คู่มือผู้ใช้ WatchGuard Firebox M390 อุปกรณ์รักษาความปลอดภัยเครือข่าย/ไฟร์วอลล์

1. บทนำ

This manual provides essential instructions for the installation, operation, and maintenance of the WatchGuard Firebox M390 Network Security/Firewall Appliance. The Firebox M390 is designed to deliver robust network security for small to midsize businesses and distributed enterprises.

คุณสมบัติที่สำคัญ ได้แก่:

• Enterprise-grade prevention, detection, correlation, and response capabilities.
• Integration with WatchGuard Cloud for network activity and security event visibility.
• Built-in compliance reports for standards like PCI and HIPAA.
• High firewall throughput of up to 18 Gbps and UTM throughput up to 2.4 Gbps with all security services enabled.

2. เนื้อหาบรรจุภัณฑ์

ตรวจสอบว่ามีส่วนประกอบทั้งหมดอยู่ในแพ็คเกจ:

• WatchGuard Firebox M390 Appliance
• สายไฟ
• Rack Mount Kit (screws may be included separately or require user-supplied hardware)
• คู่มือเริ่มต้นอย่างรวดเร็ว
• Software License Information (for Basic Security Suite)

Figure 2.1: WatchGuard Basic Security Suite packaging, indicating the included software license.

3. การตั้งค่าและการติดตั้ง

3.1 การติดตั้งทางกายภาพ

The Firebox M390 is designed for rack-mounting. Ensure adequate ventilation around the appliance.

1. Secure the rack mount brackets to the sides of the Firebox M390 using the provided screws.
2. Mount the appliance into a standard 19-inch server rack. Ensure proper rack screws are used to secure the device firmly.
3. Connect the power cord to the appliance and then to a grounded power outlet.

Figure 3.1: Front panel of the WatchGuard Firebox M390, showing network ports and indicators.

Figure 3.2: Rear panel of the WatchGuard Firebox M390, showing power input and cooling fans.

3.2 การเชื่อมต่อเครือข่าย

The Firebox M390 features 8x 1 Gigabit Ethernet ports. Connect your network cables as follows:

• Connect the internet-facing network cable to the designated WAN port (typically port 0 or 1, refer to the Quick Start Guide for specific port assignments).
• Connect your internal network switch or devices to the remaining LAN ports.
• The appliance also includes 1 serial and 2 USB ports for management and peripheral connections.

3.3 การกำหนดค่าเริ่มต้น

Refer to the WatchGuard Quick Start Guide for detailed instructions on initial network configuration and accessing the management interface (WatchGuard System Manager or web UI). WatchGuard Cloud provides real-time visibility and management capabilities.

4. Operating the Firebox M390

4.1 คุณสมบัติด้านความปลอดภัย

The Firebox M390 provides comprehensive security functionalities:

• ไฟร์วอลล์: Stateful packet inspection, TLS decryption, proxy firewall.
• Application Proxies: HTTP, HTTPS, FTP, DNS, TCP/UDP, POP3S, SMTPS, IMAPS, and Explicit Proxy.
• การป้องกันภัยคุกคาม: Defends against DoS attacks, fragmented & malformed packets, and blended threats.
• ตัวเลือกการกรอง: Browser Safe Search, Google for Business.
• วีพีเอ็น: Site-to-Site VPN (IKEv2, IPSec, Policy and Route Based Tunnels, TLS hub and spoke) and Remote Access VPN (IKEv2, IPSec, L2TP, TLS).

Figure 4.1: Detailed list of security features supported by the Firebox M390.

Figure 4.2: Comparison of security features included in Basic Security and Total Security Suites for Firebox solutions.

4.2 การกำหนดค่าเครือข่าย

The Firebox M390 supports various networking capabilities:

• SD-WAN: Multi-WAN failover, dynamic path selection, jitter/loss/latency measurement.
• Dynamic Routing: RIP, OSPF, BGP.
• ความพร้อมใช้งานสูง: Active/passive, active/active configurations.
• คุณภาพการบริการ: 802.1Q, DSCP, IP Precedence.
• การจัดการการจราจร: Policy or application-based.
• การกำหนดที่อยู่ IP: Static, DHCP (server, client, relay), PPPoE, DynDNS.
• แนท: Static, dynamic, 1:1, IPSec traversal, policy-based.
• การรวมลิงค์: 802.3ad dynamic, static, active/backup.

4.3 การติดตามและรายงานผล

WatchGuard Cloud provides comprehensive visibility into network activity and security events. It includes:

• Logging and Notifications: WatchGuard Cloud & Dimension, Syslog, SNMP v2/v3.
• การรายงาน: Over 100 pre-defined reports, executive summary, and visibility tools.

5. การบำรุงรักษา

Regular maintenance ensures optimal performance and longevity of your Firebox M390 appliance.

• การอัปเดตซอฟต์แวร์: Regularly check for and apply the latest firmware and security updates through the WatchGuard management interface to ensure protection against emerging threats.
• การตรวจร่างกาย: Periodically inspect the appliance for dust accumulation, especially around the ventilation areas and fans. Ensure proper airflow is maintained.
• การกำหนดค่าการสำรองข้อมูล: Regularly back up your appliance configuration settings.
• สภาพแวดล้อม : Ensure the appliance operates within recommended temperature and humidity ranges.

6 การแก้ไขปัญหา

This section addresses common issues. For more complex problems, refer to the WatchGuard support documentation or contact technical support.

• ไม่มีไฟฟ้า:
  • Verify the power cord is securely connected to both the appliance and a working power outlet.
  • Check the power indicator light on the front panel.
• ปัญหาการเชื่อมต่อเครือข่าย:
  • Ensure all Ethernet cables are properly connected to the correct ports.
  • Check the link/activity lights on the Ethernet ports.
  • Verify network configuration settings in the management interface.
• ประสิทธิภาพการทำงานช้า:
  • Review the throughput specifications in Section 7.1 to ensure your usage is within the appliance's capabilities.
  • Check WatchGuard Cloud for any alerts or high resource utilization.
• Rack Mounting Issues:
  • Ensure appropriate rack screws are used and securely fastened to prevent movement.

7. ข้อมูลจำเพาะ

7.1 Performance and Capacity

Figure 7.1: Throughput and capacity comparison between Firebox M290 and M390 models.

7.2 Physical and Environmental

7.3 การรับรอง

• ความปลอดภัย: Pending: Common Criteria, FIPS 140-3
• ความปลอดภัย: NRTL/CB
• เครือข่าย: IPv6 Ready Gold (routing)
• Hazardous Substance Control: WEEE, RoHS, ถึง

8. การรับประกันและการสนับสนุน

The WatchGuard Firebox M390 typically includes a 1-year Basic Security Suite, which provides access to essential security services and standard support. For detailed warranty information and terms of service, please refer to the documentation included with your product or visit the official WatchGuard webเว็บไซต์.

For technical assistance, product registration, and access to the latest software updates, please visit the WatchGuard support portal. WatchGuard Cloud also offers resources for monitoring and managing your appliance.