Unified Security Gateway Quick Start Guide
© 2001—2008, FaceTime
®
Communications, Inc.
1
2
Unified Security Gateway Quick Start Guide
© 2001—2008, FaceTime
®
Communications, Inc.
Unified Security Gateway Quick Start Guide
© 2001—2008, FaceTime
®
Communications, Inc.
3
Cabling Unified Security Gateway
1. Connect the power cord to the power source.
2. Connect an Ethernet cable from the SPAN/TAP
port of your switch to Line1, which is the
monitoring interface of the security appliance.
3. Connect another Ethernet cable from the LAN
to Line2. The security appliance uses this port
for the proxy and management tasks. You need
to configure network settings for this port using
the steps listed in the
Initial Setup
section
.
Power
Socket
Mouse
Keyboard
Video
LINE 1
(Monitor Interface)
LINE 2
(Management/Proxy Port)
Initial Setup
1. Connect a monitor to the video input socket.
2. Connect a keyboard to the keyboard input
socket.
3. Switch on the power using the Power button
on the front panel.
The Boot screen appears. The screen times-out
after 3 seconds.
4. When prompted to configure the management
port (eth1), press
Y
.
5. Perform one of the following actions:
If you want to assign a static IP address:
a.
Specify an IP address (for example,
10.0.2.201).
b.
Specify the Netmask (for example,
255.0.0.0).
c.
Specify the default gateway (IP) (for
example, 10.0.0.1).
d.
Specify the Primary DNS server (for
example, 10.0.2.1).
e.
Select
OK
.
If you want to assign a dynamic IP address:
a.
Select
DHCP
.
b.
Select
OK
.
The Linux terminal displays the IP address—
static or dynamic—assigned to the appliance.
Note down this IP address to access the Web-
based user interface of the security appliance.
Initial Configuration
1. Access the administrative user interface by
typing the following URL in the Web browser:
https://<IP Address>:8443/
2. Perform the following actions when your web
browser displays the following SSL-related
alerts:
Click
OK
if you see the Secure Connection
alert.
Click
Yes
when you get the digital certificate
alert.
3. Read the End User License Agreement (EULA)
and click
Accept
to accept the EULA.
4. On the System Administrative Password page,
type the administrative password for the
sysadmin
user in the
Password
box and
confirm the password in the
Confirm Password
box.
5. Log on to the user interface with the
administrative credentials.
6. Go to the
Configuration
tab »
Server
Administration
panel » click
Network Settings
to open the Network Settings page.
7. Specify the following details:
Host Name of the security appliance.
The domain name to which the security
appliance belongs.
The Primary DNS server.
8. Go to the
Configuration
tab »
Authentication
and Authorization
panel » click
Authentication Settings
to open the
Authentication Settings page.
9. Specify the Primary Domain Controller to which
the appliance must send user authentication
requests.
10. Upgrade to the latest Firmware image. This
allows you to run the security appliance using
the most recent release with the latest Malware,
IM, and P2P protocols, and report updates.
To obtain firmware updates, perform the
following steps:
a.
Download the update package on to the
security appliance. You can schedule a
regular download of updates or download
the update package manually on to the
security appliance.
b.
Upgrade the firmware.
For detailed instructions, see the ‘Obtaining
Firmware Updates’ section in the
Unified
Security Gateway System Administrator’s
Guide
.
11. Download the latest Anti-Malware filter updates:
a.
Go to the
Configuration
tab »
Maintenance
panel. Click
Malware Updates
to open the
Malware Updates page.
b.
Type the following URL in the
URL for
Updates
box in the
Update Settings
section:
http://usg.facetime.net/usg/urlupdates/
ftupdate
c.
Click
Get Latest Filters
.
d.
Click
Install & Restart Now
on the Malware
Filters Updates: Get Latest
page.
12. Exempt trusted destination servers from being
analyzed by the security appliance. For
instructions, see to the
Unified Security
Gateway System Administrator’s Guide
.
Rear Panel of the Appliance
Note:
If you do not specify an IP address, the IP
address
192.168.1.3
is automatically assigned to the
appliance.
Note:
Ignore the Login prompt in the terminal
window and proceed with the instructions in the
Initial Configuration
section.
Note:
After you specify the Primary DNS server and
the domain name for the security appliance, the
FaceTime webfiltering database starts getting
downloaded on to the system.
