Firewall Lab Setup: NGFW

What is a Firewall? Firewall is a network security system that monitors and controls the incoming and outgoing network traffic based on predetermined security rules. A firewall typically establishes a barrier between a trusted internal network and an untrusted external network, such as the Internet.

A next-generation firewall (NGFW) is a network security device that provides capabilities beyond a traditional, stateful firewall. While a traditional firewall typically provides stateful inspection of incoming and outgoing network traffic, a next-generation firewall includes additional features like application awareness and control, integrated intrusion prevention, and cloud-delivered threat intelligence.

Untangle NG Firewall:

Untangle is NGFW/UTM software, bringing together everything your network needs to stay healthy in one box: web content and spam filtering, virus scanning, VPN connectivity, multi-WAN failover capability and much more. With a web-based friendly interface to help you track and filter traffic in your network, it is essential for us to make deployment and management simple.

╚ Requirement: Minimum 2GB RAM, Dual-Core processor, 8 GB hard drive space and a minimum of 2 LAN cards are required.

╚ Download: https://downloads.untangle.com/current-release/ngfw-untangle-15.1.0-amd64.ova

STEPS:

┝ Once the ova file is downloaded Doble click and setup will start;

┝ The Setup Wizard will open automatically when Untangle first boots;

┝ Before you begin the setup wizard, select your preferred language;

┝ The next screen simply welcomes you to the Setup Wizard. Click next to continue. Untangle Software License click on Agree

Configure the Server, In the first step, you have to set a password and select a time zone for the administrator account. The admin e-mail can also be listed for warnings and reports. Optional method of installation;

┝ The default selection is Auto (DHCP). The automatically assigned address is displayed if an address was successfully acquired. Otherwise, click Renew DHCP to acquire an IP address. Click Test Connectivity to verify Internet access;

┝ Configure your “Internal” interface (and DHCP server and NAT configuration.) There are two choices NAT or Bridge.

We must configure the internal interface and allow DHCP and NAT with private static IP addresses to share one public IP on all the internal machines.

The setup wizard is now complete.

Make sure your firewall interfaces are properly configured and connected:

This client is an internal (eth1) system and we will set the default gateway 192.168.2.1:

In this way, the firewall will protect IP 192.168.2.10 according to the settings that you will apply.