Using your Symantec Firewall Appliance with TZO DDNS

	Using TZO Dynamic DNS with your Symantec Firewall Appliance
	You can now use TZO with your Symantec Gateway Security 300 or 400 Series appliances! This tutorial explains how to setup the TZO DDNS within your Symantec appliance. In order to use TZO.COM DDNS services within the Symantec appliances, you must have a 300/400 V2 Symantec appliance with the latest firmware (via LiveUpdate)

	The first step is to setup your Symantec appliance using the Setup Wizard. Once you have the appliance set up and running, you can continue below to setup the TZO DDNS in the appliance. Step 1) Below is a screenshot of the TZO.COM signup page where you can signup with a free trial of TZO DDNS for your Symantec appliance. To get your free trial domain, you can signup at http://Symantec.tzo.com If you already have a TZO.COM account, you can skip directly to step 2 Once you reach the Symantec signup page as shown below, you need to enter in your choice for your domain name, and then your email address, and then click on the Create My Free Trial Domain button. Once you do this, TZO will send you an email with your trial key. Once you get the email with your TZO trial information, you should write down your TZO DOMAIN name, and your TZO Key before proceeding to step 2.

	The Signup page Symantec.tzo.com allows you to signup for a free trial of TZO (Click to Enlarge)

	Step 2) Now that you have signed up with a free trial of the TZO DDNS, you need to enable the TZO DDNS, and then enter in your TZO Key, Domain Name and Email address into the Symantec appliance. Below is a screenshot of the main WAN/ISP page. In order to get to the Dynamic DNS section, you need to click on the Dynamic DNS tab (Shown in the upper right hand corner of the screenshot below) The main WAN/ISP page of the Symantec appliance. You need to select the Dynamic DNS tab in order to configure the TZO Dynamic DNS service in the appliance. (Click to Enlarge)
	Step 3) Your next step is to click the Dynamic DNS tab from the main screen of the WAN/ISP page as shown as shown in the screenshot below. You will now see the TZO Dynamic DNS service option, as well as fields to enter in your TZO Key, Email and Domain name. Once you do this, click the SAVE button at the bottom of the screen, and then click the UPDATE button to force a DDNS update to the TZO DDNS servers. This will force your domain name to sign on to the IP address of the router. In this case, the Symantec router is a DUAL WAN router, and we selected TZO to update to the WAN1 IP address.
	The WAN/ISP - Dynamic DNS tab shows the TZO DDNS in the Symantec appliance (Click to Enlarge)
	Step 4) Now that you have setup the TZO DDNS in the router, your domain name should be pointed to the current IP address of the router. You can now setup the router firewall to forward the proper ports to an internal server. In this example, we show how to setup a web server to work with the Symantec appliance. In order to forward ports to a server connected to the Symantec appliance, you first need to add a reserved host. In this case, we have a web server running on the internal IP of 192.168.0.2 In the screenshot below, we added the reserved host to the list by entering the Hostname, MAC Address, and IP address in the Firewall/Computers section of the appliance. You can also select to bind the server to a specific WAN port and other options. Once you enter in the information, you can click the ADD button to add the host to the reserved list.

	In order to forward ports, you must set a reserved host in the Symantec appliance (Click to Enlarge)

	Step 5) Now that you have reserved a host and IP for your server as shown in step 4, you should select the INBOUND RULES tab as shown in the screenshot below. In this example, we added a web server called LAPTOP as a host in step 4, and now we need to add a rule to forward the WEB port (port 80) to that specific host. Under the Rule Definition area, select the Application server from the dropdown list (this is the reserved host that we added in step 4 - called LAPTOP) We now select HTTP from the dropdown list of services, and then select the ADD button to add HTTP port forwarding to the application server called LAPTOP as shown below. That's it! To add other application servers and services, simply repeat Step 4 and 5 for each additional server and service you wish to run. If you have more questions on the Symantec series of firewall appliances, please see the Symantec website If your ISP blocks access to port 80 inbound, you can use the TZO HTTP Relay services to get around the blocked ports. For more information on the TZO HTTP relay and other services offered by TZO.COM, please see the website at http://www.tzo.com

	The INBOUND RULES screen of the Symantec appliance allows port forwarding (Click to Enlarge)