Preface

Endian UTM Appliance is an Open Source Unified Threat Management (UTM) appliance software. This document is a concise reference to the Endian UTM Appliance web interface.

Accessing the Endian UTM Appliance GUI

To access the Endian UTM Appliance GUI is as simple as starting your browser and entering the IP address of the internal (GREEN) interface or the hostname of your Endian UTM Appliance.

Your browser will be redirected to a secure HTTPS connection (port 10443). Since Endian UTM Appliance uses a self-signed HTTPS certificate, your browser might ask you to accept the certificate during the first connection. The system will then ask for username and password. Specify “admin” as the username and provide the password you set during the installation or, if you bought an appliance, the one you got from your reseller.

You should now be looking at the start page of your Endian UTM Appliance GUI. You can immediately start exploring the different options and the information available to you through this interface. The rest of this guide follows the layout of the main navigation bar - each chapter corresponds to one of the main navigation items.

Features and enhancements in version 2.3

Quality of Service and Bandwidth Management

Traffic Shaping has been replaced by a fully configurable Quality of Service module. QoS devices, classes and rules can be defined to guarantee the best quality for VoIP phone calls and other critical applications.

Intrusion Prevention

Every snort rule can now be configured. It is possible to drop packets as well as to log intrusion attempts or to ignore a rule.

HTTP proxy with user- and group-based content filtering

The HTTP proxy does now have a more polished web interface and allows you to create user- and group-based content filter rules.

Traffic-based hotspot tickets

It is now possible to add traffic-based ticket types to your hotspot.

Revamped SMTP proxy web interface

The web interface of the SMTP proxy has been rewritten with focus on usability.

Dashboard

The main page has been replaced by a dashboard with statistics about the system and its services as well as live-graphs for incoming and outgoing traffic.

Destination NAT and Incoming Routed Traffic

In version 2.3 it is possible to add port-forwards from any zone. Port forwarding without NAT is now also supported.

Email notifications

A new notification system has been written. Emails can be sent on predefined events like the disconnection of an uplink.

SNMP support

Basic SNMP support has been added.

Commtouch RPD (optional)

Support for the Commtouch anti-spam engine has been added. This module is optional.

Sophos anti-virus (optional)

Sophos anti-virus has been added as an alternative to ClamAV. You can choose which anti-virus scanner you want to use for each service. The Sophos module is optional.

Legal notice

The Endian UTM Appliance Reference Manual 2.3 (“this document”) is copyright (c) 2009 Endian srl, Italy (“Endian“). Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the section entitled “GNU Free Documentation License”.

This document was written by (alphabetical order) Andreas Ender, Diego Gagliardo, Luca Giovenzana, Christian Graffer, Raphael Lechner, Chris Mair, Raphael Vallazza and Peter Warasin. Some parts of this document are based on the IPCop Administrative Guide by Chris Clancey, Harry Goldschmitt, John Kastner, Eric Oberlander, Peter Walker. Some parts of this document are based on the IPCop Advanced Proxy Administrative Guide by Marco Sondermann.

The information contained within this document may change from one version to the next. All programs and details contained within this document have been created to the best of our knowledge and tested carefully. However, errors cannot be completely ruled out. Therefore Endian does not express or imply any guarantees for errors within this document or consequent damage arising from the availability, performance or use of this or related material.

The use of names in general use, names of firms, trade names, etc. in this document, even without special notation, does not imply that such names can be considered as free in terms of trademark legislation and that they can be used by anyone. All trade names are used without a guarantee of free usage and might be registered trademarks. As a general rule, Endian adheres to the notation of the manufacturer. Other products mentioned here could be trademarks of the respective manufacturer.

Acknowledgments

Without the great work of the Smoothwall and then the IPCop team, neither Endian UTM Appliance nor this document would exist. Therefore we would like to thank them all for their hard work.

Thanks to Sourceforge for the hosting. Without Sourceforge we would not have the possibility to gain such a huge worldwide visibility. You are really helping us very much!

Endian web site

For more information please visit Endian‘s web site at http://www.endian.com.