Advanced Search
Search Results
147 total results found
OSPF
SafeUTM 13 supports OSPF (Open Shortest Path First), a routing protocol based on the state of channels. A channel is a router interface or network segment that connects two routers. The state data of these channels is called the channel state. The use of this...
Proxy
Setting up a direct connection to the proxy server. Proxy Server for Web Traffic You do not need to explicitly specify the proxy settings on the LAN hosts. Specifying UTM as the default gateway for devices on the network is sufficient. By default, caching...
Configuring Proxy with Single Interface
If necessary, you can use SafeUTM as a proxy server with direct connections of clients to the proxy, with a single interface. To do this, you need to perform the following settings: When creating a local interface in Services -> Network interfaces, Gatew...
Exclude IP Addresses from Proxy Server Processing
Setting up exceptions for the traffic of individual users or traffic to certain Internet resources from passing and processing by a web proxy available as part of UTM. Resource exclusions from proxy server processing only work for transparent proxy mode. Wi...
Connecting to External ICAP Services
Sending HTTP(S) traffic for analysis to third-party servers using ICAP protocol. In this case, traffic to these servers (which may include DLP systems, antiviruses, and web filters) is transmitted in decrypted form. You can configure the connection to serv...
Reverse Proxy
Publishing local network web resources in such a way that they become available to consumers from the Internet. Reverse proxy technology allows you to proxy web traffic in the opposite direction: from the Internet to the LAN, unlike the most commonly used o...
DNS
A DNS server converts human-readable server names into IP addresses. SafeUTM includes a DNS server that does not require additional configuration in most cases. DNS service on the SafeUTM server is configured in Services -> DNS. The service allows you to sp...
DHCP Server
The DHCP server is used to automatically assign IP addresses to network devices on the LAN. SafeUTM interface allows you to configure a range of IP addresses for automatic assignment, as well as to form static bindings of IP addresses to MAC addresses of th...
Branches and Head Office
This type of connection allows you to combine the LANs of several SafeUTM servers. Features of IPsec technology implementation in SafeUTM assume two roles of using SafeUTM: Head office – SafeUTM must have a public address on the Internet and accept conne...
Connecting Devices
Description of options for connecting various routers (Mikrotik, Zyxel Keenetic, etc.) to SafeUTM for site-to-site VPN using IPsec IKEv2 protocol. Devices that are not described in this manual as a rule can be connected using similar settings. When combini...
Connecting users
Connecting remote users via L2TP/IPsec protocol. The settings for connecting users (client-to-site VPN) are described in the article VPN connection L2TP IPsec. Allow remote users to connect via L2TP/IPsec protocol 1. Go to Users -> VPN connections.2. Ch...
PPTP VPN
Using the PPTP protocol, you can connect Branches that use outdated routers supporting only PPTP to the Head Office (if the device supports IPsec, it is recommended to use PPTP). If possible, use a more reliable and secure protocol for connecting branches -...
Incoming Connection of Cisco IOS to SafeUTM via IPsec
Following the steps in this article, you can combine Cisco and SafeUTM networks via IPsec using PSK. Find below the connection setup according to the scheme shown in the figure: Step 1. Initial Setup of SafeUTM Configure the local and external interface...
Outgoing SafeUTM Connection to Cisco IOS via IPsec
Following the steps in this article, you can combine Cisco and SafeUTM networks via IPsec using PSK. Find below the connection setup according to the scheme shown in the figure: Step 1. Initial Setup of SafeUTM Configure the local and external interface...
Incoming pfSense connection to SafeUTM via IPsec
Following the steps in this article, you can combine pfSense and SafeUTM networks via IPsec using PSK. The combined LANs should not overlap! Setting up SafeUTM 1. In the SafeUTM web interface, open tab Services -> IPsec -> Devices.2. Add a new connectio...
Outgoing pfSense Connection to SafeUTM via IPsec
Setting up SafeUTM 1. In the SafeUTM web interface, open tab Services -> IPsec -> Devices.2. Add a new connection: Connection name – any. Type – outgoing. Authentication type – PSK. PSK – specify the PSK key to be used for the connection. UTM identif...
Connecting Keenetic via SSTP
You can connect routers with SSTP protocol support in site-to-site VPN mode. If you do not need access from the central office to the network for Keenetic, then use the article Connecting Wi-Fi Keenetic Routers via SSTP on client-to-site connection. Sett...
Connecting Kerio Control to SafeUTM via IPsec
Following the steps of the article below, you can combine Kerio Control and SafeUTM networks via IPsec using PSK. The combined LANs should not overlap! Setting up SafeUTM 1. In the SafeUTM web interface, open tab Services -> IPsec -> Devices.2. Add a ne...
Connecting Keenetic via IPsec
On the SafeUTM side, configure the connection settings in the Services -> IPSec -> Devices section. On the Keenetic device side, use the following encryption protocol settings:
TLS Certificates
Section with information about SSL certificates. This section displays SSL certificates/certificate chains, the list of which is formed by the following modules: reverse proxying module, IKEv2, SSTP VPN servers, web interface, web authorization, mail, etc. ...