Initial Configuration > Content Gateway initial configuration

Content Gateway initial configuration

Applies to

Web Security Gateway v7.6

Web Security Gateway Anywhere v7.6

In this topic

Overview

Starting Content Gateway Manager

Entering a subscription key for Content Gateway (not necessary if deploying Content Gateway as part of Websense Web Security Gateway or Web Security Gateway Anywhere; see Entering subscription key)

Enabling SSL Manager in Content Gateway

Enabling WCCP for Content Gateway

Overview

This section lists some initial tasks to perform after installing Websense Content Gateway. These are basic configuration tasks to bring Content Gateway to an initial, operable state. See the Content Gateway Manager Help for full configuration and management instructions.

Not all of these tasks may apply to you. Perform only those tasks that apply to your deployment.

Starting Content Gateway Manager

Content Gateway Manager is the management user interface to Websense Content Gateway.

Content Gateway Manager supports the browsers listed in System Requirements. Use of another browser version may result in unexpected behavior. Java and JavaScript must be enabled in your browser. See your browser documentation for information on enabling Java and JavaScript.

There are 3 ways to access Content Gateway Manager:

From the Content Gateway button in TRITON - Web Security

By entering the IP address and port of the Content Gateway host system

When Content Gateway is a module on a V-Series appliance, by opening the V-Series Logon portal and clicking the Content Gateway button.

To access Content Gateway Manager directly

1.	Open your Web browser.

2.	Open a Web browser supported by Content Gateway Manager and enter the following URL:

https://<IP address>:8081

where <IP address> is the IP address of the Content Gateway machine. Note: 8081 is the default port.

If the browser warns you about the site's security certificate, choose to proceed to the site anyway:

Internet Explorer: Click Continue to this website (not recommended).

Firefox: Scroll to the bottom of the invalid certificate message and click Or you can add an exception. Next, click Add Exception > Get Certificate. Select Permanently store this exception. Then click Confirm Security Exception.

 

Note  A pending alarm may be indicated on the screen. Clicking it will display more information. If it is a "WCG license download failed" alarm, you may clear it. This condition is resolved by entering a subscription key, which you will do in the next few steps.

For more information on using HTTPS to start Content Gateway Manager, see the Using SSL for secure administration topic in the Content Gateway Manager Help.

3.	Enter the user name (admin) and password for the Content Gateway Manager default administrator user.

The password was set up during installation.

4.	If you are using Internet Explorer, install the Content Gateway Manager's security certificate:

a.	Next to the address bar, click Certificate Error.

b.	Click View certificates.

c.	Click Install Certificate.

d.	In the Certificate Import Wizard, click Next on the welcome dialog box. Select Automatically select the certificate store based on the type of certificate and click Next. On the last dialog box, click Finish.

e.	You are asked if you want to install the certificate. Click Yes.

f.	An Import was successful message appears. Click Yes.

g.	You are returned to the Certificate dialog box. Click OK.

5.	Content Gateway Manager opens to the Monitor > My Proxy > Summary page. This page provides information on the features of your subscription and details of your Content Gateway system. See the Content Gateway Manager Help for more information.

Entering a subscription key for Content Gateway

If Content Gateway is installed as part of Websense Web Security Gateway or Web Security Gateway Anywhere, the subscription key is automatically applied to Content Gateway when you enter it in TRITON - Web Security. See Entering subscription key for more information.

If Content Gateway is deployed with only Websense Data Security, complete the following steps to enter a subscription key.

1.	Start Content Gateway Manager.

2.	For instructions, see Starting Content Gateway Manager.

3.	Click the Configure tab on the upper left of the screen.

4.	Enter your Websense subscription key:

a.	Click My Proxy > Subscription > Subscription Management.

b.	Enter your Websense subscription key and click Apply.

c.	Click Basic > General and then the Restart button to restart Content Gateway.

Enabling SSL Manager in Content Gateway

In Content Gateway Manager:

1.	Click Configure > My Proxy > Basic > General.

2.	If it is not already enabled, set HTTPS to On. Then click Apply and the Restart button.

3.	Confirm the ports listed on Configure > Protocols > HTTPS > General.

4.	Add the Content Gateway Manager root security certificate:

a.	In the left navigation pane, click SSL > Certificates > Add Root CA.

b.	Click Browse.

c.	Select /home/Websense/content_gateway_ca.cer and click Open.

d.	Click Add Certificate Authority.

"Issuer successfully imported!" appears.

5.	Configure SSL Manager by providing information on the Configure > SSL pages in Content Gateway Manager.

To get the benefit of SSL certificate verification, a very important element of SSL security, go to Configure > SSL > Validation > General and select Enable the certificate verification engine. This option is disabled by default. Review and select verification engine options. Be aware that certificates fail verification for a variety of reasons. You need to anticipate these failures and become familiar with the bypass options for when you want to proceed to a site anyway. For more information, see Working with Encrypted Data in the Content Gateway Manager Help.

Enabling WCCP for Content Gateway

If you are supporting transparent proxy through WCCPv2-enabled routers, enable WCCP in Content Gateway Manager, and configure WCCP settings. See the Content Gateway Manager Help for details.

Initial Configuration > Content Gateway initial configuration