Select System from the menu bar at the top of the screen.
The following links will appear in a submenu on the left side of the screen. They allow for basic administration and monitoring of your Endian UTM Appliance.
Each link will be explained individually in the following sections.
New in version 2.3.
Select System from the menu bar at the top of the screen, then select Dashboard from the submenu on the left side of the screen.
This page displays an overview of the uplink connection(s) and general system health. It consists of five sections:
The first section has the name of your Endian UTM Appliance. Here you can see some information about your installation:
In this second section you can see the load or usage of your hardware:
In this section you can see information about the most important services that are installed on your Endian UTM Appliance. Each services provides information about the last hour as well as for the last 24 hours. Currently these are the supported services:
Each subsection can be collapsed or expanded by clicking on the service name. If you find strange numbers in the statistics you can click on the Live log link of the respective service and the Live Log Viewer will pop up and show you what is going on right now.
This section is divided into two subsections. The first section lists all known network interfaces, their status and how much traffic is passing through them in real-time. The checkboxes can be used to specify which interfaces should be shown in the second subsection.
The second subsection is made of two charts. The first chart shows the incoming traffic for each interface that has been selected in subsection one. The second chart shows the outgoing traffic. Both charts are updated in real-time.
Note
It is not possible to select more than six interfaces to be shown in the charts.
The last section shows a table detailing the connection status of each uplink. Of particular interest is the status field of each individual uplink:
Each uplink can be operated in either managed mode (default) or manual mode. In managed mode Endian UTM Appliance monitors and restarts the uplink automatically when needed. If managed mode is disabled, the uplink can be activated or deactivated manually. There will be no automatic reconnection attempt if the connection is lost. By clicking on the reconnect link you can restart an uplink. This can be used for troubleshooting.
Select System from the menu bar at the top of the screen, then select Network configuration from the submenu on the left side of the screen.
Network and interface configuration is fast and easy with the wizard provided in this section. The wizard is divided into steps: you can navigate back and forth using the <<< and >>> buttons. You can freely navigate all steps and decide to cancel your actions at any moment. Only in the last step you will be asked to confirm the new settings. If you confirm, the new settings will be applied. This might take some time during which the web interface might not respond.
Following is a detailed list of each wizard step.
When Endian UTM Appliance was installed, the trusted network interface (called the GREEN interface) has already been chosen and set up.
This screen allows to choose the untrusted network interface (called the RED interface): the one that connects your Endian UTM Appliance to the “outside” (typically the uplink to your internet provider). Endian UTM Appliance does support the following types of RED interfaces:
Endian UTM Appliance borrows IPCop’s idea of different zones. At this point you’ve already encountered the two most important zones:
This step allows you to add one or two additional zones, provided you have enough interfaces. Available zones are:
Note
One network interface is reserved for the GREEN zone. Another one may already be assigned to the RED zone if you have selected a RED interface type that requires a network card. This might limit your choices here to the point that you cannot choose an ORANGE or BLUE zone due to lack of additional network interfaces.
This step allows you to configure the GREEN zone and any additional zone you might have set up in the previous step (ORANGE or BLUE).
Each zone is configured in its own section with the following options:
All shown interfaces are labeled with their PCI identification number, the device description as returned by lspci and their MAC addresses. A symbol shows the current link status: a tickmark shows that the link is active, an X means there is no link and a question mark will tell you that the driver does not provide this information.
Note
Endian UTM Appliance internally handles all zones as bridges, regardless of the number of assigned interfaces. Therefore the Linux name of the interfaces is brX, not ethX.
Additionally, the system’s host and domain name can be set at the bottom of the screen.
You need to use IP addresses in different network segments for each interface, for example:
IP = 192.168.0.1, network mask = /24 - 255.255.255.0 for GREEN
IP = 192.168.10.1, network mask = /24 - 255.255.255.0 for ORANGE
IP = 10.0.0.1, network mask = /24 - 255.255.255.0 for BLUE
Note
It is suggested to follow the standards described in RFC 1918 and use only IP addresses contained in the networks reserved for private use by the Internet Assigning Numbers Authority (IANA):
10.0.0.0 - 10.255.255.255 (10.0.0.0/8), 16,777,216 addresses
172.16.0.0 - 172.31.255.255 (172.16.0.0/12), 1,048,576 addresses
192.168.0.0 - 192.168.255.255 ( 192.168.0.0/16), 65,536 addresses
The first and the last IP address of a network segment are the network address and the broadcast address respectively and must not be assigned to any device.
This step allows you to configure the RED interface, that connects to the internet or any other untrusted network outside Endian UTM Appliance.
You will find different configuration options on this page, depending on the type of the RED interface you have chosen earlier. Some interface types require more configuration steps than others. Below is a description of the configuration for each type.
There are 2 sub-screens for this choice. First you need to specify the serial port your modem is connected to and whether it is a simple analog modem or a UMTS/HSDPA modem. Next you need to specify the modem’s bit-rate, the dial-up phone number or access point name, the username and password that have been assigned to you by your provider and the authentication method (if you don’t know whether PAP or CHAP applies, use the default PAP or CHAP). Also specify whether you want the IP address of the DNS (domain name server) to be assigned automatically or you want to set it manually. For UMTS modems it is also necessary to specify the access point name. Optionally, you can also specify the MTU (maximum transmission unit) - usually this is not needed. Please read the note below for problems with modems.
Note
/dev/ttyS0 is normally used as serial console and is therefore not available for modems.
Note
SIM cards that require a personal identification number (PIN) are not supported by Endian UTM Appliance.
This step allows you to define up to two addresses for DNS (domain name server), unless they are assigned automatically. Should only one nameserver be used it is necessary to enter the same IP address twice. The IP addresses that are entered must be accessible from this interface.
This step lets you configure a global administrator email address that will be used by all modules that allow you to send emails.
There are three fields to configure:
Admin email address
The email address to which the emails should be sent.
Sender email address
The email address that should be used as the sender address.
Address of smarthost
Here you can specify the SMTP server through which the email should be sent.
This last step asks you to confirm the new settings.
Click the OK, apply configuration button to go ahead. Once you did this, the network wizard will write all configuration files to the disk, reconfigure all necessary devices and restart all depending services. This may take up to 20 seconds, during which you may not be able to connect to the administration interface and for a short time no connections through the firewall are possible.
The administration interface will then reload automatically. If you have changed the IP address of the GREEN zone’s interface, you will be redirected to the new IP address. In this case and/or if you have changed the hostname a new SSL certificate will be generated.
Select System from the menu bar at the top of the screen, then select Event notifications from the submenu on the left side of the screen.
On this page you can set the global notification options:
Email notifications
Here you can select how to use the notification system. Options are do not notify in which case no notifications will be sent, notify using default email address in which case emails will be sent using the default administrator email address (as specified in step 6 of System ‣ Network configuration) or you can choose notify using custom email address in which case you will have to specify a Mail sender address, a Mail recipient address and the Mail smarthost you want to use*.
You can Save your settings by clicking on the button below. After doing that do not forget to Apply them.
On this page you can configure how to handle each of the events. A list of all events is shown.
The list contains three columns:
ID
In this column the event ID is shown.
Description
This column describes the event.
Actions
In this column you see what actions can be performed. All email notifications are enabled by default. If you want to disable email notifications for one event just click on the mail icon in that event’s row.
Here is how the IDs are generated:
12233334
^^^\++/^
|\| || +-----> 4) severity 0-9 0: critical 4,5: neutral 9: good
| | ++-------> 3) event number sequential event number
| +----------> 2) module number sequential module number
+------------> 1) layer number (1 == kernel, 2 == system, 3 == services,
4 == configlayer, 5 == gui)
To apply your changes you must click on the Apply button.
Select System from the menu bar at the top of the screen, then select Support from the submenu on the left side of the screen.
A support request can be created directly from this screen. Fill in all necessary information and submit your request. A member of the Endian support team will contact you as soon as possible. Please provide a detailed problem description in order to help the support team to resolve the issue as quickly as possible.
Optionally, you can grant access to your firewall via SSH (secure shell). This is a secure, encrypted connection that allows support staff to log in to your Endian UTM Appliance to verify settings, etc. This option is disabled by default. When enabled, the support team’s public SSH key is copied to your system and access is granted via that key. Your root password is never disclosed in any way.
Select System from the menu bar at the top of the screen, then select Endian Network from the submenu on the left side of the screen.
Your Endian UTM Appliance can connect to Endian Network (EN). Endian Network allows for easy and centralized monitoring, managing and upgrading of all your Endian UTM Appliance systems with just a few clicks.
This screen contains three tabs.
The Subscriptions tab shows a summary of your Endian Network support status. The last section lists your activation keys. You need at least one valid activation key (not expired) to receive updates from and participate in Endian Network. There is a key for each support channel (typically just one). If the firewall has not yet been registered the registration form is shown.
The Remote Access tab allows to specify whether your Endian UTM Appliance can be reached through Endian Network at all, and if so, through which protocol: HTTPS means the web interface can be reached through Endian Network and SSH means it is possible to login via secure shell through Endian Network.
The Updates tab displays and controls the update status of your system. There are three sections.
Firstly, pressing the Check for new updates! button will access your support channels looking for new updates. If any updates are found they will be listed (updates are distributed as RPM packages). Pressing the Start update process NOW! button will install all updated packages.
Secondly - to save you some time - the system retrieves the update list automatically. You may choose the interval to be hourly, daily, weekly (the default) or monthly - do not forget to click on Save to save the settings.
Thirdly, by pressing Update signatures now you can update the ClamAV antivirus signatures. This works only if ClamAV is in use, for example in combination with the email or HTTP proxy.
Select System from the menu bar at the top of the screen, then select Passwords from the submenu on the left side of the screen.
You can change one password at a time here. Specify each new password twice and press Save. The following users are available:
Select System from the menu bar at the top of the screen, then select SSH access from the submenu on the left side of the screen.
This screens allows you to enable remote SSH (secure shell) access to your Endian UTM Appliance. This is disabled by default which is the recommended setting. SSH access is always on when one of the following is true:
Some SSH options can be set:
Finally there is a section detailing the public SSH keys of this Endian UTM Appliance that have been generated during the first boot process.
Assume you have a service such as telnet (or any other service that can be tunneled through SSH) on a computer inside your GREEN zone, say port 23 on host 10.0.0.20. This is how you can setup a SSH tunnel through your Endian UTM Appliance to access the service securely from outside your LAN.
Select System from the menu bar at the top of the screen, then select GUI settings from the submenu on the left side of the screen. In the community release it is also possible to click on the Help translating this project link which will open the Endian UTM Appliance translation page. Any help is appreciated.
Two options regarding the web interface can be set in this screen: whether to display the hostname in the browser window title and the language of the web interface (English, German and Italian are currently supported).
Select System from the menu bar at the top of the screen, then select Backup from the submenu on the left side of the screen.
In this section you can create backups of your Endian UTM Appliance configuration and restore the system to one of these backups when needed. Backups can be saved locally on the Endian UTM Appliance host, to a USB stick or downloaded to your computer. It is also possible to reset the configuration to factory defaults and to create fully automated backups.
By clicking on the Create new Backup button a dialog opens up where you can configure the new system snapshot:
Click on the Create new Backup button again to go ahead and create the backup.
Following is the list of available backups (initially empty): you can choose to download them, delete them or restore them by clicking on the appropriate icon in this list. Each backup is annotated with zero or more of the following flags:
You can provide a GPG public key that will be used to encrypt all backups. Select your public key by clicking on the Browse button and then choosing the key file from your local file system. Make sure Encrypt backup archives is checked. Confirm and upload the key file by clicking Save.
You can upload a previously downloaded backup. Select your backup by clicking on the Browse button and then choosing the backup file from your local file system. Fill in the Remark field in order to name the backup and upload it by clicking Save. It is not possible to import encrypted backups. You must decrypt such backups before uploading them.
The backup appears in the backup list above. You can now choose to restore it by clicking on the restore icon.
Clicking the Factory defaults button allows you to reset the configuration of your Endian UTM Appliance to factory defaults and reboot the system immediately after. A backup of the old settings is saved automatically.
Select the Scheduled backups tab if you wish to enable and configure automated backups.
First, enable and configure automatic backups. You can choose what should be part of the backup: the configuration, database dumps, log files and old log files as seen in the Backup Sets section. You can also choose how many backups you want to keep (2-10) and the interval between backups (hourly, daily, weekly or monthly). When you’re done click the Save button.
Next, you can tell the system whether or not you want backups emailed to you. If you wish to receive backups by email you can enable this feature and select the email address of the recipient. You can then Save the settings. There is also a Send a backup now button that will save the settings and try to send an email with the backup immediately, so you can test the system. Optionally you can also provide a sender email address (this must be done if your domain or hostname are not resolvable by your DNS) and the address of a smarthost to be used (in case you want all outgoing email go through your companies SMTP server, rather than be sent directly by your Endian UTM Appliance). If the SMTP proxy is disabled it is absolutely necessary to add a smarthost to be able to send emails.
Select System from the menu bar at the top of the screen, then select Shutdown from the submenu on the left side of the screen.
In this screen you can shutdown or reboot your Endian UTM Appliance by clicking the Shutdown or the Reboot button respectively.
Select System from the menu bar at the top of the screen, then select Credits from the submenu on the left side of the screen.
This screen displays the list of people that brought Endian UTM Appliance to you.
Enter search terms or a module, class or function name.