Revised: 22 November Integration Guide

Transcription

1 Revised: 22 November 2016 Integration Guide

2 About This Guide Guide Type Documented Integration WatchGuard or a Technology Partner has provided documentation demonstrating integration Guide Details WatchGuard provides integration instructions to help our customers configure WatchGuard products to work with products created by other organizations. If you need more information or technical support about how to configure a third-party product, see the documentation and support resources for that product. 2 RedSeal Integration Guide

3 RedSeal Integration Overview The RedSeal vulnerability and network assessment system consists of a client/server software application that provides a detailed view of your network infrastructure so you can measure, prioritize, and mitigate security risks in your network and optimize compliance with your organization s policies. This document describes the steps to integrate RedSeal with your WatchGuard Firebox so that a RedSeal administrator can make a network assessment for your WatchGuard Firebox. Platform and Software The hardware and software used to complete the steps outlined in this document include: Firebox with Fireware v RedSeal Server RedSeal Client on Windows Server 2012 R2 Configuration To complete this integration, you must first deploy RedSeal in your environment. In our integration test, we installed RedSeal Server on a virtual appliance and installed RedSeal Java client on Windows Server 2012 r2. To set up your RedSeal client/server software environment, see the RedSeal Installation Guide. Set Up RedSeal To upload the RedSeal plugin: Start the RedSeal java client. To upload a new plugin to the RedSeal server, select Admin > Plugin > Upload Plugin. The Upload Plugin dialog box appears. RedSeal Integration Guide 3

4 Click Browse. Find a supported WatchGuard Plugin file. Click Select. 4 RedSeal Integration Guide

5 Click Upload. After you see the message Plugin Upload Complete, click Close. Import a WatchGuard Firebox Configuration On the Home Page, in the RedSeal Model Status panel, click Network Devices. Or, select File > Import. The Data Import dialog box appears. RedSeal Integration Guide 5

6 Adjacent to Data type, select the L2 & L3 Devices radio button. From the drop-down list, select WatchGuard Fireware OS. Select one or more configuration files that you want to import. In our example, we import a firebox.xml configuration file. Click Import. Update TRL On the Home Page, in the RedSeal Model Status Panel, click TRL. The Data Import dialog box appears 6 RedSeal Integration Guide

7 Adjacent to Data type, select the Other radio button. From the drop-down list, select Threat Reference Library(TRL). Select the TRL file that you want to import. In our example, we import RedSeal_TRL_8-3- latest.gz. Click Upload TRL. Test Integration In our example, we imported a WatchGuard configuration to RedSeal so that RedSeal can create a security model based on that configuration by drawing network resources on a topology map. RedSeal Integration Guide 7

8 RedSeal provides many features that can help you determine whether network resources are vulnerable to threats. For more information, see the RedSeal user documentation. In our integration tests, we looked at three features: Threat Sources, Analysis, and Best Practices. Identify Threat Sources On the Home Page, in the RedSeal Model Status Panel, click Threat Sources. Or, select Tools > Threat Sources. The Likely Threat Sources window appears. 8 RedSeal Integration Guide

9 To select the subnets that you want to identify, right-click a subnet from the list. In our example, we select one Extranet. Click Save. Run Analyzer To run an analysis, on the Status panel, click Analysis. When the analysis completes, the time stamp in the Last Analysis section updates, and Analyze button is disabled. RedSeal Integration Guide 9

10 Best Practices Analysis The Best Practices Analysis section on the Home tab shows the results of all Best Practice checks that were run against your network. Click Details to view the results. 10 RedSeal Integration Guide

11 To see the details of a best practice analysis check, double-click an entry. A detail page for that item appears. RedSeal Integration Guide 11

12 12 RedSeal Integration Guide