DOCSLIB.ORG

Wanguard Platform 3.0 User Manual

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Wanguard Platform 3.0 User Manual WANGuard Lite 4.1 User Manual WANGuard Console + WANGuard Sensor Copyright ©2010 Andrisoft SRL All rights reserved. Revision 3.00 WANGuard™ Lite 4.1 User Manual Copyright & trademark notices This editon applies to version 4.1 of the licensed program WANGuard Lite and to all subsequent releases and modifcatons untl otherwise indicated in new editons. Notices References in this publicaton to ANDRISOFT S.R.L. products, programs, or services do not imply that ANDRISOFT S.R.L. intends to make these available in all countries in which ANDRISOFT S.R.L. operates. Evaluaton and verifcaton of operaton in conjuncton with other products, except those expressly designated by ANDRISOFT S.R.L., are the user's responsibility. ANDRISOFT S.R.L. may have patents or pending patent applicatons covering subject mater in this document. Supplying this document does not give you any license to these patents. You can send license inquiries, in writng, to the ANDRISOFT S.R.L. marketng department, [email protected]. Copyright Acknowledgment © ANDRISOFT S.R.L. 2008. All rights reserved. All rights reserved. This document is copyrighted and all rights are reserved by ANDRISOFT S.R.L. No part of this document may be reproduced or transmited in any form or by any means, electronic or mechanical, including photocopying and recording, or by any informaton storage and retrieval system without the permission in writng from ANDRISOFT S.R.L. The informaton contained in this document is subject to change without notce. If you fnd any problems in the documentaton, please report them to us in writng. ANDRISOFT S.R.L. will not be responsible for any loss, costs or damages incurred due to the use of this documentaton. WANGuard Lite is a SOFTWARE PRODUCT of ANDRISOFT S.R.L. ANDRISOFT and WANGuard are trademarks of ANDRISOFT S.R.L. Other company, product or service names may be trademarks or service marks of others. ANDRISOFT S.R.L. Str. Lunei L30 Ap. 11, 300109 Timisoara, Timis, Romania phone: +40721250246; fax: +40256209738 Sales: [email protected] Technical Support: [email protected] Website: htp://www.andrisof.com © Copyright ANDRISOFT S.R.L. 2008. All rights reserved. - 1 - WANGuard™ Lite 4.1 User Manual Table of Contents 1. Traffic Monitoring and Traffic Accounting with WANGuard™ Lite.............................................. 4 Why WANGuard™ Lite Is Important..................................................................................................................................4 What WANGuard™ Lite Can Do For You.......................................................................................................................... 4 WANGuard™ Lite Components......................................................................................................................................... 4 WANGuard Sensor....................................................................................................................................... 5 WANGuard Console..................................................................................................................................... 5 2. Network Basics You Should Be Aware Of..................................................................................... 7 Who Should Read This Section.........................................................................................................................................7 A Short Introduction To IP Addresses & Classes............................................................................................................ 7 IP Addresses................................................................................................................................................ 7 IP Classes.................................................................................................................................................... 8 Subnet CIDR Notation.................................................................................................................................. 9 3. Getting Started with WANGuard™ Lite........................................................................................10 A First Look at the WANGuard Console......................................................................................................................... 10 West Panel................................................................................................................................................. 10 Center Panel............................................................................................................................................... 10 South Panel................................................................................................................................................ 10 4. Reports - Autonomous Systems.................................................................................................. 12 Autonomous Systems...................................................................................................................................................... 12 5. Reports - Dashboards................................................................................................................... 13 Managing Dashboards..................................................................................................................................................... 13 Managing Widgets............................................................................................................................................................ 14 6. Reports - Device Groups.............................................................................................................. 15 All Components and Device Group Tabs ...................................................................................................................... 15 WANGuard Console System...................................................................................................................... 16 Active WANGuard Sniff Systems................................................................................................................ 16 Active WANGuard Flow Systems............................................................................................................... 17 WANGuard Sensor Tabs...................................................................................................................................................18 Sensor Graphs .......................................................................................................................................... 19 Sensor Tops................................................................................................................................................ 20 Protocols Distribution.................................................................................................................................. 22 7. Reports - IP Addresses & IP Groups............................................................................................23 IP Graphs........................................................................................................................................................................... 24 IP Accounting ................................................................................................................................................................... 25 8. Reports – Logs & Events.............................................................................................................. 27 Events Logs.......................................................................................................................................................................27 9. Installation..................................................................................................................................... 28 System Requirements...................................................................................................................................................... 28 WANGuard Sensor System Requirements for 1 Gigabit Network Interface...............................................28 WANGuard Console System Requirements for up to 5 WANGuard Sensors............................................. 29 Software Installation & Download................................................................................................................................... 30 Opening WANGuard Console for the first time..............................................................................................................30 Managing WANGuard Console Users............................................................................................................................. 31 10.IP Zones Setup.............................................................................................................................. 34 Understanding IP Zones...................................................................................................................................................34 Inheritance.................................................................................................................................................. 34 Changing Description, Duplicating & Deleting IP Zones............................................................................. 35 - 2 - WANGuard™ Lite 4.1 User Manual IP Zone Configuration.....................................................................................................................................................
Load more

Recommended publications
  • CA Network Flow Analysis Release Notes
    CA Network Flow Analysis Release Notes Release 9.1.3 This Documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as the “Documentation”) is for your informational purposes only and is subject to change or withdrawal by CA at any time. This Documentation may not be copied, transferred, reproduced, disclosed, modified or duplicated, in whole or in part, without the prior written consent of CA. This Documentation is confidential and proprietary information of CA and may not be disclosed by you or used for any purpose other than as may be permitted in (i) a separate agreement between you and CA governing your use of the CA software to which the Documentation relates; or (ii) a separate confidentiality agreement between you and CA. Notwithstanding the foregoing, if you are a licensed user of the software product(s) addressed in the Documentation, you may print or otherwise make available a reasonable number of copies of the Documentation for internal use by you and your employees in connection with that software, provided that all CA copyright notices and legends are affixed to each reproduced copy. The right to print or otherwise make available copies of the Documentation is limited to the period during which the applicable license for such software remains in full force and effect. Should the license terminate for any reason, it is your responsibility to certify in writing to CA that all copies and partial copies of the Documentation have been returned to CA or destroyed. TO THE EXTENT PERMITTED BY APPLICABLE LAW, CA PROVIDES THIS DOCUMENTATION “AS IS” WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NONINFRINGEMENT.
    [Show full text]
  • Security Analysis of Firefox Webextensions
    6.857: Computer and Network Security Due: May 16, 2018 Security Analysis of Firefox WebExtensions Srilaya Bhavaraju, Tara Smith, Benny Zhang srilayab, tsmith12, felicity Abstract With the deprecation of Legacy addons, Mozilla recently introduced the WebExtensions API for the development of Firefox browser extensions. WebExtensions was designed for cross-browser compatibility and in response to several issues in the legacy addon model. We performed a security analysis of the new WebExtensions model. The goal of this paper is to analyze how well WebExtensions responds to threats in the previous legacy model as well as identify any potential vulnerabilities in the new model. 1 Introduction Firefox release 57, otherwise known as Firefox Quantum, brings a large overhaul to the open-source web browser. Major changes with this release include the deprecation of its initial XUL/XPCOM/XBL extensions API to shift to its own WebExtensions API. This WebExtensions API is currently in use by both Google Chrome and Opera, but Firefox distinguishes itself with further restrictions and additional functionalities. Mozilla’s goals with the new extension API is to support cross-browser extension development, as well as offer greater security than the XPCOM API. Our goal in this paper is to analyze how well the WebExtensions model responds to the vulnerabilities present in legacy addons and discuss any potential vulnerabilities in the new model. We present the old security model of Firefox extensions and examine the new model by looking at the structure, permissions model, and extension review process. We then identify various threats and attacks that may occur or have occurred before moving onto recommendations.
    [Show full text]
  • Inlined Information Flow Monitoring for Javascript
    Inlined Information Flow Monitoring for JavaScript Andrey Chudnov David A. Naumann Stevens Institute of Technology Stevens Institute of Technology Hoboken, NJ 07030 USA Hoboken, NJ 07030 USA [email protected] [email protected] ABSTRACT JS engines are highly engineered for performance, which has Extant security mechanisms for web apps, notably the\same- led some researchers to argue for inlined monitoring for IFC. origin policy", are not sufficient to achieve confidentiality The main contribution of this paper is an inlined IFC mon- and integrity goals for the many apps that manipulate sen- itor that enforces non-interference for apps written in JS. sitive information. The trend in web apps is \mashups" We present the main design decisions and rationale, together which integrate JavaScript code from multiple providers in with technical highlights and a survey of state of the art al- ways that can undercut existing security mechanisms. Re- ternatives. The tool is evaluated using synthetic case studies searchers are exploring dynamic information flow controls and performance benchmarks. (IFC) for JavaScript, but there are many challenges to achiev- ing strong IFC without excessive performance cost or im- On IFC. Browsers and other platforms currently provide practical browser modifications. This paper presents an in- isolation mechanisms and access controls. Pure isolation lined IFC monitor for ECMAScript 5 with web support, goes against integration of app code from multiple providers. using the no-sensitive-upgrade (NSU) technique, together Access controls can be more nuanced, but it is well-known with experimental evaluation using synthetic mashups and that access control policies are safety properties whereas IF performance benchmarks.
    [Show full text]
  • Designing a Browser to Benefit from Multi-Core Silicon
    Designing a Browser to Benefit from Multi-core Silicon Ekioh Ltd, Cambridge UK. [email protected] Abstract This paper investigates the impact of the evolution in processor technology upon HTML browser performance, highlighting some limitations in current browser design and ways in which these limitations can be overcome. It asserts that overcoming these limitations is key to offering 4K UIs on mass-market consumer products in the very near future. Introduction HTML browsers are increasingly being used for Trends of CE Processor Speeds application rendering and user interface (UI) 25 presentation. The driving reasons behind this are that single core dual core quad core browsers reduce UI authoring complexity and provide a 20 level of hardware abstraction which enables authoring to happen in parallel with hardware design. 15 Browser technology has also allowed the application 10 authoring community to grow beyond embedded DMIPS Headline Performance software engineers to include creative designers. This has 5 led to a marked improvement in the visual quality of user Per core Performance interfaces and the look and feel of applications. 0 This flexibility and increased visual quality comes at a Time → cost; the browser is one of the most demanding components within a device and achieving the necessary The headline processing speed of multi-core devices responsiveness directly drives CPU selection benefits from increases in the number of cores and, requirements. indirectly, from reductions in process size. Year on year improvements of around 30% were achieved in headline processing speed over a five year period despite the Processor evolution relatively small performance improvements of each core.
    [Show full text]
  • On the Disparity of Display Security in Mobile and Traditional Web Browsers
    On the Disparity of Display Security in Mobile and Traditional Web Browsers Chaitrali Amrutkar, Kapil Singh, Arunabh Verma and Patrick Traynor Converging Infrastructure Security (CISEC) Laboratory Georgia Institute of Technology Abstract elements. The difficulty in efficiently accessing large pages Mobile web browsers now provide nearly equivalent fea- on mobile devices makes an adversary capable of abusing tures when compared to their desktop counterparts. How- the rendering of display elements particularly acute from a ever, smaller screen size and optimized features for con- security perspective. strained hardware make the web experience on mobile In this paper, we characterize a number of differences in browsers significantly different. In this paper, we present the ways mobile and desktop browsers render webpages that the first comprehensive study of the display-related security potentially allow an adversary to deceive mobile users into issues in mobile browsers. We identify two new classes of performing unwanted and potentially dangerous operations. display-related security problems in mobile browsers and de- Specifically, we examine the handling of user interaction vise a range of real world attacks against them. Addition- with overlapped display elements, the ability of malicious ally, we identify an existing security policy for display on cross-origin elements to affect the placement of honest el- desktop browsers that is inappropriate on mobile browsers. ements and the ability of malicious cross-origin elements Our analysis is comprised of eight mobile and five desktop to alter the navigation of honest parent and descendant el- browsers. We compare security policies for display in the ements. We then perform the same tests against a number candidate browsers to infer that desktop browsers are signif- of desktop browsers and find that the majority of desktop icantly more compliant with the policies as compared to mo- browsers are not vulnerable to the same rendering issues.
    [Show full text]
  • Presto: the Definitive Guide
    Presto The Definitive Guide SQL at Any Scale, on Any Storage, in Any Environment Compliments of Matt Fuller, Manfred Moser & Martin Traverso Virtual Book Tour Starburst presents Presto: The Definitive Guide Register Now! Starburst is hosting a virtual book tour series where attendees will: Meet the authors: • Meet the authors from the comfort of your own home Matt Fuller • Meet the Presto creators and participate in an Ask Me Anything (AMA) session with the book Manfred Moser authors + Presto creators • Meet special guest speakers from Martin your favorite podcasts who will Traverso moderate the AMA Register here to save your spot. Praise for Presto: The Definitive Guide This book provides a great introduction to Presto and teaches you everything you need to know to start your successful usage of Presto. —Dain Sundstrom and David Phillips, Creators of the Presto Projects and Founders of the Presto Software Foundation Presto plays a key role in enabling analysis at Pinterest. This book covers the Presto essentials, from use cases through how to run Presto at massive scale. —Ashish Kumar Singh, Tech Lead, Bigdata Query Processing Platform, Pinterest Presto has set the bar in both community-building and technical excellence for lightning- fast analytical processing on stored data in modern cloud architectures. This book is a must-read for companies looking to modernize their analytics stack. —Jay Kreps, Cocreator of Apache Kafka, Cofounder and CEO of Confluent Presto has saved us all—both in academia and industry—countless hours of work, allowing us all to avoid having to write code to manage distributed query processing.
    [Show full text]
  • Superhacks: Exploring and Preventing Vulnerabilities in Browser Binding
    Short Paper: Superhacks Exploring and Preventing Vulnerabilities in Browser Binding Code Fraser Brown Stanford University [email protected] Abstract Browser binding code is different from—and more com- In this paper, we analyze security vulnerabilities in the binding plicated than—other multi-language systems such as foreign layer of browser code, and propose a research agenda to function interfaces (FFIs). This difference arises for three main prevent these weaknesses with (1) static bug checkers and (2) reasons. First, browser binding code must reconcile different new embedded domain specific languages (EDSLs). Browser runtimes instead of making simple library calls. Second, since vulnerabilities may leak browsing data and sometimes allow the binding layer sits between JavaScript application code and attackers to completely compromise users’ systems. Some of the rest of the browser, browsers often rely on binding-layer these security holes result from programmers’ difficulties with code to implement the same-origin policy [2]. For example, managing multiple tightly-coupled runtime systems—typically binding code must enforce isolation between the JavaScript JavaScript and C++. In this paper, we survey the vulnerabilities running in a page and any cross-origin iframes the page may in code that connects C++ and JavaScript, and explain how embed. Finally, the binding layer must defend against poten- they result from differences in the two languages’ type systems, tially malicious code, since the JavaScript running in browsers memory models, and control flow constructs. With this data, we comes from many disparate parties. design a research plan for using static checkers to catch bugs A buggy binding layer introduces browser vulnerabilities.
    [Show full text]
  • Stealthwatch Release Notes V7.3.0
    Cisco Stealthwatch Release Notes 7.3.0 Table of Contents Introduction 4 Overview 4 Terminology 4 Before You Update 4 Software Version 4 3rd Party Applications 5 Hardware 5 Browsers 5 Alternative Access 5 Hardware 6 Virtual Appliances 6 Alternative Method 6 After You Update 7 What's New 8 Stealthwatch Data Store 8 Data Store Considerations 8 Data Store Architecture 9 User Password Validation Requirements and Enhancements 9 Response Management 10 Rules 11 Actions 11 Exporters 12 Interfaces 12 Customer Success Metrics 12 SMC Failover 13 Configuring Failover 13 Primary and Secondary Roles 14 © 2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 2 - Cisco Security Services Exchange 14 SecureX Integration Enhancements 15 Cognitive Integration Enhancements 15 Primary Admin 15 Stealthwatch CIMC and BIOS Firmware Update SWU (M5 Hardware Only) 16 Downloading 16 Installing 16 Contacting support 17 What's Been Fixed 18 Version 7.3.0 18 Known Issues 20 Change Log 27 Release Support Information 28 © 2021 Cisco Systems, Inc. and/or its affiliates. All rights reserved. - 3 - Introduction Introduction Overview This document provides information on new features and improvements, bug fixes, and known issues for the Stealthwatch v7.3.0 release. For additional information about Stealthwatch, go to cisco.com. Terminology This guide uses the term “appliance” for any Stealthwatch product, including virtual products such as the Stealthwatch Flow Sensor Virtual Edition (VE). A "cluster" is your group of Stealthwatch appliances that are managed by the Stealthwatch Management Console (SMC). As a subset, a "Data Store cluster" is your group of Data Node appliances that comprise your Data Store.
    [Show full text]
  • Information Flow Control for Event Handling and the DOM in Web Browsers
    Information Flow Control for Event Handling and the DOM in Web Browsers Vineet Rajani Abhishek Bichhawat Deepak Garg Christian Hammer MPI-SWS, Germany Saarland University, Germany MPI-SWS, Germany Saarland University, Germany [email protected] [email protected] [email protected] [email protected] Abstract—Web browsers routinely handle private informa- party code to confidential resources. Although sometimes tion. Owing to a lax security model, browsers and JavaScript provably secure [11], these systems restrict third-party code in particular, are easy targets for leaking sensitive data. Prior to subsets of HTML and JS to enable analysis. work has extensively studied information flow control (IFC) as a mechanism for securing browsers. However, two central More generally, all data protection mechanisms discussed aspects of web browsers — the Document Object Model (DOM) above implement some form of one-time access control and the event handling mechanism — have so far evaded thor- on data available to third-party code. As such, they are ough scrutiny in the context of IFC. This paper advances the completely ineffective when the third-party code legitimately state-of-the-art in this regard. Based on standard specifications needs confidential data to provide functionality, but must and the code of an actual browser engine, we build formal models of both the DOM (up to Level 3) and the event handling be prevented from disclosing it in unexpected ways. In- loop of a typical browser, enhance the models with fine-grained formation flow control (IFC) within the web browser is an taints and checks for IFC, prove our enhancements sound and obvious, holistic method to solve this problem.
    [Show full text]
  • The Total Economic Impact™ of Microsoft Internet Explorer 11 Streamlined Upgrade and Cost Savings Position Companies for the Future
    A Forrester Total Economic Project Director: Impact™ Study Jonathan Lipsitz Commissioned By Microsoft Project Contributor Adrienne Capaldo March 2015 The Total Economic Impact™ Of Microsoft Internet Explorer 11 Streamlined Upgrade And Cost Savings Position Companies For The Future Table Of Contents Executive Summary ............................................................................. 3 Disclosures .......................................................................................... 4 TEI Framework And Methodology ........................................................ 6 The Current State Of Internet Explorer 11 In The Marketplace ............ 7 Analysis .............................................................................................. 10 Financial Summary............................................................................. 22 Microsoft Internet Explorer 11: Overview .......................................... 23 Appendix A: Composite Organization Description ............................ 24 Appendix B: Total Economic Impact™ Overview .............................. 25 Appendix C: Forrester And The Age Of The Customer ..................... 26 Appendix D: Glossary ........................................................................ 27 Appendix E: Endnotes ....................................................................... 27 ABOUT FORRESTER CONSULTING Forrester Consulting provides independent and objective research-based consulting to help leaders succeed in their organizations. Ranging in scope from
    [Show full text]
  • Information-Flow-Based Access Control for Web Browsers
    IEICE TRANS. INF. & SYST., VOL.E92–D, NO.5 MAY 2009 836 PAPER Special Section on Information and Communication System Security Information-Flow-Based Access Control for Web Browsers Sachiko YOSHIHAMA†,††a), Takaaki TATEISHI†, Naoshi TABUCHI†, Nonmembers, and Tsutomu MATSUMOTO††, Member SUMMARY The emergence of Web 2.0 technologies such as Ajax and box holds a DOM (Document Object Model) tree repre- Mashup has revealed the weakness of the same-origin policy [1], the current senting an HTML document. The same-origin policy pro- de facto standard for the Web browser security model. We propose a new hibits access between DOMs or JavaScript objects that be- browser security model to allow fine-grained access control in the client- ff side Web applications for secure mashup and user-generated contents. We long to di erent origins. External script files imported into propose a browser security model that is based on information-flow-based the HTML document by the <script src=’...’ / > access control (IBAC) to overcome the dynamic nature of the client-side elements are regarded as part of the HTML document, and Web applications and to accurately determine the privilege of scripts in the thus run within the same sandbox as the main document. event-driven programming model. key words: Web security, browser security, access control, information- The XMLHttpRequest (XHR) is a de facto standard flow control API that is implemented in most Web browsers. XHR al- lows a client-side script to issue an arbitrary HTTP request 1. Introduction to a remote server. The same-origin policy is also applied to XHR, which means an HTTP request can only be issued to a server that belong to the same-origin as the client-side Ajax offers new modes of Web application construction in- content.
    [Show full text]
  • Glossary.Pdf
    2 Contents 1 Glossary 4 3 1 Glossary Technologies Akonadi The data storage access mechanism for all PIM (Personal Information Manager) data in KDE SC 4. One single storage and retrieval system allows efficiency and extensibility not possible under KDE 3, where each PIM component had its own system. Note that use of Akonadi does not change data storage formats (vcard, iCalendar, mbox, maildir etc.) - it just provides a new way of accessing and updating the data.</p><p> The main reasons for design and development of Akonadi are of technical nature, e.g. having a unique way to ac- cess PIM-data (contacts, calendars, emails..) from different applications (e.g. KMail, KWord etc.), thus eliminating the need to write similar code here and there.</p><p> Another goal is to de-couple GUI applications like KMail from the direct access to external resources like mail-servers - which was a major reason for bug-reports/wishes with regard to perfor- mance/responsiveness in the past.</p><p> More info:</p><p> <a href=https://community.kde.org/KDE_PIM/Akonadi target=_top>Akonadi for KDE’s PIM</a></p><p> <a href=https://en.wikipedia.org/wiki/Akonadi target=_top>Wikipedia: Akonadi</a></p><p> <a href=https://techbase.kde.org/KDE_PIM/Akonadi target=_top>Techbase - Akonadi</a> See Also "GUI". See Also "KDE". Applications Applications are based on the core libraries projects by the KDE community, currently KDE Frameworks and previously KDE Platform.</p><p> More info:</p><p> <a href=https://community.kde.org/Promo/Guidance/Branding/Quick_Guide/ target=_top>KDE Branding</a> See Also "Plasma".
    [Show full text]