Gii php bo mt vi Firewall Astaro

Astaro Security Gateway l gi phn mm thng mi c pht trin trn nn tng Firewall trn Linux l IPCop
nhng vi nhiu ci tin v tnh nng cng nh hiu nng hot ng. L mt Firewall thch hp bo v h thng
mng ca bn mt cch an ton vi chi ph rt r bi y l gi phn mm m ngun m. Tnh nng ch o ca
Astaro Security Gateway: Firewall, VPN, Internet Gateway Virus Filter, Attack Detect cng nhiu tnh nng cao
cp khc. Trong khun kh bi vit ny ti s trnh by vi cc bn cch ci t Astaro Security Gateway.
ASG V7 cung cp nhng tnh nng bo mt mnh m nh chng Spam, chng virus, lc ni dung web, pht hin v
ngn chn xm nhp bt hp php bng nhng cng ngh mi nht. ASG V7 cn c tch hp nhng chc nng
nh m ha Email, tng cng h tr VoIP, h tr xc thc TACACS+, nh tuyn OFPS ng, h tr SSL VPN
Bn c th download bn dng th ASG ti : Http:// www.Astaro.com
Vi cu trc nng cao l thnh phn b sung cho tng la, gii php c th theo di tt c lung d liu lu thng
trn cc segment t lp 2 n lp 7, pht hin cc hnh thc tn cng cha c nhn dng, ngn chn cc hnh
ng khai thc l hng bo mt trn cc ng dng...
Gii php c 2 lp :
Lp 1
Gm tng la, cng mng ring o, cc ng dng bo v nhn dng xm nhp, chng virus ly lan qua mng,
chng spam mail v kim sot truy cp web. Tng la chu trch nhim theo di nhng s kin xy ra trn ton b
mt session pht hin cc hin tng bt thng, cung cp mt s Security proxy nh: HTTP, DNS, Socks...
Cng mng ring o s h tr nhng m hnh kt ni khc nhau v hu ht chun m ha tin tin hin nay... Bo v
nhn dng xm nhp (IDS), nhn dng cc hnh thc tn cng vo l hng ng dng p dng hn 1.500 du hiu
nhn dng v quy tc. ng thi, lp ny cng chng s ly lan qua mng bng cch lc virus, worm, trojan v cc
chng trnh ph hoi qua e-mail vi s h tr ca lung SMTP v POP3, lung HTTP v FTP, t cc trnh duyt
v nhiu k thut pht hin virus khc nhau nh nhn dng bng du hiu, nhn dng tng t...
N pht hin v loi b th qung co khng mi bng nhiu phng thc nhn dng spam mail v chn thm cc
header vo e-mail my ch x l tip. Trn c s cng c qun l truy cp thng tin Internet, n gip nhn vin
qun tr c th trin khai cc chnh sch truy cp t 50 nhm website khc nhau, da trn d liu URL ln nht vi
20 triu a ch web c phn loi.
Lp 2
B sung cho tng la vi mt u th l k thut nhn dng "Anomaly detection". K thut ny hot ng trn
nguyn tc nhn dng cc hnh vi bt thng xy ra trn mng. N pht hin nhng hnh thc tn cng gy trn b
nh m (buffer-overflow) mang shellcode mi, cha tng c nhn dng; s dng cc cng dch v hp l
chuyn d liu qua tng la.
N cng pht hin nhiu bin th ca hnh thc tn cng c nhn dng, chng virus cho web, c th qut d
liu HTTP v FTP xut pht t mt web browser. Cu trc ca lp, v th, c th ngn chn cc cuc tn cng trc
khi chng n c mc tiu v c th h tr nhiu ch cng mt thit b.
Qu trnh ci t Astaro Security Gateway V7 (Step by step)
Yu cu phn cng ti thiu ci t :
- CPU : Pentium II 500 Mhz (or compatible)

- Memory : 256 Mb Ram

- Harddisk : 10 Gb IDE or SCSI hard disk drive
- CD-Rom drive : Bootable IDE or SCSI CD-Rom drive
- NIC : 2 or more PCI Ethernet Network Interface Cards

Step 1:
Khi ng my tnh t a CD Astaro Internet Security Gateway :

C 3 la chn cho bn :
- n Enter : Ci t mc nh cho h thng c 1 CPU
- G nosmp v n Enter : dnh cho h thng c nhiu b x l.
- G classic v n Enter : H thng c 1 CPU, Disable APIC (Advanced Programmable Interrupt Controller) v
ACPI (Advanced Configuration and Power Interface). Vi h thng c phn cng c, khng h tr APIC v ACPI,
chng ti khuyn co cc bn s dng la chn ny.

Cc phm s dng trong qu trnh ci t :

+ ESC : Hy b ci t
+ Cursor-Keys : Phm di chuyn ln xung, tri phi s dng khi xem License Agreement hoc la chn kiu bn
phm, ngn ng
+ TAB : Di chuyn, la chn cc danh sch, text boxes

tip tc, nhn Enter, hy b, nhn Esc.

Astaro Security Gateway Install s xut hin thng bo qu trnh ci t s xa ton b d liu v h iu hnh trn
a cng ca bn, hy chc chn rng bn khng cn d liu g quan trng trn harddisk. Nhn F8 tip tc, Esc
hy b.
Step 2 :
S dng phm di chuyn la chn dng bn phm.

Step 3 :

Detect Hardware : Astaro Security Gateway s tin hnh kim tra CPU, Hard disk, Cd-Rom, Network Cards

Thng tin v phn cng s xut hin :

Step 4:
S dng phm di chuyn la chn area, nhn Enter tip tc la chn time zone.

S dng phm di chuyn v phm Tab thip lp thi gian.

 Step 5:
La chn card mng v t a ch IP cho card mng c th truy cp v cu hnh vi giao din WebAdmin.

Nu bn mun s dng WebAdmin t mt my trm nm ngoi subnet ca bn cu hnh cho h thng, bn phi
nhp Gateway.
Step 6 :
H thng thng bo bc tip theo s xa sch d liu trong cng. y l la chn cui cng cho bn hy b vic
ci t. Nhn F8 tip tc. Esc hy b v F12 quay li Step 2.

Step 7:

Qu trnh ci t hon tt, b a CD ra khi , nhn Crtl + Alt + Del khi ng li my tnh.
Sau khi khi ng li, Astaro Security Gateway s chy ch dng lnh cho bn cu hnh ph hp vi m
hnh mng ca bn. Login bng account admin : root v pass mc nh l root. H thng s yu cu bn thay i
password.

Bn c th d dng cu hnh cho h thng qua giao din Web ti a ch ip ca card mng bn chn Step 3, cng
4444. Vd: https://192.168.2.100:4444