First time setup

First thing I recommend to configure is a transfer Network between your existing router and the UTM, so that the internal network is on a different subnet. Otherwise anyone could manually configure IP manually and gateway to your existing router and the UTM would be completely outdriven...

E.G. your Router has 192.168.0.1 and the 'external' interface of the UTM 192.168.0.2, using default gateway 192.168.0.1. Your internal network can stay on 192.168.1.0, the UTM on 192.168.1.100. I personally prefer routers having .1 or .254, but thats a personal favor.

With that constellation your router is only connected to the UTMs external interface and the internal interface is connected to a switch and over that with all other devices. When you run the configuration wizard a functional behavior should be present afterwards where you can manually edit the created things to your needs.

Hi,

Thanks for the reply (:

I'm a little confused however, are you saying to put the UTM on a different subnet to the router?

Thanks

Nicholas

And would this work as my UTM is running in a virtual machine?

Depends on the machine the UTM runs on. If it is just a PC with one NIC you can nearly skip anything containing network security features because those - to be effective need an internal and an external interface. You could work with VLAN interfaces to simulate two NICs but that would limit the bandwidth of the physical NIC to something unusable in my opinion, host, vmnic1 and vmnic2 would share a gigabit uplink or whatever speed you have.

With only one NIC you can run the virtual UTM as a dedicated proxy but to have an effective setup your router should be capable doing NAT only for the UTM. Otherwise a manually configured IP/Gateway can always pass the UTM without the need to proxy any traffic.

A classic firewall Setup is (WAN)-> external interface -[firewall] - internal interface -> (LAN) where () is a network and -[]- the device with two NICs.

In your Setup with keeping the router it would be (WAN) -> -[router]- -> (LAN1) -[firewall]- -> (LAN2) where LAN2 is your internal network and LAN1 a network only containing router and firewall.

How do I access the UTM's config page when my computer's IP is 192.168.1.129 but my UTMs IP is 192.168.2.100. Are these two IPs on different subnets?

Thanks

Nicholas

Depends on the subnet mask you choose, they could be in the same subnet  ;-) For mostly used /24 netmasks they are on different subsets.

Your UTM in the 2NIC Setup has 2 IPs, e.g. 192.168.1.100 on the external and 192.168.2.100 on the internal interface.