09.NGFW System Configuration

You might also like

Download as ppt, pdf, or txt
Download as ppt, pdf, or txt
You are on page 1of 20

SANGFOR NGFW

System Configuration
Training Content Training Target

License and Global 1. Know how to configurate license & global


exclusion exclusion

Log setting 1.Master how to login internal report center


2.Master how to view report in report center
3.Master how to manage the log file
4.Master how to sync log to syslog server
Library update 1.Know how to update library

Backup/restore 1.How to backup and restore configuration


configuration
Bypass/drop list 1.How to use bypass/drop list
License and global exclusion
1.License
License used to control function model.
License and global exclusion
1.License
License and global exclusion
2.Global exclusion
Global exclusion contain predefined exclusion address and custom excluded
address,we can’t delete predefined exclusion address only disable.

SG

License and global exclusion
2.Global exclusion

if customer want all control policy have no effect on some ip address or url,we can put it into
custom excluded address
Log setting
1 、 Intral report center
Log setting
2. How to view report in report center
Log setting
3. How to manage the log files
Log setting
4. How to manage the log files
Log setting
5 、 Syslog configuration
We support sync report center logs to syslog server by UDP connection
Can’t sync system log to syslog server.

SG

Library update
NGFW contain many library ,such as anti-virus database/url database/application
ident database and so on. We have someone to maintain these databases to adapt the
change of environment.

( 1 ) offline update

We can get the library and the import it to the devive by yourself before the
update Svc expiration.

( 2 ) auto update

Make sure NGFW can connect with sangfor library server,if some library change
in server ,NGFW will get the library form server autly before the update svc expiration.
Library update
( 1 ) offline update
Chose one database,and click offline update
Library update
( 2 ) auto
update
Notice :
If set auto update library,NGFW need to resolve URL,so we must set DNS in
network
Backup and restore configuration
( 1 ) Backup configuration
Backup and restore configuration
( 2 ) Restore configuration
We can restore configuration from auto backup/backup file or
restore to defaults
Bypass/drop list
When we have some trouble and we don’t know what’s wrong,we can set
bypass/drop list,we can know whitch policy may be wrong.
Question
1. License can control whitch model ?
2. One customer set as follow,can he view some data form report center?

3. Syslog support sync which logs to syslog server


www.sangfor.com

You might also like