V5000 hardware setup

Deployment and Installation Center | Web and Email Protection Solutions | v8.1.x

Applies to:

TRITON AP-WEB and Web Filter & Security, v8.1.x

TRITON AP-EMAIL, v8.1.x

V-Series appliances, v8.1.x

The appliance's network interfaces must be able to access a DNS server and the Internet, as described below. This information varies slightly depending on the security mode you choose for the appliance.

V5000: Web appliance with Content Gateway

V5000: Web appliance (no Content Gateway)

V5000: Web and Email appliance (no Content Gateway)

V5000: Email appliance

V5000: Web appliance with Content Gateway

Network interface C must be able to access a DNS server. This interface typically has continuous access to the Internet. Essential databases are downloaded from Websense servers through interface C.

Ensure that interface C is able to access the download servers at download.websense.com. (As an alternative, some sites configure the P1 proxy interface to download the Websense Master Database as well as other security updates. This change must be made in the Web module of the TRITON Manager. In that situation, interface C does not require Internet access.)

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C interface can access.

V5000: Web appliance (no Content Gateway)

Network interface C must be able to access a DNS server. Interface C must have continuous access to the Internet. Essential databases are downloaded from Websense servers through this interface.

Ensure that interface C is able to access the download servers at download.websense.com.

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C interface can access.

Network interface N must be connected to a mirror port on a router or switch.

If interface N is used to send blocking information, then it must be connected to a bi-directional mirror port. Through the bi-directional mirror port, interface N not only monitors all client traffic but also sends blocking information if needed.

V5000: Web and Email appliance (no Content Gateway)

Interfaces C and P1 (and P2, if used) must be able to access a DNS server. These interfaces typically have continuous access to the Internet once the appliance is operational. Essential databases are downloaded from Websense servers through these interfaces.

Ensure that C and P1 (and P2, if used) are able to access the download servers at download.websense.com.

Make sure the above addresses are permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C and P1 (and P2, if used) interfaces can access.

Network interface P1 (and P2, if used) must be able to access the mail server.

Network interface N must be connected to a mirror port on a router or switch.

V5000: Email appliance

Interface P1 (and P2, if used) must be able to access a DNS server. These interfaces typically have continuous access to the Internet once the appliance is operational. Essential databases are downloaded from Websense servers through these interfaces.

Ensure that P1 (and P2, if used) is able to access the download servers at download.websense.com.

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the P1 and P2 interfaces can access.

Network interface P1 (and P2, if used) must be able to access the mail server.