Farstone Firewall Version 1.0 User's Guide 1 Copyright Notice No part of this publication may be copied, transmitted, stored in a retrieval system or translated into any language in any form or by any means without the express written permission of FarStone Technology, Inc. FarStone grants to you the right to use one copy of the enclosed software program (The "SOFTWARE") on a single computer. If the Software is installed on a network or more than one user can run the Software at the same time, you must purchase an additional license for each user or workstation. Trademarks FarStone and FarStone Firewall are registered trademarks of FarStone Technology, Inc. Microsoft, Windows and MS-DOS are registered trademarks of Microsoft Corporation. Other product names mentioned in this manual may also be trademarks or registered trademarks of their respective companies. FarStone Technology, Inc. Headquarters: North America 15550-B Rockfield Blvd., Suite 100 Irvine, CA 92618 Tel: (949) 458-3666 Fax: (949) 458-3633 Technical Support: Please contact your retailer or use our online support system at www.farstone.com. For your convenience, you will find answers to frequently asked questions on our website at www.farstone.com. Follow the links to the support section. Copyright 1998-2002 FarStone Technology, Inc. All rights reserved. 2 Contents CHAPTER 1 INTRODUCTION........................................................6 1.1 WHAT IS FARSTONE FIREWALLTM? ............................................6 1.2 FEATURES AND BENEFITS...........................................................6 CHAPTER 2 INSTALLATION..........................................................8 2.1 SYSTEM REQUIREMENTS............................................................8 2.2 INSTALLING FARSTONE FIREWALLTM ..........................................8 CHAPTER 3 STARTING FARSTONE FIREWALLTM ................12 3.1 STARTING FARSTONE FIREWALLTM ..........................................12 3.2 TOOLBAR-MAIN BUTTONS ........................................................13 CHAPTER 4 USING FARSTONE FIREWALLTM ........................15 4.1 NETWORK MONITOR.................................................................15 4.1.1 Event Report .................................................................................. 15 4.1.2 Save Logs....................................................................................... 16 4.1.3 Open Logs ...................................................................................... 17 4.1.4 Clear Logs ...................................................................................... 17 4.2 APPLICATION MANAGEMENT.....................................................17 4.2.1 Setting Access Rule for Application............................................ 18 4.2.2 Delete Application.......................................................................... 19 4.3 COMPUTER GROUP MANAGEMENT ..........................................20 4.3.1 Add an IP Address......................................................................... 21 4.3.2 Add a Range of IP Addresses...................................................... 21 4.3.3 Delete a Computer ........................................................................ 22 4.4 INTERNET LOCK ........................................................................23 4.5 DISCONNECT/CONNECT ...........................................................24 4.6 CLEAR .......................................................................................25 4.7 USER ACCOUNT........................................................................27 4.7.1 Create a new account................................................................... 27 4.7.2 Delete an account ......................................................................... 28 4.7.3 Switch user ..................................................................................... 28 CHAPTER 5 FIREWALL SETTINGS ...........................................31 3 5.1 SETTING SECURITY LEVEL .......................................................31 5.2 INTERNET LOCK SETTINGS .......................................................32 5.3 OTHER SETTINGS .....................................................................33 CHAPTER 6 UNINSTALLING .......................................................35 6.1 UNINSTALLING FARSTONE FIREWALLTM ...................................35 CHAPTER 7 APPENDIX ................................................................38 7.1 SOFTWARE LICENSE AGREEMENT............................................38 7.2 TECHNICAL SUPPORT & PRODUCT UPGRADE .........................42 4 Chapter 1 Introduction 5 Chapter 1 Introduction 1.1 What is FarStone FirewallTM? FarStone FirewallTM creates barriers to prevent unauthorized access to your computer from a network. FarStone FirewallTM is security software that provides you with comprehensive protection from data thieves and hackers. FarStone FirewallTM protects your computers according to pre-set security rules and lets you monitor, control and log your network activities. 1.2 Features and Benefits FarStone FirewallTM can: · Protect your system from data thieves and hackers. · Display the current network access activities. · Stop unauthorized access attempts. · Alert the user when an intrusion is detected. · Log all network traffic automatically. · Set the security level (high, medium, low) according to user's need. · Block a specific IP address or a range of IP addresses. · Display and block any program communication to and from your system. · Support multiple languages: English, Traditional Chinese and simplified Chinese. · Clear temporary files and Internet history safely and easily · Manage your own account and switch between users without closing program. 6 Chapter 2 Installation 7 Chapter 2 Installation 2.1 System Requirements · Windows 98/Me/2000/XP · 50MB of hard disk space · 256 VGA colors or higher · 32MB RAM · Intel Pentium (or compatible) 100MHz processor or better 2.2 Installing FarStone FirewallTM Step 1: Before starting the installation, close any applications that are running. Step 2: Insert the FarStone FirewallTM CD into your CD drive and run the "setup.exe" file directly to begin the installation (Figure 2-1). Figure 2-1 Step 3: Carefully read the Software License Agreement. If you accept the terms of the agreement, select Yes to continue. 8 Step 4: Enter your user name, company name (if applicable) and serial number (Figure 2-2). If you have purchased the CD-ROM, the serial number can be found on the back of the CD jewel case. Figure 2-2 Step 5: The Setup Wizard will suggest a folder in which to install the Farstone FirewallTM program files (Figure 2-3). If you would like to store the program files in another location, select Browse to open the file browser and select a new folder. 9 Figure 2-3 Step 6: Select Next to continue the installation. Step 7: Select Finish to complete the installation. You must restart your computer before using FarStone FirewallTM. Figure 2-4 10 Chapter 3 Starting FarStone FirewallTM 11 Chapter 3 Starting FarStone FirewallTM 3.1 Starting FarStone FirewallTM After installation, the FarStone FirewallTM icon will be displayed on the Windows desktop. To start the FarStone FirewallTM program, double-click on the Farstone FirewallTM icon or select Start on the taskbar then Programs->FarStone FirewallTM-> FirewallTM. If Farstone FirewallTM is started for the first time, it will prompt user to setup a new user account. This account possesses administrator privileges. When FarStone FirewallTM is minimized, the FarStone FirewallTM icon will be displayed in the bottom right corner of the Windows taskbar, near the clock (Figure 3-1). Figure 3-1 12 3.2 Toolbar-Main Buttons Network Monitor Displays and logs the programs that are accessing your computer through the network. Application Management Allows or blocks an application from communicating over the network. Computer Group Management Allows a computer or group of computers to access your computer from the network or blocks a computer or group of computers from accessing your computer from the network. Lock Block traffic of all Internet applications except those possess time lock privilege. Forbid/Allow Communications Disconnects or connects your computer to the network Clear Clear temporary files as temporary Internet files, recent files, files in recycle bin, cookies, etc. Switch user Switch between users without closing program. Help Gives users support on how to use FarStone FirewallTM 13 Chapter 4 Using FarStone Firewall TM 14 Chapter 4 Using FarStone FirewallTM 4.1 Network Monitor To monitor a program's network activity, select from the FarStone FirewallTM toolbar. All applications that are running will be listed in the top-right frame of FarStone FirewallTM (Figure 4-1). Figure 4-1 The information display in the top right frame includes: (1) The directory for the application. (2) The time of the connection. (3) The IP address of the computer that is accessing the network. (4) The communication port. (5) The traffic status. 4.1.1 Event Report Some unacknowledged or unauthorized network attacks will steal information from your computer. These attacks can also crash your computer and leave you with the infamous "blue screen of death." Hackers can access the data and your system (possibly wiping out all of your information as you watch helplessly) through these attacks. Event report is an important feature of network monitoring. It lists all attacks in the bottom right frame. The most common attacks are: · Ping Command: Ping is an ICMP-based command used to verify the 15 availability of a computer on the network. · ICMP - Internet Control Message Protocol: By using ICMP, other people can easily obtain information from your system. · Trojan Horse - Trojan horse is a program that transmits without the user's knowledge. These types of programs often allow hackers to break into and control your system. · IGMP Packet ­ An IGMP Packet may result in a system crash. · Port Scanning ­ A port is used by protocols such as TCP and UDP to identify a communication instance (e.g. HTTP service port is 80, and FTP service port is 21). Once connected to the Internet, some ports will be opened for outside connections. FarStone FirewallTM can detect and block any port scanning activities to remove these potential threats. · Access Shares - Network shares include files, folders, drives, printers, etc. When you connect to the Internet, you are sharing a network with millions of people around the world, meaning you are at risk of disclosing your private information to others. FarStone FirewallTM can block unauthorized access to your system. 4.1.2 Save Logs To keep a record of the network activities that have occurred on your computer, select Save Logs or select Log->Save on the file menu. These logs will be saved as *.txt files under the FarStone FirewallTM program folder. After successfully saving these logs, a pop-up window will inform users that the logs have been saved (Figure 4-2). Figure 4-2 16 4.1.3 Open Logs To view the recent history of the network activities, select Log->Open to open the log file. 4.1.4 Clear Logs To clear all logs displayed in the Event Report frame, select Clear Logs on the left frame of FarStone FirewallTM interface. 4.2 Application Management By using Application Management, users can supervise the applications installed on their computers that are attempting to connect to the network. There are 2 ways to run Application Management: (1) Select on the FarStone FirewallTM toolbar; or (2) Select Window->Application from the file menu. All applications that have attempted to access the network will be listed in the right frame(Figure 4-3). You can manage the connection of any programs in the right frame and set the access rule for each application. 17 Figure 4-3 4.2.1 Setting Access Rule for Application When an application attempts to connect to the network for the first time after FarStone FirewallTM is installed, FarStone FirewallTM will ask for permission to connect to the network (Figure 4-4). Figure 4-4 If you check the box `Never prompt for permission again', FarStone FirewallTM will not ask for permission again when this application is trying to connect to the network. You can also set these access rules for the applications listed in the right frame by double-clicking on the application to open the Application 18 window (Figure 4-5). Then select a connection access rule for this application. Figure 4-5 There are three different rules: · Inquire each time: Each time this application attempts to connect to the network, the program will ask for permission. · Allow all traffic: No restrictions for the connection of this application. · Forbid all traffic: Forbid this application from connecting to the network. 4.2.2 Delete Application To cancel the access rules of an application, right-click on the selected application from the right frame, then select Delete from the drop menu (Figure 4-6). 19 Figure 4-6 Once the application is removed from the list, the program will ask for permission when trying to connect to the network the next time. 4.3 Computer Group Management Users can also set the connection rules for the computers on the network. By entering the computer IP addresses, you can control the connection to or from any computer on the network. Select to open Computer Group Management (Figure 4-7). Figure 4-7 20