Page Comparison

1. Note your Armor username.

1. • The

1. • Username will be pre-populated with the email address of

1. • the Primary Contact

1. • for the account.

1. In Password

1. and Confirm Password,

1. create and enter an account password.

   • Your password must be at least 12 characters in length.

   • Your password must contain an upper-case character, a lower-case character, a number, and a special character.

   • Your password cannot contain personal information, such as your name, email address, birthday, etc. For example, if your name is John Smith, then you cannot use joh or smi in your password.

   • You can only change your password once every 24 hours.

   • Passwords expire after 60 days.

1. • After 6 failed login attempts, you will be locked out of your account for an hour. To resolve this, you must contact your account administrator or contact Armor Support.

   • After 15 minutes of no activity, you will be logged out of the Armor Management Portal (AMP).

2. Complete

1. the Challenge Phrase

1. and Challenge Response.

1. • If you call Armor for technical support, you will be asked

1. • the Challenge Phrase, and you must correctly answer

1. • the Challenge Response.

1. • Do not use inappropriate language or suggestive material.

1. • The answer must be at least five characters long.

1. In Phone Number,

1. select your country code / flag, and then enter your phone number.

   • This phone number will be used for multi-factor authentication (MFA). Every time you log into the Armor Management Portal (AMP), you will receive a phone call in order to complete the login process.

   • You can enter a phone number with spaces and special characters, such as (555) 555-555.

1. • (Optional) If your phone number contains an extension, enter the number

1. • in Extension. You cannot include spaces or special characters in this field.

1. Click Validate

1. to validate the phone number entered.

   • You will receive a phone call; answer the phone, and then follow the instructions.

   • (Optional) After you complete the signup process, you can configure your account to use the Microsoft Authenticator application for MFA. To learn how to use this application,

1. • see Configure multi-factor authentication for your account.

1. Click Continue.

   • You will be redirected to the Armor Management Portal (AMP) login screen.

1. In the Armor Management Portal (AMP), in the left-side navigation,

1. click Infrastructure.

2. Click

1. SSL VPN.

2. Click

1. Members.

2. Click the plus ( + ) icon.

3. In the field, enter and select the name of the user, or their email address.

4. Mark the desired data center or data centers that the user can connect to.

5. Click

1. Submit.

   • The newly added user will appear in the table; the table is organized in alphabetical order, based on the first name of the user.

2. Click

1. Client.

1. Click Download SSL

1. VPN client.

1. • AMP will automatically detect your operating system; however, you can

1. • click Download for

1. • another platform

1. • to view other operating system options.

   • When you open the client, follow the on-screen installation instructions.

1. • For

1. • Windows

1. • users, the client will download as

1. • a .zip

1. • file.

     • Extract the installation files to your local hard drive.
       

     • Launch the

1. • • installer.exe

1. • • file to begin the installation.

1. • For

1. • Mac OS

1. • users, the client will download as a

1. • .tgzfile.

     • Extract the installation files to your local hard drive.

     • Access

1. • • the mac_phat_client

1. • • folder, and then run

1. • • the naclient.pkg

1. • • installer.

1. • • 
       

     • When you run the installer, you will see an error regarding the certificate. Click

1. • • Continue. (In a future release, Armor will resolve the issue.)

     • To launch the SSL VPN client, in your

1. • • Applications

1. • • folder, search for

1. • • naclient.

     • If

1. • • you run Mac OS 10.11 or higher, then please

1. • • review Install SSL VPN Client for Mac OS, version 10.11 and higher.

2. After installation, open the client.

   • In the drop-down menu,

1. • default

1. • will be listed.

1. • 
     
     Image Modifiedk
     
     

2. Click

1. Settings.

   • To add a new connection, you must enter a

1. • Connection

1. • Alias,

1. • Hostname/IP Address, and

1. • Port, which you can find in AMP.

1. • 
     
     Image Modified
     
     

2. Return to AMP, specifically to the

1. Client

1. section of the

1. SSL VPNscreen.

2. Use the

1. Client Configuration

1. table to locate the data center and corresponding information to add to the client.

1. 
   
   Image Modified
   
   

2. Under

1. Client Configuration, copy the

1. Location

1. information, and then paste that information into

1. Connection

1. Alias.

2. Under

1. Client Configuration, copy the

1. HOST/FQDN

1. information, and then paste that information into

1. Hostname/IP Address.

2. Under

1. Client Configuration, copy the

1. Port

1. information, and then paste that information into

1. Port.

2. Click

1. Add.

2. Click

1. OK.

2. In the drop-down menu, select the newly created connection.

3. Log into the client.

   • Your SSL VPN login credentials are the same credentials you use to access the Armor Management Portal (AMP).

Step 1: Create an IP Group

In the the Firewall screen screen, each entry in the table represents a single firewall rule; however, each firewall rule can contain several IP addresses or just a single IP address. 

You can combine related IP addresses into a single single IP Group. For example, if you want to block traffic from three separate IP address, you do not have to create three separate firewall rules. Instead, you can combine the three separate IP addresses into a single, configurable configurable IP Group. Then, when you create a firewall rule, you can pick the newly created created IP Group as your Source or Destination IP as your Source or Destination IP addresses.

1. In

1. the Armor Management Portal (AMP), on the left-side navigation,

1. click Security.

1. Click Firewall.

2. If you have virtual machines in various data centers, then in the top drop-down menu, select the desired data center.

1. Click IP Groups.

2. Click

1. Actions, and then click

1. New Group.

1. In IP

1. Group

1. Name, enter a descriptive name.

1. • Armor recommends that you

1. • add Source

1. • or Destination

1. • into the name of the IP Group to help you identify the IP Group as

1. • the Source

1. • or Destination

1. • IP group.

1. In Add

1. Members

1. To Group, enter a member, and then click the plus icon.

   • You can enter:

     • A single IP address

     • A range of IP addresses

     • CIDR

   • You must add at least one member.

1. • You can add multiple members to a service group.

1. Click Apply.

1. • The newly created IP group will appear at the bottom of the table.

Step 2: Create a Service Group

In the the Firewall screen screen, each entry in the table represents a single firewall rule; however, each firewall rule can contain several protocols (and ports).

You can combine related protocols related protocols (and ports) into a a Service Group. For example, if you want to create a firewall rule to block three types of traffic, you do not have to create three separate firewall rules. Instead, you can combine the three types of traffic (protocols and ports) into a single, configurable Service Groupconfigurable Service Group. Then, when you create a firewall rule, you can pick the newly created Service Groupcreated Service Group.

1. In

Armor recommends that you configure your account to receive notifications for for Account,  BillingBilling, and  Technical Technical events.

1. In the Armor Management Portal (AMP), in the top, right corner, click the vertical ellipses.

1. Click Settings.

2. Click

1. Notification Preferences.

2. Use the slider to make your desired changes.
   

   • Select

1. • Alert to receive notifications in the top bar in the Armor Management Portal (AMP).

1. • Select

1. • Email to receive notifications through email.

1. • You can select both notification options.

1. Click Update Notification Preference

1. to save your changes.