M86 Web Filter
INSTALLATION GUIDE
Models: 300, 500, 700
Software Version: 4.0.10
Document Version: 01.21.11
Page 1: ...M86 Web Filter INSTALLATION GUIDE Models 300 500 700 Software Version 4 0 10 Document Version 01 21 11...
Page 2: ...nt However M86 Security makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose M86 Security shall not be li...
Page 3: ...nstall the Inner Slides 7 Install the Outer Slides 7 Install the Slide Assemblies to the Rack 8 Install the Chassis into the Rack 9 Rack Mount Instructions for 700 Series Servers 10 Rack Setup Suggest...
Page 4: ...ttings 29 Reset system to factory defaults 29 Reboot system 29 Change Quick Start password 29 Reset admin console account 29 System Status screen 30 Log Off Disconnect the Peripherals 30 Step 1B LCD P...
Page 5: ...ss Groups 58 I Threats Liabilities 59 1 Category block 59 2 Rule block 59 3 X Strike on blocked categories 59 4 Custom Lock Block Warn X Strikes Quota pages 60 5 URL Keywords 60 6 Search Engine Keywor...
Page 6: ...ss 72 LED INDICATORS AND BUTTONS 73 Front Control Panels on 500 and 700 Series Units 73 Rear Panel on the 700 Series Unit 74 Front Control Panel on a 300 Series Unit 74 REGULATORY SPECIFICATIONS AND D...
Page 7: ...zation against lost productivity network bandwidth issues and possible legal problems that can result from the misuse of Internet resources The Web Filter provides an extensive library filtering categ...
Page 8: ...he unit Regulatory Specifications and Disclaimers This section cites safety and emissions compliance information for the Web Filter appliance models refer enced therein Index An alphabetized list of s...
Page 9: ...rters USA Local 714 282 6111 Domestic US 1 888 786 7999 International 1 714 282 6111 M86 Security Taiwan Taipei Local 2397 0300 Domestic Taiwan 02 2397 0300 International 886 2 2397 0300 Procedures Wh...
Page 10: ...assis 1 set of rack mounting rails For 300 series models the following items are also included in the carton 1 power adapter with power cord 1 set of 4 pressure sensitive feet to be affixed to the bot...
Page 11: ...ll outlet this is the only way to remove the AC power cord from the server Clearance provided for cooling and airflow Approximately 30 inches 76 2 cm in the back and 25 inches 63 5 cm in the front Loc...
Page 12: ...nection of the server to the power supply will not overload any circuits Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the c...
Page 13: ...right inner slide against the hooks on the right side of the chassis as show below on the left 3 Securely attach the slide to the chassis with two M4 flat head screws and repeat the steps 1 3 to insta...
Page 14: ...to the Rack 1 After you have installed the short and long brackets to the outer slides you are ready to install the whole slide assemblies outer slides with short and long brackets attached to the ra...
Page 15: ...IDE 9 Install the Chassis into the Rack 1 Push the inner slides which are attached to the chassis into the grooves of the outer slide assemblies that are installed in the rack as shown below 2 Push th...
Page 16: ...s The chassis package includes two rack rail assemblies in the rack mounting kit Each assembly consists of two sections an inner fixed chassis rail that secures directly to the server chassis and an o...
Page 17: ...chassis with 2 screws as illustrated 4 Repeat steps 1 3 for the other inner rail extension Install the Outer Rails 1 Attach the short bracket to the outside of the long bracket You must align the pins...
Page 18: ...PRELIMINARY SETUP PROCEDURES RACK MOUNT THE SERVER 12 M86 SECURITY INSTALLATION GUIDE...
Page 19: ...C are installed on the rack 2 Line chassis rails A and B with the front of the rack rails C 3 Slide the chassis rails into the rack rails keeping the pressure even on both sides you may have to depres...
Page 20: ...ck If you are installing the server into a Telco type rack follow the directions given on the previous pages for rack installation The only difference in the installation procedure will be the positio...
Page 21: ...les Fig 5 on the inside of the U shaped aluminum rail handles on both ends of the chassis rails Fig 4 U shaped handles Note also that the holes for the longer pair of pins are located on the front of...
Page 22: ...manufacturer the protec tion provided by the server may be impaired WARNING M86 Security is not responsible for regulatory compliance of any server that has been modified Altering the server s enclos...
Page 23: ...Route the AC power cord and cables away from moving parts and foot traffic Do not allow anything to rest on the AC power cord and cables Never use the server if the AC power cord has been damaged Alwa...
Page 24: ...There is a danger of explosion if the battery on the motherboard is installed upside down which will reverse its polarities CAUTION DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY REPLACED REPLACE ONLY...
Page 25: ...laptop computer with HyperTerminal and serial port cable and USB DB9 serial adapter if there is no serial port on your laptop B Go to Step 1A to execute Quick Start Setup Procedures NOTE For 300 seri...
Page 26: ...r on the Web Filter Serial Console Setup A Using the serial port cable and USB DB9 serial adapter if necessary connect the laptop to the rear of the chassis see serial port in Fig 1 for a 300 series u...
Page 27: ...etup go to Login screen For Serial Console Setup go to HyperTerminal Setup Procedures Power up a 500 or 700 Series Model A Make sure the power cord s is are plugged into the back of the chassis B Plug...
Page 28: ...ram installed on your workstation Hilgraeve Inc the maker of HyperTerminal offers HyperTerminal Private Edition for Windows Vista and Windows 7 The following information is included on Hilgraeve s Web...
Page 29: ...t assigned to the serial port on the laptop probably COM1 and then click OK to open the Properties dialog box displaying the Port Settings tab D Specify the following session settings Bits per second...
Page 30: ...ATION GUIDE F In the HyperTerminal session window go to File Properties to open the Prop erties dialog box displaying the Connect To and Settings tabs G Click the Settings tab and at the Emulation men...
Page 31: ...rently displays on your screen press the Enter key to display the login screen A At the login prompt type in menu B Press the Enter key to display the Password prompt C At the Password prompt type in...
Page 32: ...LAN1 Configure network interface LAN2 Configure default gateway Configure DNS servers Configure host name Time Zone regional setting B After making all entries using the Quick Start setup procedures...
Page 33: ...tart menu press 5 to go to the Configure Network Interface screen for LAN2 B At the Enter interface LAN2 IP address prompt type in the LAN2 IP address and press Enter C At the Enter interface LAN2 net...
Page 34: ...s change Time Zone regional setting A From the Quick Start menu press 9 to go to the Time Zone regional configura tion screen B Select a region using up arrow and down arrow Press Y when you have sele...
Page 35: ...TE This option will change the password used for accessing the Quick Start menu the default password being s3tup r3k but will not change the password used for accessing the Web Filter login screen Opt...
Page 36: ...current status Active or Inactive Default gateway IP address specified in screen 6 Configure default gateway Web Filter host name specified in screen 8 Configure host name DNS server IP address es spe...
Page 37: ...R keys 300 series keypad at left 500 and 700 series keypad at right To display software status information about the Web Filter press the right arrow key To go to the LCD Menu press X CANCEL Pressing...
Page 38: ...procedures be sure to configure all menu items marked in the list above with an asterisk Please make a note of the LAN 1 and LAN 2 IP address and host name you assign to the Web Filter server as you...
Page 39: ...e current value and the left right arrow keys to navigate across the line C Press the checkmark ENTER key to accept your entry and to return to the previous screen D Choose Change LAN1 2 Netmask and p...
Page 40: ...n first uppercase and then lowercase numbers from 0 9 and lastly the symbol characters NOTE Navigation tips If the down arrow key is pressed first instead of the right arrow key the symbol characters...
Page 41: ...ll locked IPs will be unlocked B After reading the warning message select one of two options on the screen Choose Yes reset it now to reset the password and to return to the main menu Choose No cancel...
Page 42: ...iew each of the three available options backlight feature enabled populated field backlight turns on backlight feature disabled empty field backlight turns off display the backlight now populated fiel...
Page 43: ...t on the left Rear of 300 series chassis with LAN ports identified Portion of 500 series chassis rear with LAN ports identified Portion of 700 series chassis rear with LAN ports identified B Plug the...
Page 44: ...icate in IE If using Safari proceed to Accept the Security Certificate in Safari If the security issue page does not display in your browser verify the following The Web Filter is powered on The Web F...
Page 45: ...39 Accept the Security Certificate in Firefox A If using a Firefox browser in the page This Connection is Untrusted click the option I Understand the Risks B In the next set of instructions that disp...
Page 46: ...ate is obtained by the server D With the checkbox Permanently store this exception selected click Confirm Security Exception to open the Security warning dialog box E With the checkbox Always trust co...
Page 47: ...g an IE browser in the page There is a problem with this website s security certificate click Continue to this website not recommended Selecting this option displays the Web Filter login page with the...
Page 48: ...afari can t verify the identity of the website opens Click Show Certificate to open the certificate information box at the bottom of this window B Click the Always trust checkbox and then click Contin...
Page 49: ...d certificate for the Web Filter to ensure secure exchanges between the appliance and your browser If using an IE browser you will need to complete the security certificate acceptance procedures Log i...
Page 50: ...ish to continue which would restart your server C Click Yes to generate the SSL certificate and restart the Web Filter D After the certificate is generated you will be prompted to click OK and close y...
Page 51: ...rowser Windows XP or Vista with IE 7 or 8 Windows 7 with IE 8 Windows XP or Vista with IE 7 or 8 A If using an IE 7 or 8 browser on a Windows XP or Vista machine in the page There is a problem with th...
Page 52: ...SECURITY INSTALLATION GUIDE Figure A2 Windows XP IE 7 B Click Certificate Error to open the Certificate Invalid pop up box Figure B Windows XP IE 7 C Click View certificates to open the Certificate w...
Page 53: ...SL CERTIFICATE M86 SECURITY INSTALLATION GUIDE 47 Figure C Windows XP IE 7 D Click Install Certificate to launch the Certificate Import Wizard Figure D Windows XP IE 7 E Click Next to display the Cert...
Page 54: ...to close the pop up box H Click Next to display the last page of the wizard Figure H Windows XP IE 7 I Click Finish to close the wizard and to open the Security Warning dialog box asking if you wish...
Page 55: ...dress field and the Certificate Error button to the right of the field shaded a reddish color see Figure A2 Click Certificate Error to open the Certificate Invalid pop up box see Figure B Click View c...
Page 56: ...s IP Address to the Server s Host Name Map the Web Filter s IP Address to the Server s Host Name A From your workstation launch Windows Explorer and enter C WINDOWS system32 drivers etc in the addres...
Page 57: ...Procedures Step 1A or the Host Name screen in LCD Panel Setup Procedures Step 1B and then save and close the file D In the address field of your newly opened IE browser from now on you will need to u...
Page 58: ...tested If you do not contact an M86 Security solutions engineer or technical support representative Test the Mobile Client Connection If the Web Filter has been set up to use the Mobile mode you shou...
Page 59: ...ctivating your account A Open an Internet browser window and go to http www m86security com support activate appliance asp B After reading through the online End User License Agreement click Accept to...
Page 60: ...e you begin using the Web Filter you must perform a complete library update to ensure you have the latest library updates To download the latest library updates A Click the Library button at the top o...
Page 61: ...og to display the update activity NOTE You will be notified in the log when the library has been completely updated by the message Full URL Library Update has completed If this message does not yet di...
Page 62: ...consult Chapter 2 Group screen in the Global Administrator Section of the Web Filter User Guide Refer to Chapter 1 System screen for information on how to give end users access to acceptable HTTPS si...
Page 63: ...ter User Guide for pages containing detailed step by step instructions on configuring and or using the tools and features described in that scenario In this section you will learn how to block user ac...
Page 64: ...ics Health Fitness Illegal Question able Information Technology Internet Communication Internet Productivity Internet Intranet Misc News Reports Religion Beliefs Security Shopping Society Lifestyles T...
Page 65: ...a profile go to POLICY Policy Global Group Rules Policy IP member member profile Category tab or Policy Global Group Global Group Profile Category tab In the Web Filter User Guide index see How to us...
Page 66: ...be blocked go to LIBRARY Library Category Groups category URL Keywords POLICY Policy IP member member Profile Filter Options tab URL Keyword Filter Control enabled or POLICY Policy Global Group Global...
Page 67: ...icy Global Group Minimum Filtering Level Policy Global Group Global Group Profile Category tab In the Web Filter User Guide index see How to configure the Minimum Filtering Level How to use library ca...
Page 68: ...y tab In the Web Filter User Guide index see How to configure filtering How to use library categories in a profile 12 File type blocking Prevent users from downloading and using executable files that...
Page 69: ...profile 2 Overall Quota Restrict all quota time in a profile to improve bandwidth usage and produc tivity Cap the amount of time a user spends in all quota marked categories by enabling the Overall Q...
Page 70: ...along with X Strikes Blocking After the end user is warned for the designated number of times defined in X Strikes Blocking that user is locked out of all Internet intranet access To set up and use t...
Page 71: ...s In the profile block Entertainment Games category To block game patterns go to SYSTEM System Control Filter window POLICY Policy IP member member profile Category tab or POLICY Policy Global Group G...
Page 72: ...w if you want the Web Filter to filter HTTPS sites without having the Web Filter communicate with IP addresses or hostnames of HTTPS servers Medium if you want the Web Filter to communicate with HTTPS...
Page 73: ...ibrary Category Groups category group category Search Engine Keywords POLICY Policy IP member member Profile Filter Options tab Search Engine Keyword Filter Control enabled or POLICY Policy Global Gro...
Page 74: ...reporting go to REPORTING Report Real Time Probe Configuration tab Real Time Probe Go to Real Time Probe Reports GUI link Real Time Probe Reports Create tab In the Web Filter User Guide index see How...
Page 75: ...ions tab X Strikes Blocking enabled In the Web Filter User Guide index see How to configure filtering How to set up X Strikes Blocking How to configure the Warn Option Setting How to use library categ...
Page 76: ...nent to your organization or region that should be blocked Apply this category to a profile To customize and use an M86 Supplied Category in a profile go to LIBRARY Library Category Groups category gr...
Page 77: ...n the Minimum Filtering Level the Minimum Filtering Level setting will override the entry in the Always Allow custom category To create a white list custom category and use it in a profile go to LIBRA...
Page 78: ...lly blocked categories set up an Override Account at the Global Group level or enable the option to allow the Minimum Filtering Level to be bypassed with an Override Account and then set up the Overri...
Page 79: ...structing the airflow in the system or the ambient room temperature being too warm NIC2 icon A flashing green LED indicates network activity on LAN2 On a 500 series unit the LED is a steady green with...
Page 80: ...s to the right of the LAN ports a steady blue UID LED indicator displays when the UID button on the control panel is pressed This LED remains lit until the UID button is pressed again Front Control Pa...
Page 81: ...enerates uses and can radiate radio frequency energy and if not installed and used in accordance with the instruction manual may cause harmful interference to radio communications Operation of this eq...
Page 82: ...22 2006 A1 2007 EN55024 1998 A2 2003 IEC CISPR 22 2008 IEC CISPR 24 1997 A1 2001 A2 2002 EN61000 3 2 2006 EN61000 3 3 2008 CFR47 Part 15 Subpart B 2009 Product Name s Security Appliance Product Model...
Page 83: ...ock Block Warn X Strikes Quota pages 60 Customize an M86 Supplied Category 70 E EMC 75 Exception URL bypass 62 F FCC 75 File type blocking 62 G Game patterns 65 General Productivity 68 H HTTPS setting...
Page 84: ...set WF Admin Console Password 35 RoHS compliant 76 Rule block 59 67 S SE Keywords 67 Search Engine Keywords 60 serial port cable 19 20 shut down 35 300 series server 74 500 700 series server 73 Stream...
Page 85: ......
Page 86: ...M86 Security Corporate Headquarters USA 828 West Taft Avenue Orange CA 92865 4232 Tel 714 282 6111 or 888 786 7999 Fax 714 282 6116 Sales Technical Support 714 282 6117 General Office...