V5000 G2 hardware setup

Deployment and Installation Center | Web and Email Security Solutions | Version 7.7.x

Applies to:

Web Security v7.7.x

Web Security Gateway and Web Security Gateway Anywhere v7.7.x

Email Security Gateway and Email Security Gateway Anywhere v7.7.x

V5000 G2 v7.7.x

The appliance's network interfaces must be able to access a DNS server and the Internet, as described below. This information varies slightly depending on the security mode you choose for the appliance.

V5000 G2: Web mode with Web Security Gateway

V5000 G2: Web mode with Web Security (no Web gateway)

V5000 G2: Web and Email mode with Web Security (no Web gateway)

V5000 G2: Email mode

V5000 G2: Web mode with Web Security Gateway

Network interface C must be able to access a DNS server. This interface typically has continuous access to the Internet. Essential databases are downloaded from Websense servers through interface C.

Ensure that interface C is able to access the download servers at download.websense.com. (As an alternative, some sites configure the P1 proxy interface to download the Websense Master Database as well as other security updates. This change must be made in the TRITON - Web Security console. In that situation, interface C does not require Internet access.)

Make sure the above addresses are permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C interface can access.

V5000 G2: Web mode with Web Security (no Web gateway)

Network interface C must be able to access a DNS server. Interface C must have continuous access to the Internet. Essential databases are downloaded from Websense servers through this interface.

Ensure that interface C is able to access the download servers at download.websense.com.

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C interface can access.

Network interface N must be connected to a mirror port on a router or switch.

If interface N is used to send blocking information, then it must be connected to a bi-directional mirror port. Through the bi-directional mirror port, interface N not only monitors all client traffic but also sends blocking information if needed.

V5000 G2: Web and Email mode with Web Security
(no Web gateway)

Interfaces C and P1 (and P2, if used) must be able to access a DNS server. These interfaces typically have continuous access to the Internet once the appliance is operational. Essential databases are downloaded from Websense servers through these interfaces.

Ensure that C and P1 (and P2, if used) are able to access the download servers at download.websense.com.

Make sure the above addresses are permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the C and P1 (and P2, if used) interfaces can access.

Network interface P1 (and P2, if used) must be able to access the mail server.

Network interface N must be connected to a mirror port on a router or switch.

V5000 G2: Email mode

Interface P1 (and P2, if used) must be able to access a DNS server. These interfaces typically have continuous access to the Internet once the appliance is operational. Essential databases are downloaded from Websense servers through these interfaces.

Ensure that P1 (and P2, if used) is able to access the download servers at download.websense.com.

Make sure the above address is permitted by all firewalls, proxy servers, routers, or host files controlling the URLs that the P1 and P2 interfaces can access.

Network interface P1 (and P2, if used) must be able to access the mail server.