INSTALLATION AND CONFIGURATION GUIDE. Webwasher Appliances.

Transcription

1 INSTALLATION AND CONFIGURATION GUIDE Webwasher Appliances

2 Part Number: B All Rights Reserved, Published and Printed in Germany 2006 Secure Computing Corporation. This document may not, in whole or in part, be copied, photocopied, reproduced, translated, or reduced to any electronic medium or machine-readable form without prior consent in writing from Secure Computing Corporation. Every effort has been made to ensure the accuracy of this manual. However, Secure Computing Corporation makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose. Secure Computing Corporation shall not be liable for any error or for incidental or consequential damages in connection with the furnishing, performance, or use of this manual or the examples herein. The information in this document is subject to change without notice. Webwasher, MethodMix, AV PreScan, Live Reporting, Content Reporter, Real-Time Classifier are all trademarks or registered trademarks of Secure Computing Corporation in Germany and/or other countries. Microsoft, Windows NT, Windows 2000 are registered trademarks of Microsoft Corporation in the United States and/or other countries. Sun and Solaris are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. Squid is copyrighted by the University of California, San Diego. Linux is a registered trademark of Linus Torvalds. Other product names mentioned in this guide may be trademarks or registered trademarks of their respective companies and are the sole property of their respective manufacturers. Secure Computing Corporation Webwasher A Secure Computing Brand Vattmannstrasse 3, Paderborn, Germany Phone: +49 (0) Fax: +49 (0) info@webwasher.com European Hotline Phone: +49 (0) US Hotline Phone: ,

3 Contents Chapter 1 Introduction Overview Appliance Versions Initial Configuration Settings Chapter 2 Installation and Initial Configuration Overview The Appliance Boxes WW500 Appliance WW1000 Appliance WW1100 Appliance WW1900 Appliance Default Settings Serial Interface Remote Login with ssh Other Settings Providing the Initial Configuration Settings Using the Setup Utility Setup Utility Window Configuration File Installing the Appliance Box Setup with the System CD ROM Use of the System CD ROM Setup Procedure Root Administration Changing the Root Password Remote Login Chapter 3 Further Configuration and Updates Accessing the Web Interface Configuring the Appliance Update Management Update Server Searching for New Versions Installing New Versions Glossary... GL 1 i

4

5 Introduction Chapter 1 Welcome to the Webwasher Appliances Installation and Configuration Guide. This guide provides you with the information needed to install and configure the Webwasher appliances. A Webwasher appliance is a high-performance content security product for use at the network gateway and is integrated in the Secure Computing product line. By providing an unparalleled breadth and depth of content security filtering and management, it creates an entirely new level of defense against today s new blended network security threats. 1.1 Overview The following topics are dealt with in this document: Installation and Initial Configuration Installation of the appliance box, installation of the operating system and the Webwasher application software, initial configuration, use of the system CD ROM, see Chapter 2. Further Configuration and Updates Modification of configuration settings, search for and installation of software updates, see Chapter

6 Introduction 1.2 Appliance Versions There are several versions of the Webwasher appliances available: WW500 Appliance The small version of the Webwasher appliances. WW1000 and WW1100 Appliances The medium-sized versions. WW1900 Appliance The large version. 1.3 Initial Configuration Settings The operating system and the Webwasher application software are installed on an appliance box. Usually, this is done by the manufacturer. So, you only need to provide your initial configuration settings before switching the appliance box on and starting to use the application software. For further configuration and administration tasks, a Web interface (GUI) is provided. Note that if you do not provide your initial configuration settings before switching the appliance box on, the appliance will be configured with the default settings, which are usually impracticable in a particular environment. In this case, you can use the bootable system CD ROM delivered with the appliance box to go through the installation procedure again, and this time implement the required settings. 1 2

7 Chapter 2 Installation and Initial Configuration This chapter provides you with the information needed to install a Webwasher appliance and perform the initial configuration steps. 2.1 Overview The installation procedure includes several tasks. Some of these are usually performed by the manufacturer, which means they are already completed when the appliance box is shipped to you. These installation tasks include: Providing the initial configuration settings, see 2.4. Installing the appliance box, see 2.5. Installing the operating system and the Webwasher application software usually performed by the manufacturer The tasks that need to be performed by you are described in the sections mentioned above. For descriptions of the appliance boxes, see 2.2. For the default settings, see 2.3. Note that if you do not provide your own initial configuration settings before switching the appliance box on, the appliance will be configured with the default settings, which are usually impracticable in a particular environment. Using the system CD ROM shipped with the appliance, you can repeat parts of the installation procedure in order to modify or correct settings, see 2.6. Some administrative steps that may be completed by the root user are described in a further section, see

8 2.2 The Appliance Boxes An appliance box is a high-performance hardware platform used as the system that the Webwasher application software runs on. Appliance boxes are different for each version of the Webwasher appliances. The upcoming subsections describe the appliance boxes for the: Webwasher WW500 Appliance Webwasher WW1000 Appliance Webwasher WW1100 Appliance Webwasher WW1900 Appliance WW500 Appliance The appliance box for the WW500 appliance provides the following features: Form factor Rack mount Processor Cache Memory Hard disk 1U Yes Intel Pentium GHz 1 MB 1 GB RAM 80 GB SATA NIC ports 2 x 10/100/1000 USB interfaces 4 Serial interface 1 Power supply 1 Redundancy Video/keyboard/mouse support None Yes 2 2

9 Accessories Together with the appliance box, the following accessories are shipped: 1 appliance box power cord (color: black) 6-foot crossover cable Pair of 7-foot RJ45-based 10/100 Mbs Ethernet straight through cables (color: blue or gray). Systems Diagnostic CD for defective hardware diagnostics Bezel for the appliance box Rack mount kit Product Information Guide Front Side At its front side, an appliance box provides a number of operating elements accessible to the user. A bezel for the front side of the appliance box is provided, which is, however, not installed on the box after shipping. For a description of how to install or remove this bezel, see the end of this section on the WW500 appliance box. The following diagram gives an overall view of the front panel of the WW500 appliance box. In this overall view, you can see the position of the DVD drive (8) on the left side of the front panel: 2 3

10 The next diagram shows the right side of this front panel. On this side, you find all the other front panel operating elements that are used for the installation and configuration purposes described in this guide: The following table provides a list of these operating elements: 1 Power switch 2 NMI button (for special troubleshooting activities You should only use this button if directed to do so by qualified support personnel.) 3 USB interface 4 USB interface 5 Hard-disk activity indicator 6 Video connector 7 Information unit with system status indicator and system identification button (The button can be used to used to locate a particular system within a rack. When it is pushed, the blue system status indicator, as well as the corresponding indicator on the front panel, blink until the button or the corresponding button on the back panel is pushed again.) 2 4

11 Rear Side The following diagram gives an overall view of the rear side of the WW500 appliance box. The next diagram shows the left side of the rear panel. On this side, you find all the rear panel operating elements that are used for the installation and configuration purposes described in this guide: The following table provides a list of these operating elements: 1 Power supply connector 2 Mouse connector 3 Keyboard connector 4 USB interface 5 USB interface 6 Serial interface 7 Video connector 8 Information unit with system status indicator and system identification button (The button can be used to used to locate a particular system within a rack. When it is pushed, the blue system status indicator, as well as the corresponding indicator on the back panel, blink until the button or the corresponding button on the back panel is pushed again.) 9 Gigabit network interface 1 10 Gigabit network interface 2 2 5

12 Installing the Bezel To install the bezel on the appliance box, proceed as follows: 1. Hook the right end of the bezel into the bezel slot on the right side of the system front panel. For the position and movements of the bezel in relation to the system, see the figure in the next subsection. 2. Rotate the other end of the bezel toward the front panel and press the bezel onto the panel to engage the latch. 3. Lock the bezel with the bezel key. Removing the Bezel To remove the bezel from the appliance box, proceed as follows: 1. Unlock the bezel with the bezel key. For the position of the key lock and the movement of the key, see the figure below: The meaning of the numbered items in the figure is as follows: 1 Key lock 2 Bezel 2. Unlatch the left end of the bezel and rotate it away from the front. 3. Unhook the right end of the bezel and pull the bezel away from the system, as shown in the figure. 2 6

13 2.2.2 WW1000 Appliance The following is a picture of a Webwasher WW1000 appliance box: Features This appliance box provides the following features: Form factor Rack mount Processor Memory 1U Yes Dual Processor 1 GB RAM NIC ports 2 x 10/100 USB interfaces 3 Serial interface 1 Power supply 1 Redundancy Video/keyboard/mouse support None Yes 2 7

14 Packaging The Webwasher WW1000 appliance box is shipped in a carton. Within the carton, the appliance box is wrapped in a sealed moisture-proof plastic bag. Information about the proper unpacking of the appliance box is printed on the carton. Accessories Together with an appliance box, the following accessories are shipped, which are also placed in the carton: A pair of 7-foot RJ45-based 10/100 Mbs Ethernet straight through cables (color: blue or gray). A 7-foot RJ45-based 10/100 Mbs Ethernet crossover cable for use in a high-availability configuration (color: blue or gray) Appliance box power cord (color: black) PS/2 cable for keyboard/mouse operation Rack mount kit Certificate of validation for the appliance box and its CPUs Front Side At its front side, an appliance box provides a number of operating elements accessible to the user. These include a CD ROM drive, the reset button and the power switch. To access these elements, open the bezel covering the front panel of the appliance box. The bezel is opened by first unlocking the two locks located on either side of the bezel with the bezel key, and then carefully slanting the bezel forward until it comes down and the operating elements can be accessed. 2 8

15 2 1 Installation and Initial Configuration The following diagrams show the front panels of WW1000 appliance boxes. These may be equipped with a Jarrell or a Westville motherboard. The first diagram gives an overall view of the front panel of an appliance box in the Westville version: ID Note that the Jarrell version differs from this in that the CD ROM drive is located further to the left. The next diagram shows the right side of the front panel. On this side, you find all the front panel operating elements that are used for the installation and configuration purposes described in this guide: ID The following table provides a list of these operating elements: 1 CD ROM drive (for inserting system CD ROM) 2 Floppy disk drive (for inserting configuration medium) 3 Video connector 4 Power switch 5 USB interface 6 Reset button 2 9

16 2 1 Installation and Initial Configuration Rear Side Westville Version The following diagram gives an overall view of the rear panel in the Westville version. In this overall view, you can see the position of the power supply connector (9) on the right side of the rear panel: 9 The next diagram shows the left side of the rear panel. On this side, you find all the other rear panel operating elements that are used for the installation and configuration purposes described in this guide: The following table provides a list of these operating elements: 1 USB interface 6 PS/2 keyboard connector 2 Video connector 7 Serial interface 3 SCSI interface 8 USB interface 4 NIC network interface 1 (eth0) 9 Power supply connector 5 NIC network interface 2 (eth1) 2 10

17 Rear Side Jarrell Version At the rear side of the Jarell version of an appliance box, the location of connectors and other operating elements is in part different from that of the Westville version. The following diagram gives an overall view of the rear panel in the Jarrell version: In this overall view, you can see the position of the power supply connector (12) on the right side of the rear panel. It is in the same position as with the Westville version. The next diagram shows the left side of the rear panel. On this side, you find all the other rear panel operating elements that are used for the installation and configuration purposes described in this guide. They are shown in the locations they have in the Jarrell version of the appliance: The following table provides a list of these operating elements: 1 PS/2 keyboard connector 7 SCSI interface 2 PS/2 mouse connector 8 USB interface 3 Serial interface 9 USB interface 4 NIC network interface 1 (eth0) 10 NIC network interface 3 (eth2) 5 NIC network interface 2 (eth1) 11 SCSI interface 6 Video connector 12 Power supply connector 2 11

18 PCI Slots The information provided in this subsection applies only to the Jarrell version of an appliance box. In this version, there are two PCI slots on the rear side, see picture below. They are equipped as follows: PCI slot 1 PCI slot 2 Empty in the Webwasher default configuration Contains Adaptec 29320ALP SCSI controller The following picture shows the position of these PCI slots: 2 12

19 2.2.3 WW1100 Appliance The appliance box for the WW1100 appliance provides the following features: Form factor Rack mount Processor Cache Memory 1U Yes Dual-core Intel Pentium D 3 GHz 2 x 2 MB 1 GB RAM Hard disks 2 x 80 GB SATA, RAID 1 NIC ports 4 x 10/100/1000 USB interfaces 4 Serial interface 1 Power supply 1 Redundancy Video/keyboard/mouse support Disk Yes Accessories Together with the appliance box, the following accessories are shipped: 1 appliance box power cord (color: black) 6-foot crossover cable Pair of 7-foot RJ45-based 10/100 Mbs Ethernet straight through cables (color: blue or gray). Systems Diagnostic CD for defective hardware diagnostics Bezel for the appliance box Rack mount kit Product Information Guide 2 13

20 Front Side At its front side, an appliance box provides a number of operating elements accessible to the user. A bezel for the front side of the appliance box is provided, which is, however, not installed on the box after shipping. A description of how to install or remove this bezel is given at the end of the section on the WW500 appliance box, see The following diagram gives an overall view of the front panel of the WW1100 appliance box. In this overall view, you can see the position of the DVD drive (8) on the left side of the front panel: 2 14

21 The next diagram shows the right side of this front panel. On this side, you find all the other front panel operating elements that are used for the installation and configuration purposes described in this guide: The following table provides a list of these operating elements: 1 Power switch 2 NMI button (for special troubleshooting activities You should only use this button if directed to do so by qualified support personnel.) 3 USB interface 4 USB interface 5 Hard-disk activity indicator 6 Video connector 7 Information unit with system status indicator and system identification button (The button can be used to used to locate a particular system within a rack. When it is pushed, the blue system status indicator, as well as the corresponding indicator on the front panel, blink until the button or the corresponding button on the back panel is pushed again.) 2 15

22 Rear Side The following diagram gives an overall view of the rear side of the WW1100 appliance box. The next diagram shows the left side of the rear panel. On this side, you find all the rear panel operating elements that are used for the installation and configuration purposes described in this guide: The following table provides a list of these operating elements: 1 Power supply connector 2 Mouse connector 3 Keyboard connector 4 USB interface 5 USB interface 6 Serial interface 7 Video connector 8 Information unit with system status indicator and system identification button (The button can be used to used to locate a particular system within a rack. When it is pushed, the blue system status indicator, as well as the corresponding indicator on the back panel, blink until the button or the corresponding button on the back panel is pushed again.) 9 Gigabit network interface 1 10 Gigabit network interface

23 2.2.4 WW1900 Appliance The following is a picture of a Webwasher WW1900 appliance box: Features This appliance box provides the following features: Form factor Rack mount Processors Cache Memory Harddisks 1U Yes 2 x Dual-core Intel Xeon 3.2 GHz with hyper-threading 2x2x2MB 2 GB RAM 2x146GBSAS,RAID1 NIC ports 4 x 10/100/1000 USB interfaces 4 Serial interface 1 Power supplies 2 Redundancy Video support Disk/Power Yes 2 17

24 Accessories Together with the appliance box, the following accessories are shipped: 2 appliance box power cords (color: black) 6-foot crossover cable Pair of 7-foot RJ45-based 10/100 Mbs Ethernet straight through cables (color: blue or gray). Systems Diagnostic CD for defective hardware diagnostics Bezel for the appliance box Rack mount kit Product Information Guide Front Side At its front side, an appliance box provides a number of operating elements accessible to the user. A bezel for the front side of the appliance box is provided, which is, however, not installed on the box after shipping. A description of how to install or remove this bezel is given at the end of the section on the WW500 appliance box, see The following diagram gives an overall view of the front panel of a WW1900 appliance box: 2 18

25 The next diagram shows the left side of this front panel. On this side, you find all the front panel operating elements that are used for the installation and configuration purposes described in this guide: The following table provides a list of these operating elements: 1 Power switch 2 NMI button (for special troubleshooting activities You should only use this button if directed to do so by qualified support personnel.) 3 System identification button (This button can be used to used to locate a particular system within a rack. When the button is pushed, the information display window, as well as the blue status indicator on the back panel, blink until this button or the corresponding button on the back panel is pushed again.) 4 Information display window (for status and error messages The window lights blue during normal operation. Both the system management software and the system identification buttons on the front and rear panels can cause the window to flash blue in order to identify a particular system. The window lights amber when the system needs attention.) 5 USB interface 6 USB interface 7 Video connector 8 CD ROM drive (for inserting system CD ROM) 2 19

26 Rear Side The following diagram gives an overall view of the rear side of the WW1900 appliance box. In this overall view, you can see the position of the power supply connectors (10) and (11) on the right side of the rear panel: The next diagram shows the left side of the rear panel. On this side, you find all the other rear panel operating elements that are used for the installation and configuration purposes described in this guide: The following table provides a list of these operating elements: 1 Serial interface 2 Additional Gigabit network interface 3 Video connector 4 USB interface 5 USB interface 6 Gigabit network interface 1 7 Gigabit network interface 2 8 Additional Gigabit network interface 9 System identification button (This button can be used to used to locate a particular system within a rack. When the button is pushed, the blue system status indicator to the left of this button, as well as the information display window on the front panel, blink until this button or the corresponding button on the front panel is pushed again.) 10 Power supply connector 11 Power supply connector 2 20

27 2.3 Default Settings The following sections provide information about the default settings of a Webwasher appliance Serial Interface You can use the serial interface at the rear side of an appliance box to connect it to a console. The interface is by default set to the following parameters: N1 In more detail, this amounts to: Bit rate Data bits 8 Parity none Stop bit 1 Flow control not enabled After completing the installation procedure, you can login to the appliance via this console as user wwasher root. The initial password consists of the last 8 digits of the MAC address for the first onboard NIC (see label affixed to the box), with letters all written in capitals. It is recommended to change the initial password after using it for the first login. Note: You can also use one of the video connectors at the front or rear side of an appliance box to connect it to a serial or a VGA terminal. You can then login to the appliance with the same user name and password as from a console connected to the serial interface. The terminal used for this connection should be a standard VGA or VT100 compatible device. 2 21

28 2.3.2 Remote Login with ssh A remote login to an appliance using ssh is not permitted unless you configured the corresponding settings with the config.xml configuration file. Note that ssh is running on an appliance by default Other Settings A Webwasher appliance is by default also set to the following values: IP address of NIC Admin account (for login to the Web interface, see 3.1) Admin password (for login to the Web interface, see 3.1) Administration port (for login to the Web interface, see 3.1) System administration account System administration password admin webwasher (https) root Last 8 digits of MAC address for first onboard NIC (see label affixed to the box), with letters all written in capitals 2 22

29 2.4 Providing the Initial Configuration Settings To provide your initial configuration settings, which include host and server names, IP addresses, etc., you need to create a configuration file. A setup utility is provided for this purpose, see and Store this file on a floppy disk and insert it in the floppy disk drive of the appliance box before switching it on. If your appliance box does not provide a floppy disk drive or you do not want to use it, you can use a USB stick instead to implement the settings on the appliance. The appliance will then be configured using these settings. An example of a configuration file is given in one of the upcoming sections, see For more information about the installation procedure, see

30 2.4.1 Using the Setup Utility A setup utility is included on the system CD ROM to assist you in providing your initial configuration settings for the setup of an appliance. To make use of this utility, proceed as follows: Using the Setup Utility Overview Step 1 Insert system CD ROM. 2 Start WWAppSetup.exe. 3 Enter configuration settings. 4 Create config.xml. 5 Store configuration file in root directory of floppy disk. 6 Insert disk before switching appliance on. In more detail, these steps include the following activities: 1. Insert the system CD ROM in a suitable drive of a Windows PC. 2. Start the utility. The name of the utility file is WWAppSetup.exe. 3. Starting the utility opens a window providing a number of input fields, see Enter the configuration settings in these fields. 4. After entering all the data, click on the Write button, which is also provided in this window. The utility then creates a config.xml configuration file. 5. Store this file in the root directory of a floppy disk that has been formatted to provide an MS-DOS-style file system. If your appliance box does not provide a floppy disk drive or you do not want to use it, you can store the file on a USB stick instead. TheremustbeanMS-DOS-stylefilesystemonthisUSBstick. 6. Insert this disk in the floppy disk drive of the appliance box before switching it on or connect the USB stick to implement the configuration settings. 2 24

31 2.4.2 Setup Utility Window The setup utility window looks like this: 2 25

32 The following fields and buttons are provided in this window: Host Name Name of the system that the appliance is to run on. Default: wwapp First LAN Interface (eth0) Area for entering data concerning the first of the two LAN interfaces. Activate on Boot Check this checkbox if you want to have this interface activated after the appliance has booted. The checkbox is checked by default. IP Address IP address for this interface. Default: Network Mask Network mask for this interface. Default: Second LAN Interface (eth1) Area for entering data concerning the second of the two LAN interfaces. Activate on Boot Check this checkbox if you want to have this interface activated after the appliance has booted. The checkbox is not checked by default. IP Address IP address for this interface. Default: Network Mask Network mask for this interface. Default:

33 Gateway IP Address IP address of the gateway where the appliance is to run. First Name Server IP address of the first of two domain name servers called on by the appliance. Second Name Server IP address of the second of two domain name servers called on by the appliance. Permit SSH Login as root Mark this checkbox to allow the use of ssh for logging in as root user. This option is disabled by default. Write After entering the configuration settings in the input fields, click on this button. The setup utility will then create a config.xml configuration file. Cancel Click on this button to leave the setup utility without creating a configuration file Configuration File The name of the configuration file must be config.xml. The configuration medium used for conveying this file must be a floppy disk that has been formatted to provide an MS-DOS-style file system. The configuration file must be contained in the root directory of this disk. The following is an example of a config.xml configuration file: <config> <network> <hostname>ww1000</hostname> <gateway> </gateway> <dns> 2 27

34 <nameserver1> </nameserver1> <nameserver2> </nameserver2> </dns> <interfaces> <if0> <bootproto>none</bootproto> <device>eth0</device> <ipaddr> </ipaddr> <netmask> </netmask> <onboot>yes</onboot> </if0> <if1> <bootproto>none</bootproto> <device>eth1</device> <ipaddr> </ipaddr> <netmask> </netmask> <onboot>no</onboot> </if1> </interfaces> </network> <sysinit> <ssh> <permitrootlogin>off</permitrootlogin> </ssh> </sysinit> </config> 2 28

35 2.5 Installing the Appliance Box When installing the appliance box, you may wish to have your own initial configuration settings implemented rather than the default settings. In this case, make sure you insert a floppy disk containing these settings before switching the appliance box on, see 2.4. If your appliance box does not provide a floppy disk drive or you do not want to use it, store the file on a USB stick instead. Proceed as follows: Installing the Appliance Box Overview Step 1 Connect power supply cable. 2 Connect appliance box to VGA monitor or serial console. 3 Insert disk containing configuration file. 4 Switch appliance box on. In more detail, these steps include the following activities: 1. Connect the power supply cable to the power supply connector on the rear side of the appliance box. 2. If you want to have messages concerning the appliance status displayed: Connect the appliance box to a standard VGA monitor or a serial console. On the appliance box, connect the monitor cable to one of the video connectors on its front or rear side. Note: You need to connect the appliance box to this monitor in order to receive messages when you are performing parts of the installation procedure again, using the system CD ROM, see If you want to have your own initial configuration settings implemented rather than the default settings: Insert a floppy disk containing these settings in the floppy disk drive on the front side of the appliance box. If your appliance box does not provide a floppy disk drive or you do not want to use it, you can use USB stick instead to implement the configuration settings. The configuration settings are then read and implemented. A lock file is created for this purpose. It is stored under /var/lock/cgconfig. 2 29

36 Reading and implementing the settings of the config.xml configuration file is then omitted at every subsequent boot. Unless a config.xml configuration file has been read successfully, an attempt is made to do so at every boot. If you want to enforce reading of the config.xml, delete the lock file. No new installation procedure is required for this. Note: If you do not provide your own initial configuration settings before switching the appliance box on, the appliance will be configured with the default settings, which are usually impracticable in a particular environment. 4. Switch the appliance box on, using the power switch on its front side. After completing these steps, you can go on to access the Web interface provided by the appliance. It enables you to perform further configuration and administration tasks, see 3.1. If you wish to repeat parts of the installation procedure, you can do this using the system CD ROM, see

37 2.6 Setup with the System CD ROM The operating system and the Webwasher application software are provided on a bootable system CD ROM, which is delivered with the appliance box Use of the System CD ROM You can use this medium to repeat parts of the installation procedure that have already been performed by the manufacturer, or perform it for the first time if the manufacture has not done so. When booting from the system CD ROM, the hard disk is partitioned, the operating system together with the application software is installed, and the system configuration is started. This process runs automatically, and there is no need for you to intervene. At a later stage of the process, you will be prompted by messages on the monitor that has been connected to the appliance box, see 2.5. Note that the configuration settings are implemented at the first boot Setup Procedure To install the operating system and the Webwasher application software using the system CD ROM, complete the following steps: Setup with the System CD ROM Overview Step 1 Insert system CD ROM. 2 Select serial or video console. 3 Wait for end of installation message. 4 Remove system CD ROM. 5 Reset appliance. 6 Insert disk containing configuration file. 7 Wait for system information message. 8 Remove disk with configuration file. 2 31

38 In more detail, these steps include the following activities: 1. Insert the system CD ROM in the CD ROM drive (1) on the front side. The system CD ROM begins with the boot process. Messages concerning its progress are displayed on the monitor connected to the appliance box. 2. At one time, you will see a message asking you to select the serial or the video console to continue the boot process: WW1000 Installer. Press RETURN to start. 1 serial console preferred (default) 2 video console preferred boot: Enter 1 or 2 for your preferred console after boot: and press the RETURN key on your keyboard. If you do no enter a value, the default will be taken after a timeout interval has elapsed. The default is serial console preferred. After the boot process is continued, a warning is displayed that the installation process will perform a partitioning of the hard disk for the system that it is running on. You are informed that you have 25 seconds time to remove the system CD ROM, in case you do not want this to happen. A situation where you may want to remove the system CD ROM may arise when you have unintentionally inserted it in the wrong system, or inserted it only for reading document files, but not for performing an installation. 3. Then the hard disk is partitioned, the operating system and the application software are installed, and the system configuration is started. There is no need for you to intervene at this stage of the process. After this process is finished successfully, you are informed about it by a corresponding message. 4. The system CD ROM ejects automatically, and you are asked to remove it. This is followed by a message asking you to reset the appliance. Remove the system CD ROM. 5. If you want to have your own initial configuration settings implemented rather than the default settings: Insert a floppy disk containing these settings in the floppy disk drive on the front side of the appliance box. If your appliance box does not provide a floppy disk drive or you do not want to use it, you can use a USB stick instead to implement the settings on the appliance. 2 32

39 6. Reset the appliance by pressing the reset button on the front side of the appliance box. If there is no reset button on your appliance box model, use the power on/off button to reset the appliance. 7. When performing the reset, the system continues with the configuration process, making use of the config.xml configuration file if there is one available. After the reset, a number of lines providing system information are displayed. This completes the installation and configuration process. 8. If you have inserted a disk in the floppy disk drive, remove it. After you have completed these steps, you can go on to access the Web interface provided by the appliance. It enables you to perform further configuration and administration tasks, see

40 2.7 Root Administration The following sections provide information about some administrative steps for a Webwasher appliance that may be taken by the root user: Changing the root password Remote login Changing the Root Password To change the root password, login as root on the console where you are administering the appliance. Invoke the passwd command and change the password in the usual manner Remote Login A remote login as root is not permitted unless you configured the corresponding settings in the config.xml configuration file. To configure a non-root user who is permitted to perform a remote login, enter the following from a root shell: root$: useradd m <user name> root$: passwd <user name> 2 34

41 Chapter 3 Further Configuration and Updates After the installation, the initial configuration has already been performed for an appliance. To perform further configuration and administration tasks, a Web interface (GUI) is provided, which can be accessed using a browser. The following sections deal with modifying the configuration settings of an appliance, see 3.2, and with updating the appliance software, see 3.3. More configuration tasks are described in the documentation on individual Webwasher products, e. g. in the URL Filter Guide, the Anti-Virus Guide, the Anti-Spam Guide, etc. Before the configuration and update activities are described, the next section tells you how to access the Web interface provided by the appliance, see

42 Further Configuration and Updates 3.1 Accessing the Web Interface After the installation and initial configuration are completed, you should be able to connect to the Web interface provided by the appliance from any browser that has access to the appliance s network segment. Proceed as follows: Accessing the Web Interface Overview Step 1 Point browser to IP address. 2 Login as admin. 3 Upload license key. In more detail, these steps include the following activities: 1. Point your browser to: <ip address>: where <ip address> is the address you selected when using the setup utility to provide your initial configuration settings, see 2.4, or if you started the appliance using the default settings. 2. Login as admin, the default password being webwasher. 3. This will open the Home page of the Web interface. On this page, first upload the license key file, which you should have received by . Please contact the Secure Computing customer service if you did not receive this license key file. Some expert settings, such as customization of the user error templates, require access to the file system of the appliance. You can connect to this system by using an ssh client to connect to the IP address of the appliance. To login as root, use the password that is built from the last eight digits of the MAC address for the first onboard NIC, see the label affixed to the appliance box. Note that the letters in this password must all be written in capitals. 3 2

43 Further Configuration and Updates 3.2 Configuring the Appliance Using the Web interface, you can perform several configuration tasks, which may be required after providing the initial configuration settings of an appliance, see 2.4. A configuration wizard is provided to assist you in doing this. To invoke this wizard, go to the Appliance tab under Configuration > Wizards: On this tab, you can configure appliance settings, such as the host name and IP address of the system the appliance is running on, the time protocol and the LAN interfaces. Note that after modifying these settings, you need to reboot the appliance to make the modification effective. 3 3

44 Further Configuration and Updates For this purpose, a reboot button is provided on this tab. Furthermore a shutdown button is provided for shutting down the appliance. The sections of this tab are described in the following. General The General section looks like this: It allows you to configure some basic network settings for an appliance. After modifying these settings, you need to reboot the appliance to make the modification effective. For this purpose, use the Reboot button in the Reboot/Shutdown section of this tab. NTP The NTP section looks like this: It allows you to configure one or two NTP server or pools of these servers to use the Network Time Protocol for an appliance. Using this protocol, you can synchronize the local appliance clock to that of one or more remote NTP servers. To specify a server or server pool, enter the corresponding IP address or the fully qualified domain name in the input fields provided here. After specifying these settings, you need to reboot the appliance to make the settings effective. 3 4

45 Further Configuration and Updates For this purpose, use the Reboot button in the Reboot/Shutdown section of this tab. First LAN Interface (eth0) The First LAN Interface (eth0) section looks like this: It allows you to configure the first of two LAN interfaces for an appliance. Enter the corresponding IP address and network mask in the input fields provided here. You may also specify a media option. You should, however, do this only if you are sure that it will have no unforeseen impact on your configuration. The following media types are available: 100baseT4 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD After modifying these settings, you need to reboot the appliance to make the modification effective. For this purpose, use the Reboot button in the Reboot/Shutdown section of this tab. 3 5

46 Further Configuration and Updates Second LAN Interface (eth0) The Second LAN Interface (eth1) section looks like this: It allows you to configure the second of two LAN interfaces for an appliance. Enter the corresponding IP address and network mask in the input fields provided here. You may also specify a media option, which can be one of the following: 100baseT4 100baseTx-FD 100baseTx-HD 10baseT-FD 10baseT-HD After modifying these settings, you need to reboot the appliance to make the modification effective. For this purpose, use the Reboot button in the Reboot/Shutdown section of this tab. Reboot/Shutdown The Reboot/Shutdown section looks like this: It allows you to reboot or shutdown an appliance. After clicking on the Reboot button, the appliance will go into the munixmode to apply the settings to the system and to reinitialize the RSBAC settings. Clicking on the Shutdown button will shutdown the appliance. 3 6

47 Further Configuration and Updates If an appliance is running in a cluster of Webwasher appliances, you can perform a reboot or shutdown for all cluster members. To do this, mark the Send to cluster checkbox before clicking on a button. 3.3 Update Management The Web interface also allows you to perform several update management tasks Update Server Webwasher provides an update server with a directory structure enabling an appliance to scan for available updates. To connect to this server, the following path may be used: Searching for New Versions Before you can actually perform a software update, you need to search for new versions of the appliance software. 3 7

48 Further Configuration and Updates To do this, go to the Appliance tab under Configuration > Update Manager: On this tab, there is a section labeled Check for Updates: To contact the update server and view the new software versions that are currently available, click on the Contact button: If no new versions are available, it means that no update is needed for the appliance. In other words, the appliance is up to date. A corresponding message is then displayed in the Status section on the upper part of the tab: 3 8

49 Further Configuration and Updates If the search results in finding new versions, these will be shown in the Update Search Results section, which is then displayed on the tab: The results are listed in two different fields: Appliance Change Log Webwasher Release Notes The second field is only displayed if a new version of the Webwasher application software was found. Both fields are described in the following. 3 9

50 Further Configuration and Updates Appliance Change Log This field lists the search results for new versions of software packages that are part of the appliance software, e. g. openssl. Furthermore it lists new versions of the Webwasher application software. For each new version of a software package, the features and fixes are listed that are new in this package compared to the version of the package currently installed on the appliance. New features and fixes of a Webwasher version are shown in the field below. Webwasher Release Notes This field displayes the new features and fixes in a new version of the Webwasher application software Installing New Versions If the search for new software versions shows that there are actually such versions, you can download and install them. For this purpose, the Update Appliance section is then displayed on the tab, providing a button labeled Download and Install: To download and install the new versions, click on this button. If the appliance is running in a cluster Webwasher appliance, you can install the new versions on all cluster members. To do this, mark the checkbox labeled Send to cluster before clicking on the button. The new versions will be installed on all members of the cluster. If a new version of a software package already exists on a cluster member, however, no update will be performed for this package. 3 10

51 Further Configuration and Updates After clicking on the button, the Downloading New Version section is displayed on the tab: It informs you about the status of the download process. After this process is completed, the appliance reboots itself. With this reboot, the new software versions are installed on the appliance. Any update activities that were performed in this way are logged and displayed in the Update Log section of the tab: 3 11

52

53 Glossary appliance A device that performs a well-defined function and is simple to install and operate, e. g. a Webwasher appliance. authentication The process of verifying the identity of a user who is logging into a computer system. For administering and operating a Webwasher appliance, a Web interface is provided where authentication is performed in a login dialog. configuration file A file containing data required for the setup of a computer system. For a Webwasher appliance, you can create a configuration file to adapt the appliance to an individual environment. A setup utility is provided for this purpose. content security The function performed by a content security product, e. g a Webwasher WW appliance, to give protection against threats and annoyances arising from the Internet and prevent leakage of confidential matter in outgoing traffic. Protection is achieved by this appliance through a comprehensive application layer content filtering solution, implemented at the corporate gateway. GL 1

54 Installation and Configuration Guide This solution provides Web, , instant messaging, and spam filtering, as well as virus protection, and a centralized policy and reporting management. Domain Name Server (DNS) An Internet service that locates and translates domain names into Internet Protocol (IP) addresses. In the configuration file for a Webwasher appliance, two domain name servers can be specified. IP address The unique numerical Internet Protocol (IP) address of a computer system that is attached to a TCP/IP network, e. g., update management A function provided for handling the implementation of new software versions on your system. The update management functions provided by a Webwasher appliance are integrated in the Web interface used for accessing it. They enable you to contact the Webwasher update server for downloads of the newest available software updates. The search for these updates can be performed in an automated manner or according to specific input you enter to control the search. Web interface A collection of Web pages provided for accessing a computer system via a Web browser. The Webwasher appliances provide a comprehensive, user-friendly Web interface. It enables you to perform administration and configuration tasks on a more general level, as well as to configure individual filtering functions. GL 2