What is the Endian Firewall?
Endian Firewall is a linux security distribution that turns hardware into a powerful security appliance with Unified Threat Management functionality. The firewall can be installed on virtually any hardware. It is used as a powerful firewall-router with advanced features. Normally it sits directly between the public network and a private network. It has the functionality to replace both a router and firewall.
Why Use the Endian Firewall?
The two most common uses for the Endian Firewall are to sit on a computer as the main router of a physical network, or as the main router of a virtual router. The firewall-router can also be used as departmental routers on large networks.
Using it in a physical network is easy to use. It is typically used on an old computer that is not getting use. After booting from the Install CD, you have the option to partition the drive and install it, or to wipe a partition clean and install it there. After installing it, you set it up using another computer.
Using it in a virtual network is also easy to use. It can be placed directly on a virtual machine, as a linux machine. It does not need to be a partition of a machine, but can function as the sole system. You place the Endian Firewall on a custom network and install it. After that, any other virtual machine placed on the same network has access to the firewall. You must initially use a separate virtual machine on the same network to set it up. Then any virtual machine can connect to it. It can be used to control a virtual LAN or to connect a closed network to the internal using a bridged-network.
How to Install the Endian Firewall
I will be installing this as a virtual machine; however, the process i will use is the same process for installing it on a physical network, booting from a disk.
Downloading the Disk Image
To download the disk image, go to http://www.endian.com/us/community/download/. Click the orange "Download Now" button. Select the download link under the EFW 2.5.1 heading, or download the file HERE. After downloading the image, burn the file onto a CD or DVD. If you are using a virtual machine, simply mount the file on the machine as a CD.
Setting Up the Virtual Machine
When you setup the virtual machine, make sure you have the correct settings. You need a minimum of 512MB of memory and 8GB of storage. You will need two NICs. The first should be your custom LAN network. The second should be the bridged-connection network. A NAT network works as well. It is very important that the NICs are in this order. If they are not, this will not work. It is best to set the hard drive as a single dynamically allocated drive. The OS setting will depend on the virtualization software options. Typically you will use either "Other Linux" or "Other Linux 2.6.x".
Installing Endian Firewall
1. Boot from the Install CD
2. Press Enter
3. Select English and press Enter
4. Press Enter
5. Select Yes then select OK
6. Select No then select OK
7. Wait for the installation
8. Press Enter
9. Let the system reboot
Configuring your Internet Settings
Next we need to configure the computer to be able to communicate with Endian Firewall.
1. Open the network and sharing center.
2. Click on the name of your network. Mine is Local Area Connection 2.
3. Click Properties
4. Select TCP/IPv4 and click Properties
5. Select to setup a Static IP and enter the following information:
IP Address: 192.168.0.100
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.0.15
Prefered DNS Server: 192.168.0.15
6. Click OK
7. Leave the remaining widows open, you will need them later, and open an internet browser
Configuring the Endian Firewall
Next, we will configure the Endian Firewall for the first time.
1. In your browser address bar, type https://192.168.0.15:10443. Do not worry about the certificate error, accept it and continue to the website
2. Click Next (>>>)
3. Select your language and timezone, then click Next
4. Accept the license and click Next
5. Select No, then click Next
6. Create a password and confirm it. The Web Frontend Password and SSH Password can be the same but do not have to be. Click Next
7. Select Ethernet DHCP and click Next
8. Select None and click Next
9. Leave the default settings as they are. Click Next
10. Leave the default settings as they are. Click Next
11. Click Next
12. Click Next
13. Click Ok, Apply Configuration
14. Wait for the Endian Firewall to reboot, then refresh the page.
Enabling the DHCP Server
Now, we need to configure the DHCP settings so the Endian Firewall will automatically assign IP Addresses to devices that connect to it.
1. After the page refreshes, enter the username: Admin as well as the password you created for the administrator.
2. Go to the Services tab
3. Enable the DHCP Server, then click the + sign to expand the settings section.
4. For Start Address enter 192.168.0.100 and for End Address enter 192.168.0.150
5. Leave the rest of the settings as the default values. Click Save All
Re-configuring your Internet Settings
1. Without closing the Endian Firewall control panel, go back to your Local Area Connection Properties
2. Select TCP/IPv4 and click Properties
3. Select Obtain and IP address automatically
4. Select Obtain DNS server address automatically
5. Select Ok and close out the Internet Properties windows
Back at the Endian Firewall control panel, on the services tab, scroll to the bottom. You should now see that your computer is connected and has been provided an IP address automatically. You should now have internet access. To test this, go to www.google.com. If your successfully access the page, you are done. You have properly configured your network and should be able to connect other devices automatically! You can always go back into the Endian Firewall control panel the way you did the first time to configure any additional settings.
venketesh on January 28, 2015:
i have configured has it is mentioned above and even i got the dynamic ip for the system but not able to access internet what must be the problem in settings it shows there is net access but i cannot able to ping to any web site and even i made sure that firewall is on what i must do
Mehran on June 30, 2014:
Dear Phillip Rearick
Thanks for our very useful guidelines on Endian
Please consider we have UTM Endian firewall 3.0.devel installed in our internal local server, in order to have special setting toward a software (Microsoft Lync) in our network, we need to do reverse proxy in order to change the internet host (public server name) to internal server name, but we couldn’t find any kind of option for such mentioned setting in UTM, would you please guide us how we can solve this problem.
Really thanks for your time in advance,
Cata on March 10, 2014:
What do you mean by "The first should be your custom LAN network"?