The Gateway Control Console provides access to the configuration settings, event logs and reports relating to a server’s firewall and other Internet security functions.
All firewall functionality is supported by a carefully selected and validated partner, Untangle. The Untangle Next Generation Firewall has been tested to meet and exceed ICSA Labs Certification. Untangle provides additional technical documentation in a Wiki, which can be accessed directly from the Gateway Control Console. However, this User Guide should be your first point of reference as it explains the configuration a Service Provider can regularly control when using the firewall as part of a server, and all support and assistance is provided directly by the Support Team.
While the servers always include Internet security, the set of components available will vary depending on product options purchased:
- The Gateway product option includes use of all the features and functionality described in the User Guide.
- Basic Firewall. This is included if the full Gateway product has not been selected. This is also managed via the Gateway Control Console, but includes only the basic set of firewall functionality.
Who uses the Gateway Control Console?
Firewall and security settings should only be changed by the Service Provider.
Incorrect configuration can lead to a security breach or a temporary failure of the system, requiring remedial action by the Support Team to restore normal services.
The Gateway Control Console implements common next-generation firewall features and functions, meaning that a Service Provider who is familiar with Internet security will be able to make the sort of changes that are occasionally necessary to meet end-users’ security requirements.
The Support Team can be contacted if assistance is required with a particular configuration change.
The Gateway as a Managed Service
Servers are monitored and maintained by the Support Team. As a result, many of the Gateway Control Console settings need never be changed by the end user or IT admins.
As a general rule please:
- Do not modify or delete any settings already in place as these are standard settings used by HPE to deliver the service.
- Do not attempt to upgrade the Gateway manually (i.e. using Config > Upgrade) or install additional applications – HPE validates and rolls-out upgrades to ensure compatibility with the server and IT services.
- When you need support, contact HPE ProLiant Easy Connect Support Team.
How to access the Gateway Control Console
The Gateway Control Console is a web based console where you can manage every aspect of network control; from content filtering to spam filtering, remote access to DHCP reservations, all in one simple web based interface.
You can find out the URL from the Commissioning Console. The URL will be in the format of https://znetmgr-00.corp.domain.com:443. (You will need to replace corp.domain.com with the Active Directory Domain name of the appliance.)
When prompted for a username and password, please use your Management account.
The Gateway Control Console administration can be divided into two main parts, the Navigation Pane on the left and virtual Racks on the right.
The Navigation Pane contains two tabs - Apps and Config, detailed below. The Apps tab on the left-hand side is used to learn more about applications and install applications into the "virtual rack." The Configtab contains several sections to configure the Untangle server's settings.
Generally, settings for individual rack apps are OK to modify, but care should be taken when changing the core settings under Config, since many of those are managed centrally and incorrect settings can affect normal operation. If changes are needed to any of these settings, please contact the Support Team first.
Applications are installed into one or more virtual Racks on the right hand side, and filter the traffic passing through the Untangle server. Each application has a faceplate with a Settings button to configure it, current status information and a power button to toggle it on or off.
Across the top there is a dropdown menu to switch to different Racks or use the Session Viewer and Host Viewer, as well as readouts for network speed statistics, a count of open sessions, CPU, memory, and disk information.
If you see an alert icon near the top of the web GUI, hover over it for more information - these are Administrative Alerts designed to help you keep your server healthy.
Tip: Using Mozilla Firefox or Google Chrome browsers is recommended for administration.