Page 2
Any and all intellectual property rights related to the Gatekeeper Card Pro product belongs solely to Yoggie Security Systems Ltd. and its licensors, and may not be used in any manner except as explicitly permitted by Yoggie Security Systems Ltd., in the Terms of Use Agreement.
About this User Guide Gatekeeper Card Pro Features About this User Guide This User Guide provides installation and usage instructions for the Gatekeeper Card Pro™. User Guide | 5...
Stateful Inspection Firewall Before any data is accepted for processing by the computer’s operating system, a low-level driver redirects it to the Gatekeeper Card Pro unit where a full security check is performed. Security breach attempts are identified and thwarted, and only safe, secure data is passed back to the computer.
Modes of Operation Corporate (Managed) Mode In this mode, the Gatekeeper Card Pro unit is connected to a Yoggie Management Server. The Yoggie Management Server extends the IT manager’s ability to manage and enforce security on traveling laptops. Installed in the IT server room, the Yoggie...
Disable protection — (password required) in case of an emergency, for example, if a Gatekeeper Card Pro unit has been lost or damaged, the network can be accessed by disabling Gatekeeper Card Pro Enforcement (see “Disabling Gatekeeper Card Pro Enforcement”).
Introduction Package Contents Package Contents Gatekeeper Card Pro Gatekeeper Card Pro CD Quick Start Guide System Requirements ExpressCard slot and PC running Windows XP or Vista 32bit. User Guide | 9...
1. Insert the Gatekeeper Card Pro CD. A menu screen appears. 2. Click Install Yoggie Software & Driver and follow the on-screen instructions. After installing the driver, your web browser opens and you are automatically prompted for a username and password to begin the registration process.
Page 11
Introduction Driver Installation and Registration 4. Select your preferred language from the drop-down list and click Next. The End-User License Agreement (EULA) screen appears. 5. Read the EULA and click I Accept to proceed. The registration screen appears. User Guide | 11...
Page 12
Driver Installation and Registration 6. Do one of the following: If your laptop will be connected to the Yoggie Management Server (YMS), select the Corporate Mode setup option. If your laptop will not be working with the Yoggie Management Server™, select the Standalone Mode setup option.
Page 13
8. Enter the following information: Your name Your email address A valid license key, located on the CD sticker (Standalone Mode only) Settings for your corporate Yoggie Management Server IP address and password (Corporate Mode only) 9. Click Next. The Privacy screen appears.
Page 14
Gatekeeper Card Pro downloads any required updates. During first time use, this process can take up to fifteen minutes, and you will not be able to use Gatekeeper Card Pro during this time. You can view the update progress via the Web-based Yoggie Management Console.
—if the Gatekeeper Card Pro driver/software is Gatekeeper Card Pro icon installed (see “Getting Started”). Web browser—if for some reason the Gatekeeper Card Pro icon is not available you can manually access the Management Console through a standard Web browser.
Page 16
Yoggie Management Console Accessing the Management Console via the Gatekeeper Card Pro Icon Password — enter your Gatekeeper Card Pro password (the default password is yoggie). 4. Click OK. The Management Console opens. Navigation pane Display pane 16 | Gatekeeper Card Pro...
Manually Accessing the Management Console Manually Accessing the Management Console If, for some reason, the Gatekeeper Card Pro icon is not available, you can manually access the Management Console through a standard Web browser. The Management Console can be manually accessed by entering the Gatekeeper Card Pro Management Console URL into the address field of your Web.
The Language Settings page appears. 4. Select the language you wish to use from the list. 5. Click Apply. The selected interface language will be used and the main Yoggie Details page appears. Changing Your Password You can change your Gatekeeper Card Pro Management Console password at any time.
Your password is changed and the main Yoggie Details page appears. Changing Your User Details Gatekeeper Card Pro user details consist of your username and e-mail address. These can be changed at any time. To change your Gatekeeper Card Pro user details: 1.
Your mode is changed and the Yoggie Details page appears. Changing the Privacy Settings Gatekeeper Card Pro collects only security related information in order to improve the quality of the products and service. It is highly recommended that you use the default privacy settings.
Gatekeeper Card Pro during the last 15 minutes during which the Gatekeeper was connected and working. The Status page does not show the Gatekeeper Card Pro security level, but the intensity of security breach attempts. Gatekeeper Card Pro protects your laptop at all risk levels.
Page 22
The Status page displays the following gauges, which enable you to monitor security activity: Risk Level — displays your current security risk level, based on the Gatekeeper Card Pro analysis of all firewall, IDS/IPS, and malware security events. Firewall Events — displays the number of attempted firewall attacks that took place over the last 15 minutes.
Yoggie Management Console Monitoring Security Activity Viewing and Printing Reports Gatekeeper Card Pro provide reports about types of security events in the form of graphic charts. These charts reflect information gathered during the last 24 hours of operation. You can click a chart to view it as a 3D graph, and then click and drag it to change its orientation.
Page 24
2D — displays the chart in 2D Print — prints the 3D chart Prev — displays the previous chart in 3D Next — displays the next chart in 3D Charts — returns to the main chart page 24 | Gatekeeper Card Pro...
Yoggie Management Console Monitoring Security Activity Viewing the Security Log The Gatekeeper Card Pro Security Log displays security event information. You can view the initial log and details for each event. To view the security log: 1. Click Reports in the Navigation pane of the Management Console.
Page 26
Yoggie Management Console Monitoring Security Activity 6. Navigate to the location where the compressed security log file will be saved on your PC, and click Save. The log file is saved to your computer. 26 | Gatekeeper Card Pro...
Yoggie Management Console Monitoring Security Activity Viewing the System Log The system log displays all important, non-security system events. To view the system log: 1. Click Reports in the Navigation pane of the Management Console. The main chart page of the Charts tab appears in the Display pane.
Page 28
Yoggie Management Console Monitoring Security Activity 3. Click the right/left arrow buttons to navigate to subsequent/previous VPN Log pages, as required. 28 | Gatekeeper Card Pro...
Yoggie Management Console Configuring Security Configuring Security Configuring Gatekeeper Card Pro security policy is simple and intuitive. There are three levels of security: High Policy — the most secure policy. Provides the highest security, but may reduce functionality. Med Policy — the recommended policy. It provides the recommended level of security, while maintaining functionality.
Your current network settings are displayed under the Network tab in the Settings menu. If you normally connect to the Internet through a Proxy Server, this server must be defined in the Yoggie Management Console. Configuring Internal Network Settings You can change your internal network settings as needed.
Yoggie Management Console Configuring Gatekeeper Card Pro Network Settings 4. In the IP Address field, enter the new device IP address. 5. In the Subnet Mask field, enter the new device subnet mask. 6. Click Apply. Configuring Proxy Settings If you connect to the Internet using a proxy server, you must configure basic settings.
Page 32
Yoggie Management Console Configuring Gatekeeper Card Pro Network Settings 3. Click Advanced. The Proxy Settings page appears. 4. Select Manual proxy configuration. 5. In the HTTP Proxy field, enter the web address of the proxy server. 6. In the Port field, enter the port number on which the proxy server is providing service.
Gatekeeper Card Pro’s Web Filtering engine. To overcome this problem, Gatekeeper Card Pro can allow the Web Filtering engine to operate on the well- known HTTP port 443, which is always open on the Firewall. This mode of operation is called Remote Procedure Call (RPC) mode.
Page 34
Yoggie Management Console Configuring Gatekeeper Card Pro Network Settings 3. Click Advanced. The Additional Settings page appears. 4. To change the MTU, check the Custom MTU checkbox and enter the new MTU (default is 1500 bytes). Start at 1400 MTU, and then try lower numbers if necessary.
The settings are saved, and the main Network Settings page appears. Configuring VPN Settings Gatekeeper Card Pro include a generic VPN Client that enables you to safely connect to various Remote IPsec VPN Servers. You can enable or disable the VPN client at any time.
7. In the Remote Network Mask field, enter the remote network subnet mask. 8. In the Local ID field, enter the local ID as configured on the remote VPN server. 9. In the Remote ID field, enter the remote ID as configured on the remote VPN server. 36 | Gatekeeper Card Pro...
Yoggie Management Console Configuring VPN Settings 10. If required by the remote VPN server, enable PFS (Perfect Forward Secrecy) by selecting the PFS checkbox. 11. If required by the remote VPN server, enable Aggressive Mode by selecting the Aggressive Mode checkbox.
1. Click Settings in the Navigation pane of the Management Console. The main Settings page appears. 2. In the VPN tab click View Settings. The VPN Settings screen appears. 3. In the VPN Type drop-down list, select Cisco. 38 | Gatekeeper Card Pro...
Gatekeeper Card Pro provides protection against Spam and Phishing by integrating the powerful MailShell™ engine. Every e-mail, incoming or outgoing, is scanned by the Gatekeeper Card Pro to identify and neutralize any security threats in the same manner as all network data is scanned. This includes viruses, spyware, and active...
Page 40
If needed, you can supplement the tagging of the MailShell engine with your own Custom E-mail rules. For further information, see “Creating Custom E-mail Rules”. Gatekeeper Card Pro also generates two spam header files, which can be found in the message source and include the following information: X-Yoggie-SpamLevel –...
The Security tab appears in the Display pane. 2. Click the Email tab. The Email Settings screen appears. 3. If you want Gatekeeper Card Pro to tag subject lines of suspicious spam e-mails, select the Tag Subject lines of suspicious spam checkbox. 4. Click Apply.
Page 42
Defining a rule adds it to the rule list, but it is saved only when you click Apply. Therefore, if you attempt to move to another screen in the Gatekeeper Card Pro Management Console before clicking Apply, you will receive a warning that you must first save your work.
Edits to a rule are saved only when you click Apply. Therefore, if you attempt to move to another screen in the Gatekeeper Card Pro Management Console before clicking Apply, you will receive a warning that you must first save your work.
Page 44
Deleting a rule removes it from the rule list, but the deletion is saved only when you click Apply. Therefore, if you attempt to move to another screen in the Gatekeeper Card Pro Management Console before clicking Apply, you will receive a warning that you must first save your work.
Firewall — Gatekeeper Card Pro can block unwanted outbound traffic using lists of port numbers, or a whitelist or blacklist. Size Policy — Gatekeeper Card Pro can scan files up to 10 MB. You can specify that Gatekeeper Card Pro block files larger than 10 MB or scan to the size limit.
Page 46
Block All. To clear all categories, click Allow All. 6. Click Apply. To add a Custom Web Rule: 1. In the Web Filtering screen, click the Custom Web Rules link. The Custom Web Rules window appears. 46 | Gatekeeper Card Pro...
Page 47
Yoggie Management Console Advanced Security Settings 2. Click the (plus) button. The Add Rule dialog box appears. 3. In the Rule Name field, enter a descriptive name for the rule. 4. In the If the following condition is met: section, define the condition under which action will be taken.
Page 48
Defining a rule adds it to the rule list, but it is saved only when you click Apply. Therefore, if you attempt to move to another screen in the Gatekeeper Card Pro Management Console before clicking Apply, you will receive a warning that you must first save your work.
Deleting a rule removes it from the rule list, but the deletion is saved only when you click Apply. Therefore, if you attempt to move to another screen in the Gatekeeper Card Pro Management Console before clicking Apply, you will receive a warning that you must first save your work.
Page 50
Blacklist. To enable/disable Blacklist/Whitelist-based blocking: 1. Click Settings in the Navigation pane of the Management Console. The Security tab appears in the Display pane. 2. Click Advanced. 3. Click Firewall. The firewall screen appears. 50 | Gatekeeper Card Pro...
Page 51
Yoggie Management Console Advanced Security Settings 4. Do either of the following: Uncheck the Blacklist checkbox to disable outbound port blocking (i.e., to allow ALL traffic except as specified in the Rules in the bottom portion of the screen), Check the Whitelist checkbox to block outbound traffic based on the Whitelist (i.e., to allow traffic ONLY on ports checked in the Whitelist, except as...
Page 52
Yoggie Management Console Advanced Security Settings The firewall screen appears. 4. Click the blacklist link. The Blacklist screen opens. 52 | Gatekeeper Card Pro...
Page 53
Yoggie Management Console Advanced Security Settings 5. Check all ports to be blocked and uncheck all ports to be allowed. 6. Click Apply. The security policy is set. Blacklist settings are ignored if a Whitelist is used. (See the procedure above to enable/disable Blacklist-based blocking.)
Page 54
To create and sequence Firewall Rules: 1. Click Settings in the Navigation pane of the Management Console. The Security tab appears in the Display pane. 2. Click Advanced. 3. Click Firewall. The firewall screen appears. 54 | Gatekeeper Card Pro...
Page 55
Yoggie Management Console Advanced Security Settings 4. Click the (plus) button. The Add firewall rule dialog appears. 5. Specify the following Rule components: Direction: Inbound or outbound traffic. Remote IP address: For Inbound traffic, select Any or select the option below Any and enter the IP address of the source.
Page 56
9. Click Apply to save and apply the changes. To delete a Firewall Rule: 1. Click Settings in the Navigation pane of the Management Console. The Security tab appears in the Display pane. 2. Click Advanced. 3. Click Firewall. The firewall screen appears. 56 | Gatekeeper Card Pro...
Size Policy Gatekeeper Card Pro can scan files up to 10 MB. You can specify that Gatekeeper Card Pro block files larger than 10 MB or scan to the size limit. To configure the size policy: 1.
3. Click Size Policy. The Size Policy screen appears. 4. If you want Gatekeeper Card Pro to block all files larger than 10 MB downloaded from the web (HTTP), select the checkbox. (Not selecting this option means these files will go through but will be scanned for up to 10 MB of their size).
Advanced Security Settings 4. Select the checkboxes of the protocols you want Gatekeeper Card Pro to scan. 5. Select the checkbox of the Security Engine you want Gatekeeper Card Pro to use: Select Mailshell if you want to activate spam mail checks.
Page 60
5. For each activity/threat, select one of the following settings from the drop-down list: Allow – Gatekeeper Card Pro allows this activity and does not log it. Log – Gatekeeper Card Pro allows this activity and logs it. Block – Gatekeeper Card Pro blocks the activity and logs it.
Gatekeeper Card Pro system, as described in this section. Generating a Support File You can generate and save a support file that contains all Gatekeeper Card Pro logs, configuration data, and other relevant information. This file can then be sent to a Yoggie support expert for analysis.
To reset device counters: 1. Click Support in the Navigation pane of the Management Console. The main Support page appears. 2. In the Support Tools tab, click the Reset Options button. A list of reset options appears: 62 | Gatekeeper Card Pro...
3. Select the logs or counters you want to clear and click Apply. The selected items are cleared. Diagnostics You can ensure that your Gatekeeper Card Pro is protecting your laptop by running a diagnostics check. You may be required to run the following diagnostic test during a support session: General Diagnostics –...
Page 64
Support Diagnostics 3. In the General Diagnostics section, click the Run button. The general diagnostics dialog opens with results of the various tests. 4. After reviewing the results of the tests, click Close. 64 | Gatekeeper Card Pro...
Support Diagnostics Running Network Diagnostics To run network diagnostics: 1. Click Support in the Navigation pane of the Management Console. The main Support page appears. 2. Click the Diagnostics tab. 3. In the Network Diagnostics section, enter the IP Address or computer name in the field next to the Ping button.
Page 66
Support Diagnostics 5. To perform a trace, enter the IP Address or computer name in the field next to the Trace button. 6. Click Trace. A window opens and the trace is performed. 66 | Gatekeeper Card Pro...
1. Click Support in the Navigation pane of the Management Console. The main Support page appears. 2. Click the Diagnostics tab, 3. In the Virus Test section, click the Virus Test button. The file is downloaded, blocked by Gatekeeper Card Pro and the following message appears: User Guide | 67...
One of the outstanding features provided by the Gatekeeper Card Pro driver and software is Gatekeeper Card Pro Enforcement. This feature prevents or disables connection to a network when Gatekeeper Card Pro is not connected to your laptop. Situations may arise when you need to disable Enforcement, for example if the Gatekeeper Card Pro has been damaged or lost.
Page 69
Gatekeeper Card Pro Enforcement Changing the Enforcement Password The Change Password dialog box opens. 3. Enter the current disable password in the Current Password field. 4. Enter the new disable password in the New Password field. 5. Enter the new disable password once again in the Verify Password field.
1. From the Start menu, select Programs>Yoggie>Uninstall Yoggie. The Uninstall wizard opens. 2. Enter the uninstall password in the Password field. The default uninstall password is yoggie. If you are a corporate user, contact your system administrator to obtain the password. 70 | Gatekeeper Card Pro...