, PASSIVE OR IMPUTED) OR FAULT OF WATCHGUARD OR FROM PRODUCT LIABILITY, STRICT LIABILITY OR OTHER THEORY, AND ANY OBLIGATION, LIABILITY, RIGHT, CLAIM OR REMEDY FOR LOSS OR DAMAGE TO, OR CAUSED BY OR CONTRIBUTED TO BY, THE PRODUCT). 4. LIMITATION AND LIABILITY. WATCHGUARDS LIABILITY (WHETHER ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) WITH REGARD TO ANY PRODUCT WILL IN NO EVENT EXCEED THE PURCHASE PRICE PAID BY YOU FOR SUCH PRODUCT. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY. IN NO EVENT WILL WATCHGUARD BE LIABLE TO YOU OR ANY THIRD PARTY (WHETHER ARISING IN CONTRACT (INCLUDING WARRANTY), TORT (INCLUDING ACTIVE, PASSIVE OR IMPUTED NEGLIGENCE AND STRICT LIABILITY AND FAULT) OR OTHER THEORY) FOR COST OF COVER OR FOR ANY INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOSS OF PROFITS, BUSINESS, OR DATA) ARISING OUT OF OR IN CONNECTION WITH THIS WARRANTY OR THE USE OF OR INABILITY TO USE THE PRODUCT, EVEN IF WATCHGUARD HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THIS SHALL BE TRUE EVEN IN THE EVENT OF THE FAILURE OF ANY AGREED REMEDY. 5. MISCELLANEOUS PROVISIONS. This Warranty will be governed by the laws of the state of Washington, U.S.A., without reference to its choice of law rules. The provisions of the 1980 United Nations Convention on Contracts for the International Sales of Goods, as amended, shall not apply. You agree not to directly or indirectly transfer the Product or use of the product or associated documentation to any country to which such transfer would be prohibited by the U.S. Export laws and regulations. If any provision of this Warranty is found to be invalid or unenforceable, then the remainder shall have full force and effect and the invalid provision shall be modified or partially enforced to the maximum extent permitted by law to effectuate the purpose of this Warranty. This is the entire agreement between WatchGuard and you relating to the Product, and supersedes any prior purchase order, communications, advertising or representations concerning the Product AND BY USING THE PRODUCT YOU AGREE TO THESE TERMS. IF THE PRODUCT IS BEING USED BY AN ENTITY, THE INDIVIDUAL INDICATING AGREEMENT TO THESE TERMS BY USING THE PRODUCT REPRESENTS AND WARRANTS THAT (A) SUCH INDIVIDUAL IS DULY AUTHORIZED TO ACCEPT THE WARRANTY ON BEHALF OF THE ENTITY AND TO BIND THE ENTITY TO THE TERMS OF THIS WARRANTY; (B) THE ENTITY HAS THE FULL POWER, CORPORATE OR OTHERWISE, TO ENTER INTO THE WARRANTY AND PERFORM ITS OBLIGATIONS UNDER THE WARRANTY AND; (C) THE WARRANTY AND THE PERFORMANCE OF THE ENTITYS OBLIGATIONS UNDER THE WARRANTY DO NOT VIOLATE ANY THIRD-PARTY AGREEMENT TO WHICH THE ENTITY IS A PARTY. No change or modification of the Warranty will be valid unless it is in writing and is signed by WatchGuard. 77 WATCHGUARD TECHNICAL SUPPORT 1.877.232.3531

(U.S. and Canada)

+1.206.613.0456

(all other countries) www.watchguard.com/support ADDRESS: 505 Fifth Avenue South, Suite 500, Seattle, WA 98104 WEB: www.watchguard.com U.S. SALES: 1.800.734.9905 INTERNATIONAL SALES: +1.206.613.0895 2017 WatchGuard Technologies, Inc. All rights reserved. WatchGuard, the WatchGuard Logo, Fireware, and LiveSecurity are registered trademarks of WatchGuard Technologies, Inc. in the United States and/or other countries. All other trademarks and tradenames are the property of their respective owners. P.N. 352-T350-001_082617 Rev A