Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Websense IQ-Series Appliance Help > Appliance quick start
Appliance quick start
Help | IQ-Series Appliance | Version 1.7.x
Before you begin the appliance quick start setup instructions, you should consider the following issues:
*
Determine appliance rack location.
*
Determine appliance IP addresses for network deployment.
*
If you plan to use Active Directory authentication, ensure that your appliance hostname complies with Active Directory hostname requirements. See Appliance hostname for a list of hostname guidelines.
*
The appliance ships with a pre-installed Web category database. After appliance setup, an update to this database is initiated. During this update, the appliance can analyze traffic using the pre-installed database. Traffic analysis may be more accurate after the full update is complete.
A progress message and status indicator displayed on the Status > General page disappear when the update is complete. This message appears only for the initial update.
*
If your network includes a firewall, ensure that appropriate ports are open. See Appliance network connection for details.
*
If you plan to control VLAN traffic in your network, see VLAN tag for information about VLAN tags.
Initial Websense blueSKY settings
Perform the following steps in the Websense blueSKY portal:
1.
Ensure that your Websense blueSKY account is established.
2.
Log in to the cloud portal.
3.
Click Network Devices in the Websense blueSKY console to display a list of your network appliances.
4.
Click Add and enter new appliance information. See the Getting Started Guide for detailed information.
* 
Important 
It is recommended that you define certificates when you add an appliance, in order to avoid browser warnings regarding SSL termination for block, authentication, or quota/confirm operations.
Be sure to perform the following:
*
Generate a CA certificate. Ensure that the certificate is not encrypted.
*
Import this certificate to all relevant browsers.
*
Upload this certificate to each appliance using the Certificates tab.
See the Getting Started Guide for detailed instructions.
You should also install a Websense Root Certificate to implement SSL decryption. See the Defining Web Policies topic in Websense blueSKY Security Gateway Help.
Appliance setup and configuration
Perform the following steps to set up and configure your appliance:
1.
Verify the contents of the accessory box that was shipped with the appliance. It should include power cable, an appliance bezel, and a quick start poster.
2.
Rack the appliance and plug it in.
3.
Power the appliance on and allow the boot sequence to complete.
4.
Connect a computer with DHCP enabled (such as a laptop) to the appliance C1 interface. Wait a few moments, until the automatic network setup process is complete, to begin appliance configuration.
5.
Log on to the appliance via a Web browser connection (https://169.254.0.2). Credentials are admin/admin.
6.
Complete the appliance First-Time Configuration Wizard. See First-time configuration wizard for wizard instructions.
7.
Log off the appliance and disconnect the computer from the appliance.
Appliance network connection
Connect the appliance to your network. The sample diagram shows a possible deployment:
If your network includes a firewall, you need to ensure that destination TCP ports are open for connection to the cloud service. By default, the appliance is configured to use standard destination ports 80 and 443 for these connections.
Alternatively, and depending on your corporate firewall policy, you can configure your appliance to use the following ports, which are used for non-appliance connections to the cloud service:
Port
Purpose
8002
Configuration and policy update information retrieval from Websense blueSKY. This port must be open for an IQ-Series appliance to retrieve periodic configuration setting and policy updates from the cloud service.
8081
Proxy service. This is where the cloud-based content analysis is provided.
80
Notification page components. The default notification pages refer to style sheets and images served from the Websense blueSKY platform. For these pages to appear correctly, this Web site is accessed directly (i.e., not through Websense blueSKY).
443
Service administration. The Websense administration portal is similarly unproxied. Otherwise, it would be possible for you to accidentally block access and then be unable to rectify the situation.
You can switch between the standard and alternative ports at any time using the appliance command-line interface (CLI). See the Getting Started Guide for detailed instructions about switching port settings.
You should also open the outbound Network Time Protocol (NTP) port (UDP 123) to allow system time/clock synchronization in the system.
Appliance registration
Perform the following steps to register the appliance with Websense blueSKY:
1.
In the Websense blueSKY console, click Network Devices.
2.
Select the row that contains your new appliance and click Register.
3.
Copy the registration key in the Register Appliance box and click Close.
Appliance registration completion and password change
Perform the following steps to complete appliance registration:
1.
Reconnect to the appliance using the management IP address (C1) or the default address (169.254.0.2) and log in.
2.
Change the appliance password if you have not already done so.
3.
Paste the Websense blueSKY registration key into the Registration key field.
At this point, an update to the pre-installed Web category database begins. During this update, the appliance can analyze traffic using the pre-installed database. Note that analysis may be more accurate after the update process completes. A download progress message and status indicator displayed on the Status > General page disappear when the update is complete.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Websense IQ-Series Appliance Help > Appliance quick start
Copyright 2016 Forcepoint LLC. All rights reserved.