Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Overview > Deployment options
Deployment options
Help | Content Gateway | Version 8.0.x
SSL inspection
When the HTTPS option is enabled, HTTPS traffic is decrypted, inspected, and re-encrypted as it travels to and from the client and origin server.
Content Gateway includes a complete set of certificate-handling capabilities. See Working With Encrypted Data
Even when HTTPS is not enabled, Content Gateway performs HTTPS URL filtering. This means that for every HTTPS request, a URL lookup is performed and policy is applied.
As a Web proxy cache
When Content Gateway is deployed as a Web proxy cache, user requests for Web content pass through Content Gateway on their way to the destination Web server (origin server). If the Content Gateway cache contains the requested content, Content Gateway serves the content directly. If the Content Gateway cache does not have the requested content, Content Gateway acts as a proxy, fetching the content from the origin server on the user's behalf, while keeping a copy to satisfy future requests.
Content Gateway is typically deployed to receive client requests in one of the 2 following ways:
As an explicit proxy in which the user's browser or client software is configured to send requests directly to Content Gateway. See Explicit Proxy.
As a transparent proxy in which user requests are transparently routed to Content Gateway on their way to the destination server. The user's client software (typically a browser) is unaware that it is communicating with a proxy. See Transparent Proxy and ARM.
In a cache hierarchy
Websense Content Gateway can participate in flexible cache hierarchies, where Internet requests not fulfilled in one cache can be routed to other regional caches, taking advantage of their contents and proximity. In a hierarchy of proxy servers, Content Gateway can act either as a parent or child, either to other Content Gateway servers or to other caching products. See Hierarchical Caching.
In a managed cluster
Websense Content Gateway scales from a single node to multiple nodes, with a maximum recommended limit of 16. This forms a managed cluster that improves system capacity, performance, and reliability.
If the virtual IP failover option is enabled, Content Gateway maintains a pool of virtual IP addresses that it assigns to the nodes of the cluster. Content Gateway can detect node failures (such as power supply or CPU failures) and reassign IP addresses of the failed node to the operational nodes. See Virtual IP failover, for details.
If Content Gateway is configured as a transparent proxy with WCCP, failover is handled by WCCP and virtual IP failover should not be used. See WCCP load distribution.
For complete information, see Clusters.
As a DNS proxy cache
As a DNS proxy cache, Content Gateway can resolve DNS requests for clients. This offloads remote DNS servers and reduces response times for DNS lookups. See DNS Proxy Caching.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Overview > Deployment options
Copyright 2016 Forcepoint LLC. All rights reserved.