Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Introduction > Issues to consider before you begin
Issues to consider before you begin
Deploying an I Series Appliance | Forcepoint Web Security Cloud
Consider the following before you begin the deployment:
*
If you have a hardware appliance, determine appliance rack location.
*
If you are installing the appliance as a virtual machine, ensure the installation machine meets the following requirements:
*
For a Silicom bypass card deployment, the card should be installed on ESXi in VMDirectPath mode. For more information on Silicom card installation, see Silicom card setup.
*
6 dedicated CPU cores and at least 12 GB RAM
*
128 GB hard disk drive
*
The appliance virtual machine can be installed only on VMware vSphere ESXi 5.1, 5.5, or 6.0.
*
Determine appliance IP addresses for network deployment. You will require 2 addresses, and it is recommended that you configure 3.
*
Determine your directory synchronization policy.
*
If you wish to use transparent NTLM authentication for your users, decide whether to connect your appliance to a local Active Directory (see Configuring Active Directory authentication).
If you plan to use Active Directory authentication, ensure that your appliance hostname complies with Active Directory hostname requirements (see First-Time Configuration Wizard).
Alternatively you can enter the domain that forms part of your users' NTLM identity when adding your appliance in the Forcepoint Cloud Security Gateway Portal, also referred to as the cloud portal.
 
* 
Note 
To use your Active Directory for authentication, the appliance must be able to access the directory's IP address and ports. You may need to edit an internal firewall setting or LAN routing rules.
*
It is recommended that you provide a certificate when you add an appliance in the cloud portal, in order to avoid browser warnings regarding SSL termination for block, authentication, or quota/confirm operations. See Generating an appliance certificate.
To use the cloud service SSL decryption feature, you must also install the Forcepoint root certificate on each client machine. See Enabling SSL decryption in the cloud portal Help.
*
The appliance ships with a pre-installed category database. After appliance setup, an update to this database is initiated. During this update, the appliance can analyze traffic using the pre-installed database. Because this database is out-of-date, expect traffic analysis to become more accurate after the full update is complete.
A progress message displayed on the Status > General page disappears when the update is complete.
*
Browsing with Forcepoint Web Security Cloud via an I Series appliance has been tested with most commercially available web browsers. However, note that using a Windows XP machine with Internet Explorer 8 or below is not recommended, as HTTPS connections are not supported on I Series appliances for this platform and browser. For details of the supported browsers for use with the cloud service, see the article Forcepoint Cloud Security Browser Support Matrix in the Forcepoint Knowledge Base.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Introduction > Issues to consider before you begin
Copyright 2022 Forcepoint. All rights reserved.