“License details” tab

This button is used for finding new licenses or for updating the date of the last check for a license.

NOTE

In this tab, the button allows searching for licenses for all firewalls in the high availability cluster.

If the firewall has found a license through the button Search for a new license, the button Install the new license will be enabled. By clicking on it, a download will be launched. Confirm or cancel the download.

NOTE

In this tab, the button allows installing the license for the firewall indicated.

This button allows collapsing all the features in the license.

This button allows expanding all the features in the license.

Indicates the features and options of each feature found on the firewall.

The features are: “Administration”, “Date”, “Flags”, “Global”, “Hardware”, “Limit”, “Network”, “Proxy”, “Service” and “VPN”. The options relating to the features are explained in detail in the next section.

Indicates, for each license installed, which options have been enabled for each feature, or the expiry status. A symbol indicates whether a feature is enabled, and another symbol shows that an option has been disabled. Symbols and colors show the difference between an option that is close to expiry (less than 90 days to the expiry date), an expired option and a valid option.

This column appears only if a new license is available but has not yet been installed, and that a reboot would be necessary (in other words, this column will never appear if you have selected in the advanced properties of the General tab the option Install license after it has been downloaded  - automatic when possible (no reboot necessary). When a new license is available, this column will set out the new values in comparison with the values of the current license indicated in the column “In progress (current license)”. Symbols and colors indicate improvements or declines in value compared to the values of the current license. If the option has not changes, nothing will be indicated.

Administration possible via the web interface. (Default value: 1).

Monitoring possible via Stormshield Network REAL-TIME MONITOR (Default value: 1).

Deadline for updating DNSRBL spam databases

Deadline for updating ClamAV antivirus databases

Deadline for the ExpressWarranty. This allows limiting the client’s waiting time during the repair of his product.

Expiry date of the license.

Earliest date for using the license

Deadline for updating ASQ patterns.

Deadline for updating the spam filter heuristic engine.

Deadline for updating Stormshield Network’s URL filter databases.

Deadline for updating Stormshield Network Extended Web Control URL filter databases.

Deadline for updating the appliance.

Deadline for updating advanced antivirus databases.

Deadline for updating SEISMO vulnerabilities.

Deadline for the warranty.

Enables/disables management/presence of the backup partition. (Default value: 1).

Allows customizing ASQ models.

Express warranty that allows limiting the client’s waiting time during the repair of his product.

Enables or disables the use of an LDAP directory (Default value: 1*)

Allows defining an active and passive appliance in a high availability cluster. (Master/Slave/None).

Enables or disables the internal PKI. (Default value: 1)

Enables or disables SEISMO. (Default value: 0)

Comments.

Unique identifier

Temporary license (as long as the appliance has not been registered). Default value: 1 (factory settings), 0 once the product has been registered.

Version of the license (checks the compatibility of the format for the license/version of the Firmware). The default value is 9.

Presence of an optional cryptographic card. (Default value: depends on the model).

Maximum number of physical interfaces. (Default value: depends on the model).

Allows channeling date from one hard disk to another when one of them fails.

Maximum number of connections passing through ASQ. (Default value: 0 (= unlimited)).

Maximum number of networks managed by ASQ. (Default value: 0 (= unlimited)).

Maximum number of users who can authenticate on the appliance. (Default value: 0 (= unlimited)).

Enables or disables the possibility of using dialups to establish high availability links. (Default value: 1).

Enables or disables hybrid mode on interfaces (mix of interfaces, bridges, VLANs, etc). (Default value: 1*).

Allows routing by interface. This option is enabled by default.

See the Menu: Configuration > Network > Interfaces / Advanced properties tab/ Bridge: routing by interface (Default value: 1).

Enables or disables load-balancing on dialups. (Default value: 1).

Enables or disables QoS. (Default value: 1).

Enables or disables VLANs (Default value: 1).

Enables or disables spam filtering via DNSRBL in the proxy. (Default value: 1).

Enables or disables the ClamAV antivirus in the proxy. (Default value: 1).

Enables or disables the FTP proxy. (Default value: 1**).

Enables or disables the http proxy (Default value: 1).

Enables or disables the ICAP ReqMod. (Default value: 1).

Enables or disables the ICAP RespMod. (Default value: 1).

Enables or disables the IMAP proxy (which does not exist on UTMs). (Default value: 1).

Enables or disables the POP3 proxy. (Default value: 1).

Enables or disables the SMTP proxy. (Default value: 1).

Enables or disables the spam filter heuristic engine. (Default value: 0).

Enables or disables URL filtering via Stormshield Network’s database in the proxy. (Default value: 1).

Enables or disables URL filtering via Stormshield Network Extended Web Control database in the proxy. (Default value: 0).

Enables or disables the advanced antivirus in the proxy. (Default value: 0).

Enables or disables the user authentication interface.

Enables or disables DHCP server/relay service (Default value: 1).

Enables or disables DNS cache service. (Default value: 1).

Enables or disables the DynDNS client of the DNS update server.

Enables or disables enrolment. (Default value: 1).

Enables or disables the internal LDAP database (Default value: 1).

Enables or disables NTP synchronization (Default value: 1).

Enables or disables public access to the internal LDAP (Default value: 1*).

Enables or disables the SNMP agent. (Default value: 1*).

Enables or disables the possibility of setting up anonymous tunnels. (Default value: 1*).

Enables or disables PPTP tunnels. (Default value: 1*).

Enables or disables SSL VPN.

Enables or disables support for strong algorithms for the encryption of IPsec tunnels. (Default value: 1*).

Maximum number of IPsec tunnels. (Default value: 0 (=unlimited)).