Setup an Endian UTM appliance on Bridged Mode

Versions 5.0

Applies to platform: UTM 5.0

Background

This lesson will illustrate the necessary steps to configure an Endian UTM Appliance on Bridged Mode. In this operating mode, Endian UTM Appliance acts transparently without the user noticing or needing to change an existing network infrastructure.

Configuration Example

The diagram above is a simple illustration of the configuration example to which this guide will refer. As shown in our configuration example, the most common and useful point where to connect Endian UTM Appliance set on Bridged mode is onto the uplink of the network, because in this way it will be able to intercept all traffic flowing from hosts behind it to Internet and vice-versa without any need for client neither network devices side configurations.

Just to make an example, all transparent proxies (HTTP and HTTPS, FTP, DNS, SMTP and POP3) used in this configuration are able to intercept the traffic of all the networks that are using the uplink where Endian UTM Appliance is placed onto. There is no need to make any change on client side neither any change on already existing network devices, but only to physically connect Endian UTM Appliance with one interface facing the networks that needs to be monitored, while the other interface facing the default gateway of such networks to have it up and running.

We will setup Endian UTM Appliance on Bridged mode by following network setup wizard steps.

Choose Bridged Mode

Select Bridged mode, then click Forward button to continue.

Add network zones

Following our configuration example, click Forward button to continue.

Configure Network Interfaces

The next step involves configuring the actual IP address you want assigned to the Endian UTM Appliance.

Following our configuration example , we will proceed with the following settings:

1. Fill the text field IP address with the IP address you want to assign to Endian UTM Appliance. This address must not be already used by other devices into the network.
2. Choose network mask as you need. In our case, we have to set network mask as /24 - 255.255.255.0.
3. Select the interfaces you want to utilize for Bridged mode. In our case, we selected two interfaces (eth0 for internal side of the network and eth1 for network side facing the default gateway).
4. Assign an Hostname and Domainname as you need.

Once finished, click Forward button to continue.

Configure Outgoing Interface

Select the interface facing the default gateway from the list, then fill the Default gateway with the address of the default gateway of your network. In our case, we are supposing the default gateway of our LAN is 192.168.5.1.

Once finished, click Forward button to continue.

Configure DNS

Set the DNS that you wish to use, to let Endian UTM appliance to resolve hostnames.

Once finished, click Forward button to continue.

Setup Email Information (Optional)

Here you can provide the administrator (recipient) email account along with the Endian (sender) address you want emails from the Endian UTM Appliance to use. Also you may specify the address of an email smarthost should you require one.

Once finished, click Forward button to continue.

Apply Configuration

The last step is to apply the configuration to the UTM Appliance by clicking Ok, apply configuration. Keep in mind, the changes you made may take up to 20 seconds to be fully applied to the Endian UTM Appliance and for dependent services to be restarted so this may impact any internal device(s) ability to access Endian UTM Appliance or pass traffic through it. You must access the administration interface of the Endian UTM Appliance using the new IP settings either manually or using the link in the Web UI provided.