Comodo Dome Firewall

• Introduction To Comodo Dome Firewall - Virtual Appliance
  • Install Dome Firewall And Login To The Administrative Console
• The Main Interface
• The Dashboard
• View And Modify System Status And General Configuration
  • Manage Admin Accounts
    • Add And Manage Administrators
    • Manage Administrative Roles
  • License Activation
  • SNMP Settings
  • Central Management
  • Configure SSH Access
  • High Availability
  • View And Update Firmware Version
  • Create And Schedule Backup Of DFW State
    • Manually Create A Backup
    • Schedule Backup Operations
    • Encrypt Backup Archives
    • Export A Backup
    • Import A Backup Archive From A Local Computer
    • Roll Back The Virtual Appliance To A Previous Time Point
    • Reset The Virtual Appliance To Factory Defaults
  • Shutdown Or Restart The Dome Firewall Virtual Appliance
• View DFW Virtual Appliance Status
  • System Status
  • Network Status
  • System Usage Summaries
  • Network Traffic
  • Network Connections
  • SSLVPN Connections
• Network Configuration
  • Configure Interface Devices, Uplinks And VLANs
    • Configure Interface Devices
    • Add And Manage Gateway Uplink Devices
    • Create VLANs
  • Routes
    • Add And Manage Static Routes
    • Add And Manage Policy Routing Rules
• Configure DFW Virtual Appliance Services And Protection Settings
  • DHCP Server
  • Advanced Threat Protection
    • Manage The ATP Profiles
    • Comodo Antivirus
  • Time Server
  • Intrusion Prevention
    • Configure Intrusion Prevention System
    • Manage IPS Rulesets
    • Manage Application Identification Rulesets
  • Configure Wireless Hotspot
    • Configure Captive Portal Service
    • Customize The Login Page
    • Add And Manage Permanent Users
  • Internet Content Adaptation Protocol
  • Quality Of Service
• Manage Firewall Configuration
  • Firewall Objects
    • Manage Firewall Address Objects
    • Manage Firewall Object Groups
    • Manage Firewall Schedules
    • Active Directory Integration
  • Destination Network Address Translation
  • Source Network Address Translation
  • Configure System Access
  • Configure Firewall Policy Rules
    • Manage Firewall Policy Rules
    • Manage VPN Firewall Rules
• Configure Proxy Services
  • HTTP/HTTPS Proxy Server
    • Configure URL And Content Filtering
    • HTTPS Proxy
• Configure Virtual Private Network Settings
  • SSL VPN Server
    • Configure General SSL VPN Server Settings
    • Manage SSL VPN Client Accounts
    • Configure Advanced SSL VPN Server Settings
    • Configure Clients To Connect To Dome Firewall
  • IPsec Configuration
  • Configure L2TP Server
  • Configure IPSec/L2TP Users
• View Logs
  • Realtime Logs
  • Configure Log Settings
  • Generate Reports
• Appendix - Minimum Requirements For Software Installations

Configure Clients to Connect to Dome Firewall

The section explains how to establish a 'Client-to-site VPN' connection to the firewall.

• Help to configure an SSL VPN server is covered in 'Configure General SSL VPN Server Settings'.

• Help to add users is covered in 'Manage SSL VPN Client Accounts' and 'Configure LDAP Server Settings'.
  

Configure a client to connect to Dome Firewall

• Click 'VPN' on the left then 'SSLVPN Server'

• Click the 'Accounts' tab

• This will open a list of all users added to DFW:

• Download CA certificate - Download the server SSL certificate.

• Download Client Configuration - Download the SSL VPN client configuration file in .ovpn format.

• Download and install OpenVPN GUI client on endpoints you want to connect to DFW. Get the client from https://openvpn.net/index.php/open-source/downloads.html

• After installing the client on the endpoint, you need to paste the CA certificate and configuration file into the OPVN config folder. The configuration file is available in 'Program Files' > 'OpenVPN' > 'config'

• Open the configuration file and make sure the parameters are as shown below:

• proto - The protocol depends on the protocol defined in 'Advanced' section.

• remote - The IP should be the address and port of your DFW account as configured in the 'Advanced' section.

• Right-click on the OpenVPN tray icon in the task bar then click 'Connect':
  

The connection process will start. You will need to provide user authentication credentials:

• Complete the 'Username' and 'Password' fields and click 'OK'.

• After successful authentication, the client will be connected to DFW:
  

You can also view the user's connection status in the admin console at 'Status' > 'SSLVPN Connections' and 'VPN' > 'SSLVPN Server'.

See 'IPsec Configuration' for details about connecting networks to DFW.