Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page
Setting Up Websense V-Series Appliances > Network interface configuration > Email Security Gateway Interfaces (E1 and E2, or P1 and P2)
Email Security Gateway Interfaces (E1 and E2, or P1 and P2)
Deployment and Installation Center | Web and Email Security Solutions | Version 7.8.x
 
Applies to:                                                                                                          
*
Email Security Gateway and Email Security Gateway Anywhere v7.8.x
*
V10000 G2, V10000 G3, and V5000 G2 v7.8.x
Websense Email Security Gateway Interfaces handle traffic into and out of the Websense Email Security Gateway module. It is important that you set up interfaces E1, E2, and C correctly before deploying off-appliance components. TRITON Unified Security Center installation cannot complete unless these interfaces are correctly configured.
 
* 
Note 
The names of the interfaces vary depending on the model of V-Series appliance.
*
On V10000 G2/G3, E1 and E2 are used.
*
On V5000 G2, P1 and P2 are used.
*
Both the E1 and E2 interfaces can be used to accept inbound traffic and send outbound traffic. On V5000 G2, use P1 and P2.
*
A typical configuration is to use E1 (P1) for both inbound and outbound traffic; E2 (P2) is not used.
*
Another option is to configure E1 (P1) to accept inbound and E2 (P2) to send outbound traffic.
*
When you need to support a large volume of outbound traffic, you can configure virtual interfaces on E1 or E2 (P1 or P2).
 
* 
Important 
On the V10000 G2/G3, if you use the E2 interface, the E1 interface is bound to eth0, and the E2 interface is bound to eth1. Keep this in mind when you configure Websense Email Security Gateway.
On the V5000 G2, if you use the P2 interface, the P1 interface is bound to eth0, and the P2 interface is bound to eth1. Keep this in mind when you configure Websense Email Security Gateway.
Guidelines for configuring network interfaces E1 and E2
In the following important guidelines for configuring the E1 and E2 interfaces for Email Security, please note that for a V5000 G2 appliance, you should substitute P1 for E1 and P2 for E2.
 
IP address (E1 or E2 interface)
Required.
E1 is used by default to connect to SQL Server for reporting. If E1 does not have a valid IP address or does not have DNS access, then Email Security Gateway cannot resolve the SQL Server hostname and cannot create a connection with SQL Server. Off-box installation of the management console is then blocked.
 
On a V5000 G2, substitute P1 for E1.
Subnet mask
Required.
 
Default gateway
Required.
The gateway must be in the same subnet as the IP address of the interface (E1 or E2) used for communicating with the Internet (outbound traffic).
If you use both E1 and E2, and you locate them in the same subnet, then the default gateway is automatically assigned to E2 (which is bound to eth1). Ensure that outbound packets can reach the Internet.
Primary DNS
Required.
IP address of the domain name server.
Secondary DNS
Optional.
Serves as a backup in case the primary DNS is unavailable.
Tertiary DNS
Optional.
Serves as a backup in case the primary and secondary DNS servers are unavailable.
Email Security virtual interfaces
Multiple virtual IP addresses can be configured on E1 or E2.
*
Virtual IP addresses are used for outbound traffic only.
*
Virtual IP addresses are bound to the specified physical interface.
*
Virtual IP addresses must be in the same subnet as the specified physical interface.
*
A maximum of 10 virtual IP addresses can be specified for each physical interface (E1 and E2).
Multiple virtual interfaces can be helpful to support multiple domains or a large volume of outbound traffic.
To add virtual IP addresses to E1 or E2:
1.
Go to Configuration > Network Interfaces > Virtual Interfaces and click Add.
2.
Select E1 or E2. If E2 has not been configured, it is not offered.
3.
In the Virtual IP address entry field, enter one IPv4 address per line.
4.
Click Add Interfaces.
If you are not configuring interface bonding at this time, proceed next to Routing configuration.

Go to the table of contents Go to the previous page Go to the next page
Setting Up Websense V-Series Appliances > Network interface configuration > Email Security Gateway Interfaces (E1 and E2, or P1 and P2)
Copyright 2016 Forcepoint LLC. All rights reserved.