Perform initial command-line configuration

Deployment and Installation Center | Web and Email Protection Solutions | v8.0.x

Applies to:

TRITON AP-WEB and Web Filter & Security, v8.0.x

TRITON AP-EMAIL, v8.0.x

V-Series appliances, v8.0.x

Setting up a Websense V-Series appliance involves the following tasks. This topic covers Step 2:

Set up the appliance hardware

Perform initial command-line configuration

Gather the data

Run firstboot

Configure the appliance

Network interface configuration

Routing configuration

Alerting

Configuring Web appliance components

Install off-appliance or optional components

The first time you start a Websense appliance and connect via the serial console, a brief script (firstboot) prompts you to:

select the security mode for the appliance

supply settings for the network interface labeled C

enter a few other general items, such as hostname and password

You are given the opportunity to review and change these settings before you exit the firstboot script. After you approve the settings, the appliance mode is configured.

Later, if you want to change settings (except the security mode), you can do so through the Appliance manager user interface.

To change the security mode, re-image the appliance with the image for your appliance from the Websense Downloads site. Then run the firstboot script again.

Gather the data

Gather the following information before running the script. Some of this information may have been written down on the Quick Start poster during hardware setup.

Security mode (V5000)

Choose one:

TRITON AP-WEB

TRITON AP-EMAIL

Web Filter & Security

Web Filter & Security and TRITON AP-EMAIL

Security mode (V10000)

Choose one:

TRITON AP-WEB

TRITON AP-EMAIL

TRITON AP-WEB and TRITON AP-EMAIL

Web Filter & Security and TRITON AP-EMAIL

Hostname (example: appliance.domain.com)

1 - 60 characters long.

The first character must be a letter.

Allowed: letters, numbers, dashes, or periods.

The name cannot end with a period.

If this is a Web appliance with Content Gateway, and Content Gateway will be configured to perform Integrated Windows Authentication, the hostname cannot exceed 11 characters (excluding the domain name).

For more information, see the section titled Integrated Windows Authentication in Content Gateway Manager Help.

IP address for network interface C

Subnet mask for network interface C

Default gateway for network interface C
(IP address) Optional

NOTE: If you do not provide access to the Internet for interface C, use the Web module of the TRITON Manager to configure P1 to download Master URL Database updates from Websense (Web appliance with Content Gateway).

Configure E1 or P1* to download antispam and antivirus database updates from Websense (Email appliance).

Configuring these interfaces to access the Internet for database downloads is done through the Appliance manager and through the TRITON Manager. See the Appliance Manager Help for information about configuring the interfaces. See the Administrator Help for TRITON AP-WEB and for TRITON AP-EMAIL for information about configuring database downloads.

* On a V5000, use P1; there is no E1 interface.

Primary DNS server for network interface C
(IP address)

Secondary DNS server for network interface C
(IP address) Optional

Tertiary DNS server for network interface C
(IP address) Optional

Unified password (8 to 15 characters, at least 1 letter and 1 number)

This password is for the following, depending on the security mode of the appliance:

Web mode

Appliance manager

Content Gateway manager (for sites using the Content Gateway)

Content Gateway manager (for sites using the Content Gateway)

Integration method for this appliance (for sites that are not using the Content Gateway). Choose one:

Standalone (Network Agent only)

Microsoft TMG

Cisco ASA

Citrix

Choose your third-party integration product (if any).

Send usage statistics?

Usage statistics from appliance modules can optionally be sent to Websense to help improve the accuracy of categorization.

Run firstboot

Run the initial command-line configuration script (firstboot) as follows.

Access the appliance through a USB keyboard and monitor, or a serial port connection.

Note

To configure the appliance, connect through the serial port or the keyboard/video ports and complete the firstboot script. For serial port activation, use:

9600 baud rate

8 data bits

no parity

Accept the subscription agreement when prompted.

When asked if you want to begin, enter yes to launch the firstboot activation script.

To rerun the script manually, enter the following command:

firstboot

At the first prompt, select a security mode:

For a V5000:

TRITON AP-WEB

TRITON AP-EMAIL

Web Filter & Security

Web Filter & Security and TRITON AP-EMAIL

For a V10000:

TRITON AP-WEB

TRITON AP-EMAIL

TRITON AP-WEB and TRITON AP-EMAIL

Web Filter & Security and TRITON AP-EMAIL

Follow the on-screen instructions to provide the information collected above.

After the activation script has been completed successfully, access the Appliance manager by opening a supported browser and entering this URL in the address bar:

https://<IP-address-of-interface-C>:9447/appmng/

You are now ready to move to this step: Configure the appliance

Note that all Websense consoles support the following browsers:

Microsoft Internet Explorer 8, 9, 10, and 11

Mozilla Firefox version 5 and later

Google Chrome 13 and later


	Note If you use Internet Explorer, ensure that the Enhanced Security Configuration (IE ESC) is turned off. Compatibility View is not supported.