McAfee MAP-3300-SWG - Web Security Appliance 3300, Product Manual

Page: 301 / 336

Cluster Management (Cluster Failover)
Use this page to specify information for a failover appliance.
Table 304 Option definitions
Option Definition
Address to use for load balancing Specifies the appliance address. Provides a list of all subnets assigned to
the appliance.
Cluster identifier
If you have more than one cluster or McAfee Content Security Blade
Server on the same subnet, assign each a different
Cluster identifier
to
ensure the clusters do not conflict.
The allowable range is 0-255.
Enable scanning on this
appliance
(Not applicable
on Content Security
Blade Servers)
If not selected, this appliance distributes all scanning workload to the
scanning appliances.
For a cluster of appliances, if you have only a master and a failover
appliance, with both configured to scan traffic, the master will send most
connections to the failover appliance for scanning.
DNS and Routing
Use this page within the Custom Setup Wizard to configure the appliance's use of DNS and routes.
Domain Name System (DNS) servers translate or "map" the names of network devices into IP
addresses (and the reverse operation). The appliance sends requests to DNS servers in the order that
they are listed here.
Table 305 Option definitions — DNS Servers
Option Definition
Server Address Displays the IP addresses of the DNS servers. The first server in the list must be
your fastest or most reliable server. If the first server cannot resolve the request,
the appliance contacts the second server. If no servers in the list can resolve the
request, the appliance forwards the request to the DNS root name servers on the
Internet.
If your firewall prevents DNS lookup (typically on port 53), specify the IP address of
a local device that provides name resolution
New Server/ Delete
Selected Servers
Adds a new server to the list, or removes one when, for example, when you need to
decommission a server due to network changes.
Only send queries
to these servers
Selected by default. McAfee recommends that you leave this option selected because
it might speed up DNS queries as the appliance sends the queries to the specified
DNS servers only. If they don't know the address, they go to the root DNS servers
on the Internet. When they get a reply, the appliance receives it and caches the
response so that other servers that query that DNS server can get an answer more
quickly.
If you deselect this option, the appliance first tries to resolve the requests, or might
query DNS servers outside your network.
Table 306 Option definitions — Routing
Option Definition
Network Address Type the network address of the route.
Mask Specifies how many hosts are on your network, for example, 255.255.255.0.
Gateway
Specifies the IP address of the router used as the next hop out of the network. The
address 0.0.0.0 (IPv4), or :: (IPv6) means that the router has no default gateway.
Overview of System features
Setup Wizard
McAfee Email and Web Security Appliances 5.6.0 Product Guide 301