Table of Contents

1. Overview

2. Installation

2.1. Virtual Machine Resource Requirements

2.2. Installation Steps

3. InCenter Access

3.1. SSH Access to the CLI

3.2. REST API Access

3.3. WebUI Access

3.4. Access Certificates

3.5. File Transfer

3.6. SSH Server Management

4. Using the CLI

4.1. Tab Completion

4.2. Specifying String Values

4.3. Displaying Unsaved Changes

4.4. Activating Changes

4.5. Selective Activate

4.6. Viewing Node Status

4.7. CLI Relay

5. Using the WebUI

5.1. Starting the WebUI

5.2. Activating InCenter Changes

6. Managing NetWall Nodes

6.1. Overview

6.2. Setting Up Centralized Management

6.2.1. NetWall Node Centralized Management Setup

6.2.2. InCenter Centralized Management Setup

6.2.3. Adding NetWall Nodes with the CLI

6.3. Setting Up Monitoring

6.3.1. Adding NetWall Nodes with the WebUI

6.3.2. Configuring a Log Receiver in NetWall Nodes

6.4. Node Dashboards

6.4.1. Overview Dashboard

6.4.2. Network Allowed

6.4.3. Network Denied

6.4.4. Threats Unhandled

6.4.5. Threats Denied

6.4.6. VPN

6.4.7. Communication

6.4.8. OneConnect

6.4.9. Log Analyzer

6.5. The Health Display

6.6. CyberSecurity Score

6.7. Reporting

6.8. Alerting

6.9. SMTP Server Setup

6.10. Internet Proxy Setup

6.11. Upgrading Nodes

6.12. Device Monitoring

6.13. NetEye Monitoring

6.14. EasyAccess Monitoring

7. Managing NetShield Nodes

7.1. Adding Nodes with the CLI

7.2. Adding Nodes with the WebUI

7.3. Editing Node Properties with the WebUI

7.4. Deleting a Node

7.5. Using Public Key Authentication

7.6. Changing a Node's Management IP

7.7. Editing Node Configurations

7.7.1. Editing Configurations with the CLI

7.7.2. Editing Configurations with the WebUI

7.8. Deleting Configuration Objects

7.9. Host Key Management

7.10. Replacing a Standalone Node

8. Managing HA Pairs

8.1. Adding an HA Pair

8.1.1. Adding an HA Pair with the CLI

8.1.2. Adding an HA Pair with the WebUI

8.2. Editing an HA Pair

8.3. Deleting an HA Pair

8.4. Replacing an HA Pair Node

8.5. Upgrading an HA Pair

9. Managing Users

9.1. Managing Users with the CLI

9.2. Managing Users with the WebUI

9.3. User Password Policy

9.4. Setting Up MFA

10. Centralized Management Control

10.1. Overview

10.2. Disabling Centralized Management Control

10.3. Re-enabling Centralized Management Control

10.4. Node/Firewall Synchronization

11. Version Management

12. Revision History

13. License Management

13.1. License Handling

13.2. License Monitoring

13.3. License Replacement

14. OpenStack Deployment

15. Node Groups

15.1. Managing Groups with the CLI

15.2. Managing Groups with the WebUI

16. Configuration Templates

17. InCenter Administration

17.1. Host OS CLI Access

17.2. Changing the Host SSH Keys

17.3. Restarting InCenter

17.4. System Log Files

17.5. Downloading Log Files

17.6. Expanding Log Storage

17.7. Displaying Uptime

17.8. System Backup and Restore

17.9. Scripts

17.10. Upgrading the System

17.11. The techsupport Command

18. Log Servers

18.1. The Internal Log Server

18.2. Using External Log Servers

18.3. Using Syslog Servers

18.4. Log Migration to a New Instance

19. Redundancy Setup

20. IPS

20.1. Overview

20.2. Setting Up IPS

20.3. IPS Signature Management

20.4. SNORT File Usage

20.5. Best Practice Deployment

21. IDP

21.1. Overview

21.2. Setting Up IDP

21.3. Best Practice Deployment

A. Third Party Software