McAfee WebShield e500, Installation Manual

Page: 16 / 292

Installation Guide — English
ENG - 6 McAfee WebShield e500 Appliance version 2.5
Features
Transparency — a new feature for version 2.5
If you have used a previous version of the WebShield appliance, be aware that
a new feature for version 2.5 is the addition of transparency. This means that
you can now use the appliance in either
proxy mode or transparency mode :
•
Proxy mode
(explicit proxy) is suitable for networks where you can easily
configure your equipment to route its protocol traffic through the
appliance. Before transparency was introduced, the appliance only
operated in proxy mode.
In proxy mode, the appliance only handles traffic for the protocols that it
proxies.
• Transparency mode (transparent proxy) allows you to slot the appliance
into networks where it is difficult or time-consuming to reconfigure your
other equipment. The appliance then sits transparently on the network
using static and dynamic routing information to receive and pass on the
traffic that it scans.
NOTE: In transparency mode, the appliance must be connected to
two different subnets (through its LAN1 and LAN2 ports).
The appliance handles all IP traffic flowing between the two subnets.
For more details about these modes, see the “Proxy or transparency?” section
in the Product Guide.
IMPORTANT: Both modes are different so it is important that you
understand and decide which mode you want to use before you install
and configure the appliance.
For details on configuring the appliance with a configuration file taken from
an earlier version of the appliance, see
“Restoring your settings” on page 56 .
Some of the appliance’s other features are summarized in the remainder of this
section.