Perform initial command-line configuration

Technical Library | Support

Go to the table of contents

Go to the previous page

Go to the next page

Setting Up Websense V-Series Appliances > Perform initial command-line configuration

Perform initial command-line configuration

Deployment and Installation Center | Web and Email Security Solutions | Version 7.8.x

Web Security v7.8.x

Web Security Gateway and Web Security Gateway Anywhere v7.8.x

Email Security Gateway and Email Security Gateway Anywhere v7.8.x

V10000 G2, V10000 G3, and V5000 G2 v7.8.x

Setting up a Websense V-Series appliance involves the following tasks. This topic covers Step 2:

1.

Set up the appliance hardware

2.

Perform initial command-line configuration

Gather the data

3.

Configure the appliance

Network interface configuration

Routing configuration

Configuring Web Security components

4.

Install off-appliance or optional components

The first time you start a Websense appliance and connect via the serial console, a brief script (firstboot) prompts you to:

select the security mode for the appliance

supply settings for the network interface labeled C

enter a few other general items, such as hostname and password

You are given the opportunity to review and change these settings before you exit the firstboot script. After you approve the settings, the appliance mode is configured.

Later, if you want to change settings (except the security mode), you can do so through the Appliance manager user interface.

To change the security mode, re-image the appliance with the image for your appliance from the Websense Downloads site. Then run the firstboot script again.

Gather the data

Gather the following information before running the script. Some of this information may have been written down on the Quick Start poster during hardware setup.

Which Web Security subscription?

(if prompted in Web mode)

Websense Web Security

Web Security Gateway

Web Security Gateway Anywhere

Hostname (example: appliance.domain.com)

1 - 60 characters long.

The first character must be a letter.

Allowed: letters, numbers, dashes, or periods.

The name cannot end with a period.

If this is a Web Security Gateway appliance and Content Gateway will be configured to perform Integrated Windows Authentication, the hostname cannot exceed 11 characters (excluding the domain name).

For more information, see the section titled Integrated Windows Authentication in Content Gateway Manager Help.

IP address for network interface C

Subnet mask for network interface C

Default gateway for network interface C
(IP address) Optional

NOTE: If you do not provide access to the Internet for interface C, use the Web Security manager to configure P1 to download Master URL Database updates from Websense (Web mode with Web Security Gateway).

Configure E1 or P1* to download antispam and antivirus database updates from Websense (Email mode).

Configuring these interfaces to access the Internet for database downloads is done through the Appliance manager and through the TRITON Unified Security Center. See the Appliance Manager Help for information about configuring the interfaces. See the Web Security and Email Security Help for information about configuring database downloads.

* On a V5000 G2, use P1; there is no E1 interface.

Primary DNS server for network interface C
(IP address)

Secondary DNS server for network interface C
(IP address) Optional

Tertiary DNS server for network interface C
(IP address) Optional

Unified password (8 to 15 characters, at least 1 letter and 1 number)

This password is for the following, depending on the security mode of the appliance:

Appliance manager

Content Gateway manager (for sites using Web Security Gateway / Anywhere)

Appliance manager

Web and Email mode

Appliance manager

Content Gateway manager (for sites using Web Security Gateway / Anywhere)

Integration method for this appliance (for sites using Web Security only [without the content gateway]). Choose one:

Standalone (Network Agent only)

Choose your third-party integration product (if any).

Send usage statistics?

Usage statistics from appliance modules can optionally be sent to Websense to help improve the accuracy of categorization.

Run the initial command-line configuration script (firstboot) as follows.

1.

Access the appliance through a USB keyboard and monitor, or a serial port connection.

Note

To configure the appliance, connect through the serial port or the keyboard/video ports and complete the firstboot script. For serial port activation, use:

2.

Accept the subscription agreement when prompted.

3.

When asked if you want to begin, enter yes to launch the firstboot activation script.

To rerun the script manually, enter the following command:

4.

At the first prompt, select a security mode:

Web: On model V10000 G2/G3, this mode provides Web Security Gateway. On model V5000 G2, Web mode provides either Web Security or Web Security Gateway, at your choice.

Email: provides Email Security Gateway features.

Web and Email: provides Email Security Gateway features and either Web Security Gateway (V10000 G2/G3) or Web Security (V10000 G2/G3 or V5000 G2).

5.

Follow the on-screen instructions to provide the information collected above.

After the activation script has been completed successfully, access Appliance manager by opening a supported browser and entering this URL in the address bar:

https://<IP-address-of-interface-C>:9447/appmng/

You are now ready to move to this step: Configure the appliance

Note that all Websense consoles support the following browsers:

Microsoft Internet Explorer 8, 9, 10, and 11

Mozilla Firefox version 5 and later

Google Chrome 13 and later


	Note If you use Internet Explorer, ensure that the Enhanced Security Configuration (IE ESC) is turned off. Compatibility View is not supported.

Go to the table of contents

Go to the previous page

Go to the next page

Setting Up Websense V-Series Appliances > Perform initial command-line configuration

Copyright 2016 Forcepoint LLC. All rights reserved.