V10000 hardware setup

Deployment and Installation Center | Web and Email Protection Solutions | v8.0.x

Applies to:

TRITON AP-WEB and Web Filter & Security, v8.0.x

TRITON AP-EMAIL, v8.0.x

V-Series appliances, v8.0.x

The appliance's network interfaces must be able to access a DNS server and the Internet, as described below. This information varies slightly depending on the security mode you choose for the appliance.

V10000: Web appliance with Content Gateway

V10000: Email appliance

V10000: Web and Email appliance with Content Gateway

V10000: Web and Email appliance (no Content Gateway)

V10000: Web appliance with Content Gateway

Network interface C must be able to access a DNS server. This interface typically has continuous access to the Internet. Essential databases are downloaded from Websense servers through interface C (or optionally through P1).

Ensure that interface C is able to access the download servers at download.websense.com. (As an alternative, some sites configure the P1 proxy interface to download the Websense Master Database as well as other security updates. This change must be made in the Web module of the TRITON Manager. In that situation, interface C does not require Internet access.)

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C interface can access.

V10000: Email appliance

Network interface E1 (and E2, if used) must be able to access a DNS server. These interfaces typically have continuous access to the Internet once the appliance is operational. Essential databases are downloaded from Websense servers through these interfaces.

Ensure that E1 (and E2, if used) can access the download servers at download.websense.com.

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the E1 (and E2) interface can access.

Network interface E1 (and E2, if used) must be able to access the mail server.

V10000: Web and Email appliance with Content Gateway

Network interfaces C, P1, and E1 (and E2, if used) must be able to access a DNS server. These interfaces typically have continuous access to the Internet. Essential databases are downloaded from Websense servers through these interfaces.

Ensure that interfaces C, P1, and E1 (and E2, if used) are able to access the download servers at download.websense.com. (Note that some sites configure the P1 proxy interface instead of the C interface to download the Websense Master Database as well as other security updates. This change must be made in the Web module of the TRITON Manager. In that situation, interface C does not require Internet access.)

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C, P1, and E1 (and E2, if used) interfaces can access.

Network interface E1 (and E2, if used) must be able to access the mail server.

V10000: Web and Email appliance (no Content Gateway)

Network interfaces C and E1 (and E2, if used) must be able to access a DNS server. These interfaces typically have continuous access to the Internet. Essential databases are downloaded from Websense servers through these interfaces.

Ensure that interfaces C and E1 (and E2, if used) are able to access the download servers at download.websense.com.

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C and E1 (and E2, if used) interfaces can access.

Network interface E1 (and E2, if used) must be able to access the mail server.

Network interface N must be connected to a mirror port on a router or switch.

If interface N is used to send blocking information, then it must be connected to a bi-directional mirror port. Through the bi-directional mirror port, interface N not only monitors all client traffic but also sends blocking information if needed.