Configure the appliance

Deployment and Installation Center | Web and Email Security Solutions | Version 7.7.x

Applies to:

Web Security v7.7.x

Web Security Gateway and Web Security Gateway Anywhere v7.7.x

Email Security Gateway and Email Security Gateway Anywhere v7.7.x

V10000, V10000 G2, and V5000 G2 v7.7.x

Setting up a Websense V-Series appliance involves the following tasks. This topic covers Step 3:

Set up the appliance hardware

Perform initial command-line configuration

Configure the appliance

Network interface configuration

Routing configuration

Alerting

Configuring Web Security components

Install off-appliance or optional components

The V-Series Appliance Manager is a Web-based interface for the appliance. Use it to view system status, configure network and communication settings, and perform general appliance administration.

After completing the initial configuration required by the firstboot script, use the Appliance Manager to configure important settings for network interfaces P1, P2, N, E1, and E2 (some interfaces are optional in some modes). Note that on a V5000 G2, there are no E1 and E2 interfaces.

System Configuration

Access the Appliance Manager through a supported browser.


	Important If any Websense services are running in your network, stop all Websense services before changing the time. Then, reset the time and make certain that the time is consistent across all servers running Websense services. Finally, restart Websense services. If you do not stop the services first, client updates and policy changes entered after the time reset are not saved.

See the embedded Appliance Manager Help for detailed instructions on any field, or for information about other available settings.

Open a supported browser, and enter the following URL in the address bar:

https://<IP-address-of-C-interface>:9447/appmng

(See Perform initial command-line configuration.)

Log on with the user name admin and the password set during initial appliance configuration.

In the left navigation pane, click Configuration > System.

Under Time and Date:

Use the Time zone list to select the time zone to be used on this system.

GMT (Greenwich Mean Time), the default, is also known as UTC (Universal Time, Coordinated). Other time zones are calculated by adding or subtracting from GMT. GMT is sometimes chosen to provide a common time stamp for geographically distributed systems.

Use the Time and date radio buttons to indicate how you want to set the date.

Time is set and displayed using 24-hour notation.

To synchronize with an Internet Network Time Protocol (NTP) server (www.ntp.org.), select the Automatically synchronize option and enter the address of a primary NTP server. The secondary and tertiary fields are optional.


	Important If you synchronize the system clock with an NTP server, NTP protocol packets and their response packets must be allowed on any firewall or NAT device between the appliance and the NTP server. Ensure that you have outbound connectivity to the NTP servers. Add a firewall rule that allows outbound traffic to UDP port 123 for the NTP server.

If interface C on this appliance is not connected to the Internet, then you must provide a way for interface C to reach an NTP server. One solution is to install an NTP server on the local network where interface C can reach it.

To set the time yourself, select the Manually set option and change the value in the Date and Time fields. Use the format indicated below the entry field.

Create or edit a unique appliance description to help you identify and manage the system, particularly when there will be multiple appliances deployed.

The description is displayed in the appliance list in the TRITON Unified Security Center when the appliance is added there.

Click OK.

In each section that allows changes, OK saves and applies the new values. Cancel discards changes and restores entry field values to their current settings.

Proceed to Network interface configuration.