Jump to main content
Airwall help be invisible - you can't hack what you can't see
Airwall help be invisible - you can't hack what you can't see
  • Knowledge Base (KB) Articles
  • Get Support
  1. Home
  2. Deploy Airwall™

    Successfully deploy and configure the Airwall solution and revolutionize security on your network.

  3. Deploy an Airwall secure network

    Learn how to deploy the Airwall solution, connect devices, set up overlays, configure device trust, and give people access to your Airwall secure network.

  4. Deploy and Configure Airwall Edge Services

    Airwall Edge Services let you securely connect managed endpoints, such as laptops, PCs, tablets, and smartphones.

  5. Configure Advanced Airwall Edge Service Options

  6. Set up Port Groups on an Airwall Gateway

    The default port groups work for some deployments. You may need to set up underlay or overlay port groups if your deployment requires it.

  7. Replicate Port Settings

    For minimal disruption and less room for error, you can replicate the port configuration between two Airwall Gateways when setting up an Airwall Gateway HA pairing, or when replacing an Airwall Gateway.

  • Connect to Airwall™

    Connect your mobile or laptop to Airwall to get access to protected resources.

  • Manage Airwall™

    Provision and manage Airwall Edge Services and devices, monitor activity, and install updates.

  • Deploy Airwall™

    Successfully deploy and configure the Airwall solution and revolutionize security on your network.

    • Get Started with the Airwall Solution

      Get started with the Airwall solution.

    • Deploy an Airwall secure network

      Learn how to deploy the Airwall solution, connect devices, set up overlays, configure device trust, and give people access to your Airwall secure network.

      • Deployment Checklist

        A checklist for deploying the Airwall Solution

      • Deployment Roadmap

        A roadmap to the most helpful topics for getting the Airwall Solution up and running on your network.

      • Confirm your Network Settings

        Check that your network is set up to start deploying the Airwall Solution.

      • License a Conductor and Airwall Edge Services

        Everything you need to know about licensing your Conductor and Airwall Edge Services.

      • Deploy and Configure a Conductor

        The Airwall Conductor helps you deploy, configure, administer, and update your Airwall Solution.

      • Deploy and Configure Airwall Edge Services

        Airwall Edge Services let you securely connect managed endpoints, such as laptops, PCs, tablets, and smartphones.

        • Set up Airwall Gateways

          Set up physical, virtual, or cloud Airwall Gateways.

        • Install Airwall Agents and Servers on people's laptops and devices

          How to connect people's cell phones, laptops, and servers to the resources people need access to behind your Airwall secure network.

        • Set up an Airwall Relay to Route Encrypted Connections

          An Airwall Relay routes encrypted Airwall Edge Service connections across all networks and transport options, without modifying the underlying network, for secure end-to-end connectivity.

        • Deploy a cloud Airwall Server

          You can deploy an Airwall Server on a cloud provider, which gives you a Windows Server machine with an Airwall Server installed and configured to connect with your Conductor.

        • Configure Airwall Edge Service Settings

        • Configure an authenticated Airwall Agent or Server session

          An authenticated Airwall Agent or Server session requires users to authenticate before the Airwall Agent or Server can communicate in an overlay network. The authentication is based on a user’s Conductor login credentials.

        • Configure Advanced Airwall Edge Service Options

          • Add or Replace a Signed Certificate on an Airwall Gateway for Conductor Communication

            By default, the Airwall Gateways come with a Tempered factory-installed certificate. You can add your own custom CA certificate to use for Conductor communication.

          • Set up Port Groups on an Airwall Gateway

            The default port groups work for some deployments. You may need to set up underlay or overlay port groups if your deployment requires it.

            • Set up Overlay Port Groups

              The default port groups work for some deployments. You may need to set up overlay port groups if your deployment requires it.

            • Set up an Underlay Port Group

              By default, an Airwall Gateway has two port groups. One underlay port group assigned to Port 1 and one overlay port group assigned to the remaining ports. On virtual and cloud Airwall Gateways, you may be able to add additional ports by creating new virtual network adapters on the hypervisor. Some hardware models allow you to add new ports by inserting port expansion modules.

            • Replicate Port Settings

              For minimal disruption and less room for error, you can replicate the port configuration between two Airwall Gateways when setting up an Airwall Gateway HA pairing, or when replacing an Airwall Gateway.

            • Configure an Underlay Port Failover Group

          • Seamless Bypass

            Seamless Bypass allows you to separate traffic (split tunnel) going through your Airwall Gateway, where you selectively encrypt and tunnel some traffic, while allowing other traffic to pass through the Airwall Gateway unchanged. This ability also allows protected devices to securely communicate with devices or network locations that are not protected by Airwall Edge Services.

          • Backhaul Bypass

            Set up backhaul bypass to allow any v3.0 or later Airwall Gateway to reach bypass destinations by tunneling traffic using designated bypass egress Airwall Gateways.

          • Enable DNS lookup for bypass destinations

            If you want or need to use a fully-qualified domain name (FQDN) when specifying a bypass destination, you can enable DNS lookup for bypass. An FQDN may be necessary if the bypass destination IP is not static.

          • Airwall Edge Service High Availability (HA)

            High Availability (HA) Airwall Gateways provide hardware redundancy in a hot-standby mode. Airwall Gateways installed in an HA configuration maintain a heartbeat on a dedicated Ethernet link where only the current primary is participating in overlay network communications. If the primary fails to send heartbeat messages to the secondary, the secondary takes over overlay network communications for the HA pair.

          • One-arm mode

            You can configure an Airwall Gateway to use a single network connection in cases where you want to prevent common routing errors caused by multiple interfaces.

          • Network address translation (NAT)

            Network Address Translation (NAT) translates an IP address in one network to a different IP address in another network. The two IP addresses are referred to as the External IP address and the Internal IP address. The External IP address is the IP address of the device in the overlay network and the Internal IP address is the actual IP address of the device.

          • Encryption and tunnel compression on an Airwall Gateway

            You can change the encryption or compression of Airwall Gateways.

          • Protected devices with static routing

            You can configure static routing for protected devices with IP addresses not directly connected to an Airwall Gateway.

          • Protected devices with DHCP

            If you have protected devices that use DHCP to obtain an IP address, you need to configure DHCP on the Airwall Gateway that protects that device.

          • DHCP relay on an Airwall Gateway

            If you have protected devices that use DHCP to obtain an IP address, you can configure the Airwall Gateway to relay the DHCP address to your DHCP server.

          • Limit Device Traffic on an Airwall Gateway with Port Filtering

            You can use Airwall Gateway port filtering to limit what traffic can pass over an Overlay based on TCP/UDP Ports. With port filtering enabled, all communication from remote to local devices is disabled, and you create custom rules to tell the local Airwall Gateway what to allow as incoming connections to local devices.

          • Spanning Tree Protocol on the Overlay Network

      • Connect and Configure Devices

        As you prepare to connect devices to Airwall Gateways, you may want your Airwall Gateway product guide available to identify the ports reserved for connecting devices you want to protect.

      • Create and Manage an Overlay (Protected) Network

        Create an overlay (protected) network for your deployment.

      • Configure Device Trust

        Configure device trust to set up secure communication between devices in your Airwall secure network.

      • Set up Cloud Providers

        Setting up one of the supported cloud providers in your Conductor makes it easier to deploy Airwall Gateways and High-Availability Conductors directly from your Conductor.

    • Integrate Third-party Services

      How to integrate the Airwall Solution with third-party services.

    • Diagnostics and Troubleshooting

      There are various tools available on our platform to help you diagnose problems you may encounter.

    • Security Notices, Advisory Notices, and Product Bulletins

      Go here for important information on known issues, end-of-life notices, and other product updates.

    • Airwall API

  • Tempered Software Downloads and Release Notes

    Download firmware, software, and hotfixes by version, and see release notes for versions.

  • Knowledge Base (KB) Articles

    Check these Knowledge Base articles for solutions to common issues.

  • Get Support

    You can often find answers to your questions in Airwall help. If you still need help, check here for help getting support.

Replicate Port Settings

For minimal disruption and less room for error, you can replicate the port configuration between two Airwall Gateways when setting up an Airwall Gateway HA pairing, or when replacing an Airwall Gateway.

Follow these links for more information on how it works in each situation:
  • Configure High Availability Airwall Gateways (v2.2.8 and later)
  • Replace an Airwall Gateway

Go to: Airwall Teams help or pre-2.2.3 Tempered HIPswitch Help.

© Copyright 2022 tempered.io | Terms of Product Sale, License and Warranty