McAfee WebShield e500, Руководство по установке

Страница: 58 / 292

Installation Guide — English
ENG - 48 McAfee WebShield e500 Appliance version 2.5
Configuring your other equipment
This section provides an overview of the changes that you might need to make
to your other equipment, to fully integrate the appliance into your existing
network. The changes depend on whether you are using the appliance in
proxy mode or transparency mode:
• Proxy mode (explicit proxy) — You must configure your other network
equipment to route the protocols through the appliance, so nothing can
bypass the appliance. This includes configuring all your internal clients
(such as HTTP, FTP and POP3 software) to use the appliance as a proxy
server. In particular, ensure that your web clients’ HTTP, FTP and Gopher
settings are configured to use the HTTP port number. See
“Routing
protocols through the appliance,” below.
• Transparency mode (transparent proxy) — By definition, transparency
mode allows you to slot the appliance into you network without requiring
much reconfiguration of your other equipment. However, you will still
need to configure your SMTP e-mail system to pass e-mail traffic through
the appliance. See
“Modifying DNS server records” on page 49 .
IMPORTANT: During the day-to-day use of your e-mail system, you
might need to take the mail server offline to perform configuration
changes or other maintenance tasks. Be aware that if you leave the
appliance running, it will still accept and scan incoming e-mail messages
but will be unable to pass them on (unless your e-mail setup includes a
backup mail server). If the appliance is allowed to fill up with messages,
it will run out of space. To avoid this problem, disable the SMTP proxy
at the appliance when the mail server is offline. Your firewall should then
return incoming messages as undeliverable.