background image

 

 

User Guide

 

 

User Guide 

Version 1.0- 13/08/2014 

11000172-20140623-NG12AO 

Summary of Contents for NetGenie SOHO N300

Page 1: ...User Guide User Guide Version 1 0 13 08 2014 11000172 20140623 NG12AO ...

Page 2: ...ternet through NetGenie 32 Do I need to manually add each website which I want to be allowed for my employees 32 What is NGsense 32 OR 32 Does NetGenie support HTTPS based Web and Application Filtering 32 How can I customize Website category access for a specific user 33 I want to allow my employees accessing game sites after office hours What should I do 35 How can I apply time based Internet acc...

Page 3: ...ie appliance to access Internet 51 I do not want others to see my network due to security reasons Is there any way to hide visibility of my network to wireless users 51 Can I change the name of my Network 52 Can I configure multiple Wireless Networks SSID in my NetGenie appliance 52 Can I bind a particular user with a Wireless Network SSID 53 Security 54 What is the frequency of Intrusion Preventi...

Page 4: ...port management over TR 069 71 Some Advanced Configuration 72 How can I make sure that if any user remains inactive for more than 10 minutes he she gets logged off 72 The Parental Controls that I have applied are not working properly What can be the reason 73 What does NetGenie offer under Intrusion Prevention System 73 What is Port Forwarding How can I configure port forwarding in NetGenie 73 How...

Page 5: ...net knowledge Guide Organization This guide gives you information about the administration of Cyberoam NetGenie Secure Internet appliance while helping you manage and customize NetGenie to meet your personalized Internet safety requirements This guide is organized in three parts Part 1 Deploy your NetGenie Part 2 Protect your Organization Part 3 What can NetGenie do for you ...

Page 6: ...ld and shaded font typeface Internet Controls Topic titles Shaded font typeface Introduction Subtitles Bold Black typeface Notation conventions Navigation link Normal typeface Internet Controls Device Whitelisting it means to open the required page click on Internet Controls then on Device Whitelisting Notes and Prerequisites Bold typeface between black borders Note ...

Page 7: ...ffer protection from unauthorized outsiders Protect all devices used to connect to the Internet laptops desktops iPhone iPad and more from and hackers Control user access to harmful and unproductive websites and applications like adult sites job portals sports sites Facebook Skype Yahoo Messenger and more to enhance security and productivity in your office After unboxing your NetGenie ensure that ...

Page 8: ... to access NetGenie http 10 1 1 1 Default Username admin Default Password admin Appliance Reset Button To reset appliance to factory default settings keep the reset button pressed for 5 seconds While doing so all past upgrades and configurations will be lost ...

Page 9: ...the power adapter into the socket on the back of the NetGenie Base Unit and the other end into the nearest main socket 3 Before you access the Internet through NetGenie make sure the power is switched on The Power LED on the front panel should turn green Note SSID and pass key pre secure your wireless network from any unauthorized access attempts Please note down your pass key for future reference...

Page 10: ...inted on the sticker at the back of your appliance Please refer to Getting your NetGenie Ready section 3 Open your browser and go to the default IP Address i e https 10 1 1 1 to access NetGenie Web Admin Console Use the default User Name and Password i e admin to log in 4 You need to configure network settings to connect to the Internet You can either run the NetGenie Network Configuration Wizard ...

Page 11: ...u will be served with NetGenie Splash Screen Your computer is now secured with the Quick Security feature automatically turned on Note To configure role appropriate Internet access for your employees refer the Internet Controls section If you are unable to connect to the Internet after following above procedure please revert to your original setup and visit NetGenie s support section at www netgen...

Page 12: ...be served with NetGenie Splash Screen Your computer is now secured with the Quick Security feature automatically turned on Note To configure role appropriate Internet access for your employees refer the Internet Controls section If you are unable to connect to the Internet after following above procedure please revert to your original setup and visit NetGenie s support section at www netgenie net ...

Page 13: ...User Guide 4 Click Next to continue or Skip Wizard to configure the network settings manually 5 Select your Internet connection type i e ADSL or Ethernet Click Next to continue ...

Page 14: ... list Enter Username and Password as provided by your ISP Note In case your ISP provides IP over DHCP you may need not to provide any User Name and Password to connect to the Internet You can now start surfing the Internet Click Ok to exit the wizard ...

Page 15: ...ings manually through the NetGenie user interface Configuring ADSL You need to configure VDSL ADSL settings to connect to the Internet using your Telephone broadband wire i e DSL cable in case you have not already configured the same through NetGenie Network Configuration Wizard Go to Network Settings Internet VDSL ADSL to configure the DSL settings Select ATM as the DSL connection type After sele...

Page 16: ...PCR UBR with PCR CBR Non Realtime VBR Realtime VBR Select IP QoS Scheduler Algorithm Select the QoS Scheduler Algorithm Available Options Strict Priority Weighted Fair Queuing Specify the Weight Value of the default queue from 1 to 63 and select the MPAAL Group Precedence from the list Apply Click to save changes Table Create ATM Screen Elements Configuring PPPoE PPPoE Point to Point Protocol over...

Page 17: ... by Service Provider Advanced Settings Primary DNS Server Specify IP Address of primary DNS server Secondary DNS Server Specify IP Address of secondary DNS server Apply Click to save changes Table Configure PPPoE Screen Elements Configuring 3G USB Modem You need to configure USB modem when you connect to the Internet through a data fax voice modem Go to Network Settings Internet 3G Select Internet...

Page 18: ...Select the service provider name Service Name Specify name of the service if required Dial Number Dial number of the selected service provider Authentication Select the checkbox if you want to enable authentication for your USB modem Username Specify the username if you have enabled authentication for your USB modem Password Specify password Pincode Specify the pin code of your area Init String Sp...

Page 19: ...ve changes Table Configure 3G USB Modem Screen Elements Configuring Static Internet Connection You need to configure static Internet connection if your ISP has assigned an IP Address to your network Go to Network Settings Internet Ethernet Select the Internet connection type as Static and fill up the required details Screen Configure Static Internet Connection ...

Page 20: ...d by your ISP Subnet Mask Specify subnet mask of your network Gateway Specify gateway IP Address for your network Advanced Settings Primary DNS Server Specify IP Address of primary DNS server Secondary DNS Server Specify IP Address of secondary DNS server Apply Click to save changes Table Configure Static Internet Connection Screen Elements ...

Page 21: ...arding security features offered by NetGenie Click Continue Surfing to skip this page Click Learn Why NetGenie to know benefits of NetGenie over other available products Click Customer Portal to access customer portal of NetGenie Customer portal allows the user to register the appliance in order to avail support Click Administrator Login to access NetGenie appliance Click check box against Do not ...

Page 22: ...0 1 1 1 in address bar or click Administrator Login at the Splash Page Log in using default username admin and password admin Screen Login Screen Elements Description Username Specify user login name If you are logging in for the first time after deployment please use default username admin Password Specify password If you are logging in for the first time after deployment please use default passw...

Page 23: ...al time zone in order to prepare time schedules for accessing the Internet and generating time based reports Go to System Time to update your time zone Screen System Time Settings Screen Elements Description System Time Displays NetGenie s current time Select Time Zone Selects local time zone from drop down menu Enable NTP Client Checks to enable NTP Network Client Protocol client Table System Tim...

Page 24: ...his her password Image icon Click to change the picture for a user Internet Controls Click ON to enable Internet Controls Internet Restriction Slider bar Drag the slider bar to reflect the appropriate Internet control for any of your organization user This selection will block any websites and applications deemed inappropriate for them Available options List Only Strict Moderate Minimal Safe Surfi...

Page 25: ...ystem Time Settings screen elements Website List Enter one or more websites to be allowed or blocked for the user and click OK to save the changes This section is used to customize NetGenie Web protection for the specific user E g Your IT administrator shows interest in visiting a particular computer security forum which is blocked as per the Internet access settings You can override these setting...

Page 26: ...ied to a specific user For this click Website Category List icon to view allow or block a specific website category You can also use this page to configure schedule based Website category access allow disallow uncategorized websites enable NGsense for DNS based website categorization etc Screen Website Category List ...

Page 27: ...nied to a specific user For this click Application List icon to view allow or block a specific application category Expand the application tree to allow or block any specific application You can also use this page to configure schedule based application or application category access Screen Application List ...

Page 28: ...con to log in and specify your password to proceed further Screen User Login Screen Successful User Login Click the link Do you want to Whitelist this device if you do not want NetGenie to apply parental controls or ask for login every time you access Internet using this device Provide your NetGenie administrator credentials and click Proceed to Whitelist the device ...

Page 29: ...User Guide Screen Device Whitelist Note Administrator credentials are required to Whitelist the device Screen Successful Device Whitelist ...

Page 30: ... NetGenie appliance in order to avail of the following facilities and subscriptions offered by NetGenie Phone and Email support with extended hardware warranty Access to Customer Portal To register your appliance 1 Log in to NetGenie with administrator credentials 2 Go to System Registration 3 Click the link given below SSN Serial Number Unique number associated with your NetGenie appliance It wil...

Page 31: ... I access and configure my NetGenie appliance NetGenie can be accessed and configured using its web based user interface Refer to Defaults section for NetGenie s default IP Address and administrator credentials I want to apply different levels of Internet restrictions to different users as per their role and requirement in my organization how can I do so Follow the steps given below 1 Log in to Ne...

Page 32: ...t the device s in order to skip the authentication page but that would mean you would not be able to apply Internet controls or view user based logs and reports NetGenie recommends user authentication if you want to have complete visibility of your employees Internet activities Do I need to manually add each website which I want to be allowed for my employees No NetGenie s Web categorization has b...

Page 33: ...e Category List to allow or block website categories The page given below represents website category access using different color schemes Green Allowed Web categories Red Blocked Web categories Yellow Partial schedule based access Screen Website Category List 4 Click the Website category which you want to allow or block For example in the image below we are blocking the Jobs Search web category f...

Page 34: ...r Guide Screen Block Website Category 5 Click to configure time based Internet access In this example we have allowed access to Jobs Search category on Sundays only Screen Schedule Website Category Access ...

Page 35: ...book com under Allow Websites list and click OK to save changes in Website access 4 Click Website Category List block Social Networking web category and click OK to save changes in Website Category 5 Click Apply to save over all access changes I want to allow my employees accessing game sites after office hours What should I do OR How can I apply time based Internet access You can configure time b...

Page 36: ...that website belongs has been blocked by the Administrator The error page reflects NetGenie s Web categorization for the given URL which helps users understand the reason why it was blocked However if you feel that the specified website is not potentially harmful you can access it by logging in as a different user or acquiring permission from the administrator who can use his her administrator cre...

Page 37: ...egory 3 Specify the website URL in the given textbox 4 Click Search to find out the categorization of the specified website URL The search result displays user wise allow block status of a specified Website URL Screen Search Category Once you find out the Web category for a specific Website you can apply time based controls over that category NetGenie provides the feature of submitting your feedba...

Page 38: ...cess for your employee Please follow the steps given below 1 Log in to NetGenie with administrator credentials 2 Add or Edit the user that has been created for your employee 3 Click Application List to edit application access settings Screen Application Category List 4 Expand Instant Messaging IM application category Screen Application List 5 Click Yahoo Messenger to allow access It will turn gree...

Page 39: ... Allow Application 6 Click against Yahoo Messenger to apply time based access and select the time slot when you want her to access Yahoo messenger Screen Schedule based Application Access 7 Click OK to save the changes ...

Page 40: ...Please check that WLAN WPS LED of your NetGenie appliance has turned green which means WPS is ON in your NetGenie appliance 3 Correct Pass Key Please make sure that you have entered correct pass key to access the NetGenie network Look for a sticker at the bottom of the appliance for pass key specific to your appliance 4 Enable UPnP By default UPnP is enabled in NetGenie 1 Log in to NetGenie with a...

Page 41: ... to NetGenie with administrator credentials 2 Go to Internet Controls Website Exceptions to allow or block one or multiple websites globally 3 Click to add or to remove Website s in globally allowed or blocked list 4 Click Apply to save changes Screen Website Exceptions Does NetGenie allow users access to uncategorized websites OR How can I block users from accessing the websites which are not cat...

Page 42: ...igure 3G USB modem section for details My ISP has given me an IP address where do I need to specify the same in NetGenie Please refer to Configure Static Internet Connection section How do I deal with websites that have not been categorized by NetGenie NetGenie provides the option of submitting feedbacks about websites that have not been categorized under the current Website categories database It...

Page 43: ... Category 4 Click Submit feedback to NetGenie link to suggest a category for the uncategorized website Screen Submit Feedback 5 Enter the appropriate website category in the textbox given or click Refer existing category list ...

Page 44: ...orization database I want to ensure that Internet is accessible to an employee A only during work hours i e from 10 am to 7 pm How do I do that To ensure that Internet is accessible to your employee only during work hours you need to set time controls for the employee 1 To set time controls 2 Log in to NetGenie using administrator credentials 3 Add or Edit user that have been created for employee ...

Page 45: ...trols link to set Internet access timing for that user Select the time interval that is to be allowed as shown in the figure below Screen Set Time Controls 5 Click OK to set time interval and Apply on the edit user page to save changes for the user ...

Page 46: ...ntication page each and every time If you are logging in as an existing user please refer to User Internet Access section to learn how to whitelist a device OR 1 Log in to NetGenie with administrator credentials 2 Go to Internet Controls Device Whitelist 3 Specify MAC address of your laptop smart phone 4 Specify description if required 5 Click Add to whitelist your laptop smart phone 6 Follow step...

Page 47: ...ystem and security status of my NetGenie Appliance You can view system and security module details from System Overview page This page displays following details of NetGenie appliance System Information Active Connection s Number of connections to the NetGenie appliance Firmware Version Firmware version running on your NetGenie appliance SSN Unique SSN number which is used NetGenie support team to...

Page 48: ...r credentials 2 Go to System Restart Device to restart your NetGenie appliance 3 Click Reboot to restart your NetGenie appliance Screen Restart NetGenie Appliance Note This action will only restart your NetGenie appliance To reset appliance to factory default settings keep the reset button positioned next to the WPS switch of your appliance pressed for 5 seconds While doing so all past upgrades an...

Page 49: ...lick Ping 4 2 2 2 is the IP Address of one of the root DNS servers placed on the Internet Pinging 4 2 2 2 is the most popular way of checking Internet connectivity Screen Ping 3 If your ISP link is working it would give you following output with 0 packet loss i e there is uninterrupted connectivity with the internet Screen Ping Result How can I verify that my NetGenie appliance is Wi Fi enabled By...

Page 50: ...User Guide Screen Enable NetGenie Wireless ...

Page 51: ...rk Push the WPS button on the backside of the appliance WPS automatically configures the network name SSID and WPA security key for your laptop when it joins the network discarding the need to manually enter the SSID and Pass Key Since the security keys or passphrases are randomly generated the network remains secured Can I insert my telephone cable directly to my NetGenie appliance to access Inte...

Page 52: ...as placeholder instead of real password 7 Click Apply to save the changes Screen Change SSID Can I configure multiple Wireless Networks SSID in my NetGenie appliance Yes you can configure a maximum of four 4 SSIDs in your NetGenie appliance By default NetGenie comes with a Primary SSID named NetGenie XXXX You can configure up to three more custom SSIDs Follow the steps given below 1 Log in to NetG...

Page 53: ...o to Network Settings Wireless and select the checkbox Enable Wireless 3 Click icon to add a custom SSID 4 Specify a name for your network in SSID field 5 Select Security Mode for the SSID 6 Select the checkbox User Login Required if you want the users to authenticate themselves while connecting to the SSID 7 Select the user from the list under Select a user The security policies for the selected ...

Page 54: ...lication Control signature database if you do not want to wait 6 hours to get the updated signatures 1 Log in to NetGenie with administrator credentials 2 Go to System Signature Updates 3 Click Update to manually update signature database Screen Manual Signature Update What is the use of Diagnostic Tools Diagnostic tools can be used to identify appliance related problems and aid the administrator ...

Page 55: ...required tool Test the connection to your local network Internet service provider Use to To see your appliance s connectivity status with your local network To see your appliance s connectivity status with your Internet Service Provider ISP ...

Page 56: ...et the IP Address of a domain name Check for packet loss To use Ping enter the IP Address or Host name in the Ping Section and click Ping Screen Ping Screen Ping Result Name Lookup Use to query the Domain Name Service for information about domain names and IP Addresses To use Name Lookup enter the IP Address or Host name in the Name Lookup Section and click Name Lookup ...

Page 57: ...race Route Use Trace Route to display the route path and measure the transit delays loss of packets across an Internet Protocol IP network To use Trace Route enter the IP Address or Host name in the Trace Route Section and click Trace Route Screen Trace Route ...

Page 58: ...User Guide Screen Trace Route Result ...

Page 59: ...ignatures and firmware upgrades available for your NetGenie appliance http customer netgenie net http download netgenie net How can I upgrade my NetGenie firmware version You can upgrade NetGenie firmware to the latest firmware available Availability of latest firmware can be checked in various ways To know how to check firmware availability click here NetGenie can be upgraded in 3 ways 1 Automati...

Page 60: ...2 Click Download Upgrade and click Yes in the following warning screen Screen Firmware Upgrade The appliance will automatically download the latest firmware available upgrade the firmware and reboot the system This takes a few minutes It is advisable to not interrupt the upgrade process by closing the window From GUI To Upgrade NetGenie to the latest firmware manually follow the steps given below ...

Page 61: ...Screen Firmware Upgrade Check 4 Click Yes to download and upgrade NetGenie to the newer firmware Screen Firmware Upgrade Process The appliance will automatically download the latest firmware available upgrade the firmware and reboot the system This takes a few minutes It is advisable to not interrupt the upgrade process by closing the window ...

Page 62: ...e firmware file stored in your machine 4 Click Apply The upgrade takes a few minutes It is advisable to not interrupt the upgrade process by closing the window Can I save my current NetGenie configuration for future use i e in case of system crash or change in settings Yes you can take the back up of your current NetGenie configuration and restore it at a later stage 1 Log in to NetGenie with admi...

Page 63: ... not working properly I do have configuration back up I took a few days back What should I do to restore my NetGenie settings OR How to restore configuration back up in NetGenie appliance To restore NetGenie configuration 1 Log in to NetGenie with administrator credentials 2 Go to System Config Manager 3 Browse the back up file stored in your machine 4 Click Upload to restore back up ...

Page 64: ...t configuration Keep the reset key given next to WPS switch of your appliance pressed for 5 seconds OR 1 Log in to NetGenie with administrator credentials 2 Go to System Config Manager 3 Click Restore for Default Profile Factory Default Configuration under Configuration Profile Manager section Screen Restore Factory Default Configuration ...

Page 65: ...r and source IP addresses along with dates time categories and actions taken You can perform search queries in the Web activity logs based on dates and keywords Screen Web Activity Report I want to find out which applications are being accessed by my employees in my absence How can I do so Go to Logs and Reports Application Activity to view the list of websites visited by your employee Application...

Page 66: ...rts Connected Users page This page displays details of connected DHCP clients and logged in users DHCP Clients This page displays DHCP host name MAC Address and IP Address of accessing device and time when the DHCP client will try to renew the leased IP Address Screen DHCP Clients Logged In Users This page displays a list of users along with IP Address and login duration ...

Page 67: ... Prevention Screen Intrusion Prevention I have set time as per my local time zone but why is NetGenie still not showing it NetGenie communicates with NTP servers over Internet to update system time If NetGenie does not have Internet connectivity system time will not be synchronized with NTP server Hence perform the following checks WAN cable is properly connected to NetGenie WAN socket WAN port is...

Page 68: ...specify name or IP Address of the external syslog server 5 Specify port number in the range of 1 to 65535 Default port number is 514 Screen Syslog Configuration 6 Click Apply to save the changes Is there any way to turn off NetGenie s logging feature Yes you can disable NetGenie s logging feature not recommended by the following steps 1 Log in to NetGenie with administrator credentials 2 Go to Log...

Page 69: ...an remotely manage all your NetGenie appliances one at a time by enabling NetGenie s on Cloud Management Service NCMS To enable NCMS follow the steps given below 1 Log in to NetGenie with administrator credentials 2 Go to Remote Mgt Configuration 3 Tick the check boxes against Enable all logs and Enable Remote Logging Screen Enable NCMS ...

Page 70: ...away from your office This way NCMS enables secure remote management of your NetGenie appliances To know more about how you can edit your NetGenie appliance settings using NCMS please refer to NCMS User Guide What is Internet Watch List Internet Watch List on your NCMS dashboard displays access to certain websites and applications groups that can hinder productivity of your employees To know more ...

Page 71: ... an application layer protocol for remote management of end user appliances like routers modems and VoIP phones TR 069 is an alternative to NCMS using which ISPs can access and manage NetGenie appliances remotely To configure TR 069 follow the steps given below 1 Log in to NetGenie with administrator credentials 2 Go to Remote Mgt TR 069 Client and select the check box against Enable TR 069 Client...

Page 72: ... Timeout as 10 minutes such that if any user remains inactive for longer than 10 minutes he she gets logged off in other words his her session expires To set the User Timeout follow the steps given below 1 Login to NetGenie using administrator credentials 2 Open a new tab and type http NetGenie IP Address tweb pages conf php in the Address Bar to go to the System Configuration page For example if ...

Page 73: ...under Intrusion Prevention System NetGenie s Intrusion Prevention System is a signature based system which performs following security checks to prevent your network from malicious traffic Protocol Anomaly Detection Port Scan Prevention Traffic Anomaly Detection Web Protection What is Port Forwarding How can I configure port forwarding in NetGenie Port forwarding is useful when you want to keep un...

Page 74: ...ck Apply How to port forward HTTP traffic to an internally hosted web server Port forwarding of HTTP traffic is done in a slightly different manner than other Internet traffic This is done in two steps 1 Create a Port forwarding Rule to redirect incoming port 80 traffic to the internal web server To know how to create a port forwarding rule click here ...

Page 75: ...y hosted websites i e allow global access to the websites To know how to create a Website Exception click here Note If your internally hosted web pages are accessible over IP Addresses you can create Exceptions for the IP Addresses in the same way as websites ...

Page 76: ...Go to System NetGenie Access 3 Click checkbox against Enable Access from Internet 4 Click Apply to save changes Screen NetGenie Access 5 Use your Internet IP Address public IP Address provided by your ISP to access NetGenie over Internet Please remember that if your Internet connection type is set to DHCP from Network Settings Internet then you will need to select your DNS server as Dynamic DNS fr...

Page 77: ... ATM Static DSL ATM PPPoE DSL ATM Static Ethernet DHCP Static PPPoE 3G USB Modem USB 3G IP Address WAN IP Address of NetGenie appliance with Renew button in case of DHCP Internet connection type Network Mask Network mask IP Address Gateway IP Address of NetGenie gateway Primary DNS Server IP Address of primary DNS server Secondary DNS Server IP Address of secondary DNS server Local Network IP Addr...

Page 78: ... be leased by NetGenie 6 Click Apply to save changes Screen Local Network I want to allow all TCP traffic passing through port 80 can I do so Yes you can allow or block TCP or UDP traffic over any specific port or port range 1 Log in to NetGenie with administrator credentials 2 Go to Security Firewall 3 Specify direction of the traffic as LAN to WAN 4 Specify Source Address and Destination Address...

Page 79: ...User Guide Screen LAN to WAN Firewall Rule 11 Create another rule with following parameters Direction WAN to LAN Protocol TCP Destination Port number 80 Screen WAN to LAN Firewall Rule ...

Page 80: ...unnel in NetGenie 1 Log in to NetGenie with administrator credentials 2 Go to Network Settings VPN IPSec 3 Select the authentication mode 4 Specify IP address of the Remote VPN server Select Any checkbox in case of Road warrior configuration 5 Specify corresponding remote subnet 6 Specify Preshared Key 7 Select Show Password checkbox to display the Preshared key 8 Under Advanced Settings specify L...

Page 81: ...ions using NetGenie The administrator can connect or disconnect VPN connections explicitly by using the On Off button Shows that the VPN is disconnected On clicking this button the connection gets initiated Shows that the VPN is connected On clicking this button the VPN gets disconnected ...

Reviews: