天清汉马USG一体化安全网关_快速安装指南

天清汉马USG防火墙快速安装指南

北京启明星辰信息安全技术有限公司

Beijing Venus Information Security Inc.

二零一一年十一月

天清汉马USG

快速安装指南

手册版本V4.0

产品版本V2.6.4.0

资料状态发行

版权声明

启明星辰公司版权所有，并保留对本手册及本声明的最终解释权和修改权。

本手册的版权归启明星辰公司所有。未得到启明星辰公司书面许可，任何人不得以任何方式或形式对本手册内的任何部分进行复制、摘录、备份、修改、传播、翻译成其他语言、将其部分或全部用于商业用途。

免责声明

本手册依据现有信息制作，其内容如有更改，恕不另行通知。启明星辰公司在编写该手册的时候已尽最大努力保证其内容准确可靠，但启明星辰公司不对本手册中的遗漏、不准确或错误导致的损失和损害承担责任。

User’s Manual Copyright and Disclaimer

Copyright

Copyright Venus Info Security Inc. All rights reserved.

The copyright of this document is owned by Venus Info Security Inc. Without the prior written permission obtained from Venus Info Security Inc., this document shall not be reproduced and excerpted in any form or by any means, stored in a retrieval system, modified, distributed and translated into other languages, applied for a commercial purpose in whole or in part.

Disclaimer

This document and the information contained herein is provided on an “AS IS”basis. Venus Info Security Inc. may make improvement or changes in this document, at any time and without notice and as it sees fit. The information in this document was prepared by Venus Info Tech Inc. with reasonable care and is believed to be accurate. However, Venus Info Security Inc. shall not assume responsibility for losses or damages resulting from any omissions, inaccuracies, or errors contained herein.

副本发布声明

启明星辰公司的USG产品正常运行时，包含3款GPL协议的软件（linux、zebra、OpenLDAP）。启明星辰公司愿意将GPL软件提供给已经购买产品的且愿意遵守GPL协议的客户，请需要GPL软件的客户提供（1）已经购买的产品的序列号，（2）有效送达GPL软件地址和联系人，包括但不限于姓名、公司、电话、电子邮箱、地址、邮编等；（3）人民币100元的光盘费和快递费，客户即可获得产品所包含的GPL软件。

第1章软件安装 ................................................................................................... 1-2 1.1 准备条件 ........................................................................................................... 1-2

1.2 天清集中管理与数据分析中心安装过程 ....................................................... 1-2

1.2.1 MSDE数据库................................................................................................................ 1-3

1.2.2天清集中管理与数据分析中心................................................................................... 1-4 1.3 管理配置 ........................................................................................................... 1-7

1.3.1配置数据库服务器....................................................................................................... 1-8

1.3.2配置入库缓冲文件路径............................................................................................... 1-9

1.3.3配置声音报警............................................................................................................... 1-9第2章软件卸载 ................................................................................................. 2-11

2.1 天清集中管理与数据分析中心卸载过程 ..................................................... 2-11第3章硬件安装 ................................................................................................. 3-12

3.1 准备条件 ......................................................................................................... 3-12 3.2 标识说明 ......................................................................................................... 3-12

3.3 设备安装 ......................................................................................................... 3-14

3.3.1模块化设备安装......................................................................................................... 3-14

3.3.2 10000E设备安装 ........................................................................................................ 3-14第4章快速配置 ................................................................................................. 4-15

4.1 设备默认配置 ................................................................................................. 4-15

4.1.1管理口的默认配置..................................................................................................... 4-15

4.1.2默认管理员用户......................................................................................................... 4-15 4.2 Web快速配置.................................................................................................. 4-15

4.2.1登录设备..................................................................................................................... 4-15

4.2.2语言配置..................................................................................................................... 4-17

4.2.3配置路由模式............................................................................................................. 4-18

4.2.4配置桥模式................................................................................................................. 4-24

4.2.5配置安全策略............................................................................................................. 4-30

4.2.6配置NAT .................................................................................................................... 4-31 4.3 天清集中管理与数据分析中心快速配置 ..................................................... 4-32

4.3.1登录集中管理中心..................................................................................................... 4-32

4.3.2添加设备/设备组........................................................................................................ 4-33

4.3.3集中管理..................................................................................................................... 4-34

4.3.4单机管理..................................................................................................................... 4-34

4.3.5升级维护..................................................................................................................... 4-34第5章软件升级 ................................................................................................. 5-36

5.1 通过Web升级................................................................................................ 5-36