Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
V-Series Appliance Configuration > Configuring V-Series appliance Web components > What if an appliance is not the policy source?
What if an appliance is not the policy source?
Help | V-Series Appliance | v8.2.x
A V-Series appliance that is not serving as the policy source can be designated as either a user directory and filtering or filtering only appliance.
*
A user directory and filtering appliance is sometimes also called a "policy lite" machine. It runs:
*
Policy Server
*
User Service
*
Usage Monitor
*
Filtering Service
*
Control Service
*
Directory Agent (optional; see Preparing V-Series appliances for a hybrid deployment)
*
Content Gateway
*
Network Agent (optional)
Having User Service on remote appliances makes it easier to obtain local network user names. Latency between User Service and Policy Server is eliminated, because both run on the same appliance.
A user directory and filtering appliance is configured to point to the policy source for updates.
*
Whenever you make a policy change, that change is pushed from the policy source appliance to user directory and filtering appliances within 30 seconds.
*
User directory and filtering appliances can continue handling traffic for as long as 14 days if their connection with the policy source is interrupted. So even if a network connection is poor or is lost, traffic management continues as expected.
*
A filtering only appliance does not run Policy Server. It runs only:
*
Filtering Service
*
Control Service
*
Content Gateway
*
Network Agent (optional)
A filtering only appliance is configured to point to a Policy Server. This works best when the appliance is close to the Policy Server and on the same network.
These appliances require a continual connection to the centralized policy server, not only to stay current, but also to continue handling traffic. If the connection to the policy server becomes unavailable for any reason, traffic handling on a Filtering only appliance can continue for up to 3 hours.
If the Policy Server machine is on a remote network, with a WAN connection, it can be difficult to obtain user name/IP address maps for the local users.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
V-Series Appliance Configuration > Configuring V-Series appliance Web components > What if an appliance is not the policy source?
Copyright 2016 Forcepoint LLC. All rights reserved.