M86 Security SWG Manual de usuario
SWG
Setup Guide
Secure Web Gateway
OVF Release 10.2
M86 SECURITY SWG SETUP GUIDE V. 10.2 2
M86 SECURITY: SWG SETUP GUIDE
© 2012 M86 Security
All rights reserved.
8845 Irvine Center Drive, Irvine, CA 92618, USA
Version 10.2 published March 2012 for SWG software release
10.2
This document may not, in whole or in part, be copied, photo-
copied, reproduced, translated, or reduced to any electronic
medium or machine readable form without prior written con-
sent from M86 Security.
Every effort has been made to ensure the accuracy of this
document. However, M86 Security makes no warranties with
respect to this documentation and disclaims any implied war-
ranties of merchantability and fitness for a particular purpose.
M86 Security shall not be liable for any error or for incidental
or consequential damages in connection with the furnishing,
performance, or use of this manual or the examples herein.
Due to future enhancements and modifications of this product,
the information described in this documentation is subject to
change without notice.
Trademarks
Other product names mentioned in this manual may be trade-
marks or registered trademarks of their respective companies
and are the sole property of their respective manufacturers.
TABLE OF CONTENTS
M86 SECURITY SWG SETUP GUIDE OVF V. 10.2 3
Table of Contents
Chapter 1: Before You Begin. . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Chapter 2: Installing the Appliance. . . . . . . . . . . . . . . . . . . . . . 6
Installing a Physical SWG Appliance. . . . . . . . . . . . . . . . . . . . . . . . .6
Requirements Before Installing a Physical Appliance................. 6
Connecting an Appliance Using an Ethernet Cable ....................7
Connecting an Appliance Using a Serial Cable ..........................9
Deploying a Virtual SWG From an OVF File . . . . . . . . . . . . . . . . . .10
Chapter 3: Setting Up the Appliance. . . . . . . . . . . . . . . . . . . . 11
Preparing Values for the Appliance Setup. . . . . . . . . . . . . . . . . . . .11
Setting Up the Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
Chapter 4: Performing Additional Configuration (Optional). 14
Limited Shell Commands — Summary List . . . . . . . . . . . . . . . . . . . 14
Limited Shell Configuration Commands. . . . . . . . . . . . . . . . . . . . . .19
access_list.................................................................................19
change_password.....................................................................19
config_ ......................................................................................20
disable_ ....................................................................................22
enable_ ..................................................................................... 22
ethconf....................................................................................... 23
flush_dnscache .........................................................................23
reset_config............................................................................... 23
Limited Shell Monitoring Commands. . . . . . . . . . . . . . . . . . . . . . . .24
arp.............................................................................................24
check_connectivity .................................................................... 24
df ...............................................................................................24
ifconfig.......................................................................................24
ip2name.....................................................................................24
iptraf ..........................................................................................24
last.............................................................................................25
name2ip.....................................................................................25
netstat........................................................................................25
ping............................................................................................ 25
poweroff.....................................................................................25
reboot........................................................................................ 25
restart_role ................................................................................25
save_exclude_logs....................................................................26
save_support_logs ....................................................................26
setup.......................................................................................... 26
show_ .......................................................................................26
supersh......................................................................................27
tcpdump.....................................................................................27
top .............................................................................................28
traceroute .................................................................................. 28
TABLE OF CONTENTS
M86 SECURITY SWG SETUP GUIDE OVF V. 10.2 4
uptime........................................................................................28
vmstat........................................................................................28
w................................................................................................28
wget...........................................................................................28
CHAPTER 1: BEFORE YOU BEGIN
M86 SECURITY SWG SETUP GUIDE V. 10.2 5
Chapter 1: Before You Begin
This guide provides the instructions you need to install and setup
your M86 Security SWG appliance.
You should perform the following tasks in the order listed:
1. Install the appliance (see Chapter 2).
2. Set up the appliance (see Chapter 3).
3. Optional appliance configuration (see Chapter 4).
After you have setup the appliance, you can configure the
Management Console according to your needs. Instructions are
provided in a separate guide – the Management Console
Reference Guide.
NOTE: Physical SWG appliances come with the required image
already loaded. Should you need to reload or replace the image,
you can find instructions in the SWG Installation Utility Guide.
INSTALLING APHYSICAL SWG APPLIANCE
M86 SECURITY SWG SETUP GUIDE V. 10.2 6
Chapter 2: Installing the Appliance
This chapter contains the following instructions:
yInstalling a Physical SWG Appliance
yDeploying a Virtual SWG From an OVF File
Installing a Physical SWG Appliance
Installation consists of connecting to the appliance. You can
connect in any of the following ways:
y
Using
an
Ethernet
Cable
y
Using
a
Serial
Cable
(SWG 3000 and SWG 5000 only)
yUsing a keyboard and monitor
Instructions for connecting are provided on the following pages.
Before connecting to the appliance, ensure that the following
requirements are satisfied.
Requirements Before Installing a Physical Appliance
yWorking electric outlet:
1 Outlet for the SWG 3000
2 Outlets for the SWG 5000
4 16 amp Outlets for the SWG 7000, preferably via
PDU
yNetwork connection — cable and switch
yHardware for connecting — ethernet cable, serial cable, or a
keyboard and monitor
yRack space for the appliance
1U Rack space for SWG 3000 or SWG 5000
7U Rack space for SWG 7000
ySwitch port for the internet cable
yAppliance name
yPhysical address
yDNS address
CHAPTER 2: INSTALLING THE APPLIANCE
M86 SECURITY SWG SETUP GUIDE V. 10.2 7
yDNS name
yDefault gateway
Connecting an
Appliance Using an
Ethernet
Cable
For SWG 3000 and SWG 5000 models
1. Plug in the power cable and switch the appliance on.
2. Connect a PC directly to the appliance’s GE0 port or via a switch
(for 5000-SWG, see
5000-SWG Rear
Panel)
using a standard (8
thread) Ethernet cable. CAT5e cables (or better) are
recommended.
3. The default IP of the GE0 interface is 10.0.0.1, and its default
netmask is 255.255.255.0. Configure the TCP/IP settings of your
PC so that it is on the same logical network subnet as the
appliance’s GE0 interface. For example, configure the IP on the
PC as 10.0.0.101 and the PC’s netmask as255.255.255.0
4. Continue with
Initial
Setup
of
your
SWG
Appliance using
Limited
Shell.
For an SWG 7000 appliance
The SWG 7000 model is a chassis containing blade servers, each
of which operates as an appliance. This provides for overall higher
end performance.
Perform the following procedure for each blade regardless of its
intended network role.
1. Plug in the power cables.
2. Configure the network settings of any PC to match those of the
appliance (IP address and subnet mask).
y
IP
address in the same subnet e.g. 10.0.0.101
ySubnet mask 255.255.255.0
IMPORTANT: Do not set the PC’s IP to 10.0.0.1, as this will result
in an IP conflict with the appliance.
INSTALLING APHYSICAL SWG APPLIANCE
M86 SECURITY SWG SETUP GUIDE V. 10.2 8
3. Connect your PC to one of the ports on the Gigabit Ethernet
switch in I/
O
switch module Bay 1 on the appliance using a
ethernet cable.
4. Power up the blades as follows:
Figure 1: Physical Control Panel for a Blade
In the control panel for the blade:
a. Press the KVM Select button so that the VGA screen
attached to the chassis displays output from the blade
being powered up.
b. Press the Power button until the blade turns on. After the
blade finishes booting, a login prompt is displayed.
5. Continue by doing either of the following:
y
Repeat Step
1.
for each blade, and when done, continue with
initial Setup of your SWG Appliance blades using
the
Limited
Shell.
or
yContinue with
Initial
Setup
o
f
this
SWG
Appliance blade using
the
Limited
Shell, and when done repeat Step
1.
for each
blade.
.
NOTE: For more information on setting up the SWG 7000, contact
your M86 Security representative.
CHAPTER 2: INSTALLING THE APPLIANCE
M86 SECURITY SWG SETUP GUIDE V. 10.2 9
Connecting an
Appliance Using a
S
erial
C
able
1. Connect the PC to the appliance’s Serial Console, using the
serial cable.
2. Using the Hyper Terminal application, enter the appropriate Port
settings:
yBits per Second (Baud Rate): 19,200
yData Bits (Word): 8
yParity: None
yStop bits:1
NOTE: Connection using a serial cable is applicable only to SWG
3000 and SWG 5000 appliances.
DEPLOYING AVIRTUAL SWG FROM AN OVF FILE
M86 SECURITY SWG SETUP GUIDE V. 10.2 10
Deploying a Virtual SWG From an OVF File
This section explains how to deploy a virtual SWG from an OVF
file. Virtual SWG appliances are certified to work with a VMWare
ESXI version 4.1 server.
1. In the vSphere client, choose File
Æ
Deploy OVF Template.
2. In the wizard, browse to the OVF file and then complete the
deployment.
When done, it is recommended that you set the attributes for the
virtual machine according to the values indicated in Table 1.
NOTE: Before deploying the virtual appliance, ensure that you
have access to a VMWare vSphere client and that the OVF files
are accessible in your local machine.
Table 1: Recommended Values for the Virtual Machine
Machine Attribute Recommended Value
CPUs At least 2
Memory At least 4GB
Otros manuales para SWG
1
Tabla de contenidos
Otros manuales de Puerta de M86 Security
Manuales populares de Puerta de otras marcas
LST
LST M500RFE-AS Manual de usuario
Kinnex
Kinnex Media Gateway Manual de usuario
2N Telekomunikace
2N Telekomunikace 2N StarGate Manual de usuario
Mitsubishi Heavy Industries
Mitsubishi Heavy Industries Superlink SC-WBGW256 Manual de usuario
ZyXEL Communications
ZyXEL Communications ZYWALL2 ET 2WE Manual de usuario
Telsey
Telsey CPVA 500 - SIP Manual de usuario
