First-Time Configuration Wizard

Deploying an I Series Appliance | Forcepoint Web Security Cloud

The First-Time Configuration Wizard walks you through some initial settings that are important for appliance operation. You must complete the wizard before you can manage the appliance. Canceling the wizard before completing initial appliance configuration logs you out of the appliance, and any settings you may have entered up to that point are not saved.

Click Next on the Welcome page to start the wizard.

On the Hostname page, enter the appliance host name or fully-qualified domain name (FQDN). The name can consist of 1-32 alphanumeric characters, dashes, and periods. It must begin with a letter and cannot end with a period.

The format for an appliance hostname is hostname. You can also use the format hostname.parentdomain.

The format for the FQDN is hostname.parentdomain.com.

If you plan to use Active Directory authentication, the following hostname requirements are enforced:

Total length of 2 - 128 alphanumeric characters (including hostname and parent domain name elements; format is hostname.parentdomain)

May include dashes, underscores, and periods

Must begin with an alphanumeric character

Cannot end with a dash, underscore, or period

Hostname element length should be between 2 and 15 characters

Cannot match any of the following reserved words:


ANONYMOUS	BATCH	BUILTIN
DIALUP	INTERACTIVE	INTERNET
LOCAL	NETWORK	NULL
PROXY	RESTRICTED	SELF
SERVER	SERVICE	SYSTEM
USERS	WORLD

Click Next to continue with the wizard.

On the Network Interfaces page:

In the Outbound Traffic section, specify the appliance IP address and subnet mask for the network bridge created by the B1 and B2 interfaces. These interfaces are used for all outbound traffic. One interface (B1) handles traffic routed out of your network, and the other (B2) handles traffic to your internal network.

To allow appliance management via the B1 and B2 bridge interfaces along with the C1 interface, mark the Allow appliance management access in addition to the C1 interface check box.

Provide the IP address and subnet mask for the C1 interface in the Appliance Management section. This interface is used for appliance management functions. This interface can also be used when the B1/B2 bridge interface is in hardware bypass mode.

If you have deployed a virtual appliance that does not include the appliance bypass function, use of the C1 interface for appliance management is optional. If you do not define a C1 management interface, then you must use the B1/B2 bridge interface for management purposes. In this case, the Outbound Traffic section includes a Use this interface for appliance management check box, which is marked and not accessible.

If you do wish to define a C1 management interface, mark the Use a dedicated appliance management IP address check box in the Optional Appliance Management section, and enter the IP address and subnet mask for the C1 interface. The Allow appliance management access in addition to the C1 interface check box is then accessible for marking or clearing.

In the DNS Servers section, define a DNS server by entering its IP address in the IP address field and clicking Add. The IP address appears in the DNS Server IP Address list.

You can define up to 3 DNS servers. You cannot define more than one server with the same IP address.

Click Next to continue with the wizard.

On the Routing page, specify the IP address of your default gateway for outbound traffic.

Note

In many cases, you need only a gateway specification on this page. However, there may be cases where explicit or static routing is required. For more information on these scenarios, please see the knowledge article Configuring routing for I Series appliances.

If you need to define routing over the bridge interface, please contact Technical Support in the first instance. You can define routing rules over the management interface as follows:

Click Routing Table.

Click Add and then provide the following route information in the Route Properties dialog box:

Destination network

Subnet mask for the destination network

Gateway IP address

Interface used. In the drop-down list, select either Bridge, (B1, B2) or Management (C1).

The appliance supports the use of a single VLAN tag to identify management communication traffic from the appliance to the cloud and database download services. This tag is also used by any client that communicates with the appliance bridge interface, either explicitly for management purposes or transparently, for example for authentication, or for quota or confirm actions when filtering.


	Note Ensure you have configured valid routing between any client generating traffic that is intercepted by the appliance and the bridge interface, taking into account the VLAN tag that you define on this page.

Mark the Use the following VLAN tag check box, then enter the tag in the entry field using a number from 0 to 4094.

Click Next to continue with the wizard.

The final page of the wizard summarizes the entries and selections you have made. If you want to change any setting after your review, click Back to access the desired wizard page and edit your settings.

If you are satisfied with your settings, click Finish.

You must log off the appliance and log back on for your configuration settings to take effect.

When you log back on, you are prompted to change your initial password (if you have not already done so) and register the appliance with Forcepoint Web Security Cloud. See Registering the appliance for information.


	Note If you are unable to access the appliance, you can connect to the appliance manager interface at any time using the C1 interface via https://169.254.0.2.