Overview
The eSafe XG family is a powerful content security appliance-based
solution. The appliance provides real-time intelligent inspection of
web and/or mail traffic including legitimate sites and web-enabled
applications. The solution was designed with emphasis on high
performance and flexible installation, while simplifying management
and control.
This guide will assist you in the initial installation and configuration of
the appliance.
Note: This guide provides details for installing eSafe in Transparent
Bridge mode. For information on all other installation modes, please
refer to the
eSafe SmartSuite Deployment Guide
available on the
product CD and our website.
Before You Start
Verify that the product box contains all the items listed in the
1.
supplied checklist.
You will also need the following:
2.
A Windows-based workstation for initial configuration (with IE 6.0
•
or above).
An Ethernet cable to connect the appliance to the workstation.
•
Getting Started
Connect the appliance’s management port (highlighted in the image
1.
below) to the workstation using a network cable.
Connect the power cable to the appliance and to a power source.
2.
Turn on the appliance and the workstation.
3.
Initial Configuration
Note: The appliance’s default IP address is 10.0.0.1/24.
Verify that the workstation’s IP address is in the same subnet as the
1.
appliance.
On the workstation, open the browser (IE 6.0 or above) and access
the appliance at https://10.0.0.1:37233. A security alert appears.
Accept the security alert in order to continue. The Login page
2.
appears.
Log in to the Appliance Manager using the default username
3.
(admin), and password (esafe).
The Configuration Wizard will start automatically.
Configuration Wizard
In the
1.
Welcome
screen, click
Next to display the
License Agreement
screen.
2. Read the License Agreement and click
I Accept. Click Next to
display the
Choose Product Type
screen.
3. Under
Choose Product
, select the
Secured Gateway check box
and then select
Web Security Gateway and Mail Security
Gateway if you want to scan SMTP on the machine.
4. From the
Choose deployment mode
drop-down list, select
Transparent Bridge.
Click
Next.
5. Define the following network settings:
Under
•
Appliance IP settings
, enter the IP address and netmask that
you have assigned to the eSafe Appliance. This must be a valid IP
address from the network/DMZ.
Next to
•
Default Gateway
, enter the IP address of the gateway
device that is used to forward traffic to destinations beyond the
local network.
Select the
•
Disable High Availability NIC features check
box if you do not want to allow the fail open feature when the
appliance is down.
The
•
Reset unused interfaces option is enabled by default
and clears all NIC information. (It is especially useful when
reconfiguring the appliance.)
Under
•
Name Resolution
, enter the hostname of the eSafe
Appliance to enable identification of the appliance in the
network, and the IP addresses of the DNS servers in the network
that will be used to resolve machine names.
Under
•
SMTP Client Identification
, define the string the appliance
will use for identification purposes when communicating with
SMTP clients that use the
helo
command.
Click
Next to display the
Password
screen.
6. In the
Password
screen, change the appliance’s default username and
password. You will also be prompted to change the root password.
Click
Next to display the
Set Time and Date
screen.
7. Define the current date and time, and the time zone in which the
appliance will operate. Click
Next to display the
Services
screen.
8. Select the services you wish to activate and then click
Next to
continue. The
Finish
screen appears.
9. Click
Apply and Shutdown. The appliance is now ready for
connection to the network.
10. Install the appliance in its designated physical location using the supplied
rack rails, and connect the appliance to the power supply and network.
11. Turn on the appliance. Note that, once connected to the Internet, a
30 day evaluation license will automatically be activated.
12. Make sure that the firewall allows the new eSafe appliance to
access the Internet via HTTP and HTTPS, allows access to the
DNS, and allows SMTP (for sending and accepting email).
Running the eSafe Security Center
Management Console
1. On the administration workstation/server, install the eSafe Security
Center management application from the product CD (double
click on /Setup/esg_gui.exe) or via the Appliance Manager (select
Support | eSafe Security Center).
2. Run the Security Center application.
3. In the
Connect to eSafe
dialog box, enter the appliance’s management
IP address in the
Connect to Host
field, and click
OK.
4. Define the password and click
OK to fine tune the configuration to
suit the needs of your network.
It is recommended that this string is the same as the appliance name.
XG-210
MNG
MNG
LAN
LAN
GW
GW
XG-300
START
GUIDE
Quick
eSafe_QSG.indd 2
8/6/09 1:18:45 PM
