Trustwave 300, 500, 700 Installation Manual

Download

Web Filter Appliance Installation Guide

Models: 300, 500, 700

Version 5.1.00

Publication Date: 29 April 2013

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

Legal Notice

All rights reserved. This document is protected by copyright and any distribution, reproduction, copying, or decompilation is strictly prohibited without the prior written consent of Trustwave. No part of this document may be reproduced in any form or by any means without the prior written authorization of Trustwave. While every precaution has been taken in the preparation of this document, Trustwave assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice.

While the authors have used their best efforts in preparing this document, they make no representation or warranties with respect to the accuracy or completeness of the contents of this document and specifically disclaim any implied warranties of merchantability or fitness for a particular purpose. No warranty may be created or extended by sales representatives or written sales materials. The advice and strategies contained herein may not be suitable for your situation. You should consult with a professional where appropriate. Neither the author nor Trustwave shall be liable for any loss of profit or any commercial damages, including but not limited to direct, indirect, special, incidental, consequential, or other damages.

The most current version of this document may be obtained from:

www.trustwave.com/support/

Trademarks

Trustwave and the Trustwave logo are trademarks of Trustwave. Such trademarks shall not be used, copied, or disseminated in any manner without the prior written permission of Trustwave.

Part# WF-AIG-130429

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

Formatting Conventions

This manual uses the following formatting conventions to denote specific information.

Format and Symbols

Blue Underline

Bold Bold text denotes UI control and names such as commands, menu items, tab and field

Code

Italics Italics are used to denote the name of a published work, the current document, or another

[Square brackets] In code examples, square brackets indicate optional sections or entries.

Meaning

A blue underline indicates a Web site or email address.

names, button and check box names, window and dialog box names, and areas of windows or dialog boxes.

Text in this format indicates computer code or information at a command line.

document; for text emphasis; or to introduce a new term. In code examples italics indicate a placeholder for values and expressions.

Note: This symbol indicates information that applies to the task at hand.

Tip: This symbol denotes a suggestion for a better or more productive way to use the

product.

Caution: This symbol highlights a warning against using the product in an unintended manner.

Warning: This symbol alerts you that a situation has the potential to cause bodily harm or death, or significant damage to property or equipment.

More documentation: This symbol highlights a reference to additional information in the Web Filter Administrator Guide.

Formatting Conventions

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

Legal Notice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ii

Formatting Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii

List of Figures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

1 Web Filter Appliance Introduction 13

1.1 About this Document . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2 Service Information 15

2.1 Trustwave Technical Support Call Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

3 Preliminary Setup Procedures 17

3.1 Unpack the Unit from the Carton . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

3.2 Select a Site for the Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

3.2.1 300 Series Server Setup Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

3.2.1.1 Set Top Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

3.2.1.2 Optional 1U 2-Unit Tray Kit Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

3.3 Rack Mount the Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3.3.1 Rack Setup Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3.3.2 Rack Mount Instructions for 500 Series Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3.3.2.1 Rack Setup Suggestions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3.3.2.2 Install the Inner Slides . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3.3.2.3 Install the Outer Slides . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

3.3.2.4 Install the Slide Assemblies to the Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

3.3.2.5 Install the Chassis into the Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

3.3.3 Rack Mount Instructions for 700 Series Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.3.3.1 Rack Setup Suggestions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.3.3.2 Identify the Sections of the Rack Rails . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.3.3.3 Install the Inner Rails . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.3.3.4 Install the Outer Rails . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

3.3.3.5 Install the Server into the Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

3.3.3.6 Install the Server into a Telco Rack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

3.3.4 Install the Bezel on the 500 and 700 Series Chassis . . . . . . . . . . . . . . . . . . . . . . . . 27

3.4 Check the Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

3.4.1 Power Supply Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

3.5 General Safety Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

3.5.1 Server Operation and Maintenance Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

3.5.2 AC Power Cord and Cable Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3.5.3 Electrical Safety Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

3.5.4 Motherboard Battery Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

4 Install the Server 33

4.1 Setup Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33

4.1.1 Quick Start Setup Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

4.1.2 LCD Panel Setup Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

4.2 Quick Start Setup Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

4.2.1 Link the Workstation to the Web Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

4.2.1.1 Monitor and Keyboard Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

4.2.1.2 Serial Console Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

4.2.2 Power on the Web Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

4.2.2.1 Power up a 300 Series Model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

4.2.2.2 Power up a 500 or 700 Series Model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

4.2.3 Serial Connection Setup Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

4.2.4 Login screen . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

4.2.5 Quick Start menu screen . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

4.2.6 Quick Start menu: administration menu. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

4.2.6.1 Change filtering mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

4.2.6.2 Configure network interface LAN1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

4.2.6.3 Configure network interface LAN2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

4.2.6.4 Configure bridge network interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

4.2.6.5 Configure default gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

4.2.6.6 Configure DNS servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

4.2.6.7 Configure host name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

4.2.6.8 Time Zone regional setting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

4.2.6.9 Additional Administrative Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

4.2.7 System Status screen. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

4.2.8 Log Off, Disconnect the Peripherals. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

4.3 LCD Panel Setup Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

4.3.1 LCD Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

4.3.1.1 LCD panel keypad . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

4.3.1.2 LCD Menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

4.3.2 Trustwave menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

4.3.2.1 WF Filter Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

4.3.2.2 IP / LAN1 and 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

4.3.2.3 IP / Bridge. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

4.3.2.4 Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

4.3.2.5 DNS 1 and 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

4.3.2.6 Host Name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

4.3.2.7 Regional Setting (Time Zone, date, time) . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

4.3.2.8 Additional Administrative Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

4.3.3 LCD Options menu . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

4.3.3.1 Heartbeat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

4.3.3.2 Backlight . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

4.3.3.3 LCD Controls . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

4.4 Physically Connect the Unit to the Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

4.4.1 Invisible, Firewall, or Router mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

4.4.2 Bridge mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

4.4.2.1 Bridge mode with bypass card installed . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

4.4.2.2 Bridge mode without bypass card installed . . . . . . . . . . . . . . . . . . . . . . . . . . 50

4.5 Access the Web Filter Online . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

4.5.1 Access the Web Filter via its LAN 1 or Bridge IP Address . . . . . . . . . . . . . . . . . . . . . 51

4.6 Log in, Generate SSL Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

4.6.1 Log in to the Web Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

4.6.2 Generate SSL Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

4.6.3 IE Security Certificate Installation Procedures. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

4.6.3.1 Accept the Security Certificate in IE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54

4.6.3.2 Map the Web Filter’s IP Address to the Server’s Host Name . . . . . . . . . . . . . . 59

4.7 Test Filtering or the Mobile Security Client Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

4.7.1 Test Filtering on the Web Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

4.7.2 Test the Mobile Security Client Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

4.8 Set Library Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62

4.8.1 Activate and Register the Web Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62

4.8.2 Perform a Complete Library Update. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

4.8.3 Monitor the Library Update Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64

4.9 Next Steps. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

5 Best Filtering Practices 67

5.1 Threat Class Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68

5.1.1 Threats/Liabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

5.1.1.1 Category block. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

5.1.1.2 Rule block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

5.1.1.3 X-Strike on blocked categories. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

5.1.1.4 Custom Lock, Block, Warn, X Strikes, Quota pages . . . . . . . . . . . . . . . . . . . . 70

5.1.1.5 URL Keywords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70

5.1.1.6 Search Engine Keywords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

5.1.1.7 Custom Category (blocked) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

5.1.1.8 Minimum Filtering Level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

5.1.1.9 Override Account bypass. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

5.1.1.10 Exception URL bypass . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

5.1.1.11 Proxy Patterns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

5.1.1.12 File type blocking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

5.1.2 Bandwidth/Productivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

5.1.2.1 Time Quota/Hit Quota . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

5.1.2.2 Overall Quota . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

5.1.2.3 Time Based Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

5.1.2.4 Warn option with low filter settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.2.5 Warn-strike . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

5.1.2.6 P2P patterns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

5.1.2.7 IM patterns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

5.1.2.8 Game patterns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

5.1.2.9 Streaming Media patterns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

5.1.2.10 Remote Access patterns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

5.1.2.11 HTTPS settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

5.1.2.12 Category block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

5.1.2.13 Rule block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

5.1.2.14 SE Keywords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

5.1.2.15 URL Keywords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

5.1.2.16 Custom Block/Warn/X Strikes/Quota pages . . . . . . . . . . . . . . . . . . . . . . . . . 79

5.1.2.17 Real Time Probe information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

5.1.3 General/Productivity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

5.1.3.1 Warn Feature with higher thresholds . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

5.1.3.2 Warn-strike with higher thresholds. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

5.1.3.3 Time Quota/Hit Quota . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

5.1.3.4 Time Based Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

5.1.3.5 Overall Quota . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82

5.1.3.6 Customize a Trustwave Supplied Category . . . . . . . . . . . . . . . . . . . . . . . . . . 82

5.1.3.7 Local category adds/deletes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

5.1.3.8 Custom Block/Warn/X Strikes/Quota pages. . . . . . . . . . . . . . . . . . . . . . . . . . 83

5.1.4 Pass/Allow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

5.1.4.1 Always Allow Custom Category . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

5.1.4.2 URL exceptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84

5.1.4.3 IP exceptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

5.1.4.4 Override Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

5.1.4.5 Pattern detection bypass. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

6 LED Indicators and Buttons 87

6.1 Front Control Panels on 500 and 700 Series Units . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87

6.2 Rear Panel on the 700 Series Unit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

6.3 Front Control Panel on a 300 Series Unit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

7 Regulatory Specifications and Disclaimers 89

7.1 Declaration of the Manufacturer or Importer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

7.1.1 Safety Compliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

7.1.2 Electromagnetic Compatibility (EMC) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

7.1.3 Federal Communications Commission (FCC) Class A Notice (USA). . . . . . . . . . . . . . . 89

7.1.4 FCC Declaration of Conformity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

7.1.5 Electromagnetic Compatibility Class A Notice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

7.1.5.1 Industry Canada Equipment Standard for Digital Equipment (ICES-003) . . . . . 89

7.1.6 EC Declaration of Conformity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90

7.1.6.1 European Community Directives Requirement (CE) . . . . . . . . . . . . . . . . . . . . 90

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

Appendices 91

Appendix A: HyperTerminal setup procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

Appendix B: Accepting Security Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94

B.1 Accept the Security Certificate in Firefox. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94

B.2 Temporarily Accept the Security Certificate in IE . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

B.3 Accept the Security Certificate in Safari . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

B.4 Accept the Security Certificate in Chrome . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98

Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

List of Figures

Figure 1: Rear of 300 series chassis with serial port identified . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Figure 2: Portion of 500 series chassis rear with serial port identified. . . . . . . . . . . . . . . . . . . . . . . 34

Figure 3: Portion of 700 series chassis rear with serial port identified. . . . . . . . . . . . . . . . . . . . . . . 34

Figure 4: Rear of 300 series chassis with LAN ports identified . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

Figure 5: Portion of 500 series chassis rear with LAN ports identified . . . . . . . . . . . . . . . . . . . . . . . 49

Figure 6: Portion of 700 series chassis rear with LAN ports identified . . . . . . . . . . . . . . . . . . . . . . . 49

Figure 7: Typical rear view of 500 or 700 series appliance with bypass LAN ports identified.. . . . . . . 50

List of Figures

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

1 Web Filter Appliance Introduction

Thank you for choosing to install and evaluate the Trustwave Web Filter appliance. Trustwave’s Web Filter tracks each user’s online activity, and can be configured to block specific Web sites, service ports, and pattern and file types, and lock out an end user from Internet access, thereby protecting your organization against lost productivity, network bandwidth issues, and possible legal problems that can result from the misuse of Internet resources.

The Web Filter provides an extensive library filtering category database, user authentication, implementation of time and quota filtering profiles, and tools for tailoring a user’s filtering profile to comply with your organization’s Internet usage policy, based on the end user’s Internet usage habits.

Quick setup procedures—to implement the best filtering practices—are included in the Best Filtering Practices section (Section 5) of this

1.1 About this Document

This document is divided into the following sections:

• Introduction: This section includes an overview of the Web Filter product and how to use this

document

Guide.

• Service Information: This section provides Trustwave contact information

• Preliminary Setup Procedures: This section includes instructions on how to physically set up the

Web Filter appliance in your environment

• Install the Server: This section explains how to configure the Web Filter for filtering

• Best Filtering Practices: This section is comprised of suggested best practices for implementing and

using the Web Filter.

• LED Indicators and Buttons: This section explains how to read LED indicators and use LED buttons

for troubleshooting the unit

• Regulatory Specifications and Disclaimers: This section cites safety and emissions compliance

information for the Web Filter appliance models referenced therein

• Index: This section provides an alphabetized list of some topics included in this document

Web Filter Appliance Introduction

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2 Service Information

The user should not attempt any maintenance or service on the unit beyond the procedures outlined in this document.

Any initial hardware setup problem that cannot be resolved at your internal organization should be referred to a Trustwave solutions engineer or technical support representative.

For technical assistance or warranty repair, please visit http://www.trustwave.com/support/

2.1 Trustwave Technical Support Call Procedures

When calling Trustwave regarding a problem, please provide the representative the following information:

• Your contact information.

• Serial number or original order number.

• Description of the problem.

• Network environment in which the unit is used.

• State of the unit before the problem occurred.

• Frequency and repeatability of the problem.

• Can the product continue to operate with this problem?

• Can you identify anything that may have caused the problem?

Service Information

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3 Preliminary Setup Procedures

3.1 Unpack the Unit from the Carton

Inspect the packaging container for evidence of mishandling during transit. If the packaging container is damaged, photograph it for reference.

Carefully unpack the unit from the carton and verify that all accessories are included. Save all packing materials in the event that the unit needs to be returned to Trustwave.

The carton should contain the following items:

• 1 Web Filter appliance (WF)

• 1 serial port cable

•For 500 and 700 series models, the following items are also included in the carton:

• 1 AC power cord for 500 series models, 2 AC power cords for 700 series models

• 1 bezel to be installed on the front of the chassis

• 1 set of rack mounting rails

•For 300 series models, the following items are also included in the carton:

• 1 power adapter with power cord

• 1 set of 4 pressure sensitive feet to be affixed to the bottom corners of a non-rack mounted unit

• If you have purchased the optional 1U two-unit tray for mounting the half-U server(s) in a rack, this item will be shipped in a separate carton.

Inspect the server and accessories for damage. If the contents appear damaged, file a damage claim with the carrier immediately.

For troubleshooting tips to assist you during the installation process, visit

http://www.trustwave.com/software/8e6/ts/wf.html

For hardware specifications of this model, see:

http://www.trustwave.com/software/8e6/hd/m86-wf-hd-specs.htm

Warning: To avoid danger of suffocation, do not leave plastic bags used for packaging the server or any of its components in places where children or infants may play with them.

Tip: Consult the Web Filter Administrator Guide for information about RAID and hardware maintenance. This and other Guides for the Web Filter product can be obtained from

http://www.trustwave.com/support/wf/documentation.asp

Preliminary Setup Procedures

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3.2 Select a Site for the Server

The server operates reliably within normal office environmental limits. Select a site that meets the following criteria:

• Clean and relatively free of excess dust.

• Well-ventilated and away from sources of heat, with the ventilating openings on the server kept free of obstructions.

• Away from sources of vibration or physical shock.

• Isolated from strong electromagnetic fields and noise caused by electrical devices such as elevators, copy machines, air conditioners, large fans, large electric motors, radio and TV transmitters, and highfrequency security devices.

• Access space provided so the server power cord can be unplugged from the power supply or the wall outlet—this is the only way to remove the AC power cord from the server.

• Clearance provided for cooling and airflow: Approximately 30 inches (76.2 cm) in the back and 25 inches (63.5 cm) in the front.

• Located near a properly earthed, grounded, power outlet.

3.2.1 300 Series Server Setup Procedures

3.2.1.1 Set Top Applications

If you have a 300 series server you do not wish to rack mount, apply the pressure sensitive feet (that came with the server) to the bottom corners of the unit, and then place the unit in a location that meets server site selection criteria.

3.2.1.2 Optional 1U 2-Unit Tray Kit Applications

If you have purchased the optional 1U 2-unit tray kit for rack mounting one or two 300 series servers, proceed to the instructional “300 Series Appliance Tray Installation” document packaged within the 1U 2unit tray kit’s shipping carton.

When you have finished installing the 300 series server(s) in your server rack, continue to the Install the Server section of this Installation Guide.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3.3 Rack Mount the Server

3.3.1 Rack Setup Precautions

Warning: Before rack mounting the server, the physical environment should be set up to safely accommodate the server. Be sure that:

• The weight of all units in the rack is evenly distributed. Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading.

• The rack will not tip over when the server is mounted, even when the unit is fully extended from the rack.

• For a single rack installation, stabilizers are attached to the rack.

• For multiple rack installations, racks are coupled together.

• Reliable earthing of rack-mounted equipment is maintained at all times. Particular attention should be given to supply connections other than direct connections to the branch circuit (e.g. use of power strips).

• A power cord will be long enough to fit into the server when properly mounted in the rack and will be able to supply power to the unit.

• The connection of the server to the power supply will not overload any circuits. Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the circuits might have on overcurrent protection and supply wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this concern.

• The server is only connected to a properly rated supply circuit. Reliable earthing (grounding) of rackmounted equipment should be maintained.

• The air flow through the server’s fan or vents is not restricted. Installation of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is not compromised.

• The maximum operating ambient temperature does not exceed 104°F (40°C). If installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Therefore, consideration should be given to installing the equipment in an environment compatible with the maximum ambient temperature (Tma) specified by the manufacturer.

Warning: Extend only one component at a time. Extending two or more components simultaneously may cause the rack to become unstable.

3.3.2 Rack Mount Instructions for 500 Series Servers

3.3.2.1 Rack Setup Suggestions

• Determine the placement of each component in the rack before you install the rails.

• Install the heaviest server components on the bottom of the rack first, and then work up.

3.3.2.2 Install the Inner Slides

1. Locate the right inner slide, (the slide that will be used on the right side of chassis when facing the front panel of the chassis).

2. Align the four (4) square holes on the right inner slide against the hooks on the right side of the chassis as show below on the left.

Preliminary Setup Procedures

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3. Securely attach the slide to the chassis with two M4 flat head screws.

4. Repeat steps 1-3 to install the left inner slide to the left side of the chassis.

3.3.2.3 Install the Outer Slides

1. Measure the distance from the front rail of the rack to the rear rail of the rack.

2. Attach a short bracket to the rear side of the right outer slide, and a long bracket to the front side of the right outer slide as shown above on the right.

3. Adjust the short and long brackets to the proper distance so that the chassis can snugly fit into the rack.

4. Secure the slides to the cabinet with screws.

5. Repeat steps 1-4 for the left outer slide.

3.3.2.4 Install the Slide Assemblies to the Rack

1. After you have installed the short and long brackets to the outer slides, you are ready to install the whole slide assemblies (outer slides with short and long brackets attached) to the rack. (See the previous page.)

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2. Use M5 screws and washers to secure the slide assemblies into the rack as shown below:

Preliminary Setup Procedures

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3.3.2.5 Install the Chassis into the Rack

1. Push the inner slides, which are attached to the chassis, into the grooves of the outer slide assemblies that are installed in the rack as shown below:

2. Push the chassis all the way to the back of the outer slide assemblies as shown below:

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3.3.3 Rack Mount Instructions for 700 Series Servers

3.3.3.1 Rack Setup Suggestions

• Determine the placement of each component in the rack before you install the rails.

• Install the heaviest server components on the bottom of the rack first, and then work up.

3.3.3.2 Identify the Sections of the Rack Rails

The chassis package includes two rack rail assemblies in the rack mounting kit. Each assembly consists of two sections: an inner fixed chassis rail that secures directly to the server chassis and an outer fixed rack rail that secures directly to the rack itself.

The 700 series chassis includes a set of inner rails in two sections: inner rails and inner rail extensions. The inner rails are pre-attached and do not interfere with normal use of the chassis if you decide not to use a server rack. Attach the inner rail extension to stabilize the chassis within the rack.

3.3.3.3 Install the Inner Rails

1. Place the inner rack extensions on the side of the chassis aligning the hooks of the chassis with the rail extension holes. Make sure the extension faces “outward” just like the pre-attached inner rail.

2. Slide the extension toward the front of the chassis.

Preliminary Setup Procedures

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3. Secure the chassis with 2 screws as illustrated.

4. Repeat steps 1-3 for the other inner rail extension.

3.3.3.4 Install the Outer Rails

1. Attach the short bracket to the outside of the long bracket. You must align the pins with the slides. Also, both bracket ends must face the same direction.

2. Adjust both the short and long brackets to the proper distance so that the rail fits snugly into the rack.

3. Secure the long bracket to the front side of the outer rail with two M5 screws and the short bracket to the rear side of the outer rail with three M5 screws.

4. Repeat steps 1-4 for the left outer rail.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3.3.3.5 Install the Server into the Rack

1. Confirm that chassis includes the inner rails (A) and rail extensions (B). Also, confirm that the outer rails (C) are installed on the rack.

2. Line chassis rails (A and B) with the front of the rack rails (C).

3. Slide the chassis rails into the rack rails, keeping the pressure even on both sides (you may have to depress the locking tabs when inserting). When the server has been pushed completely into the rack, you should hear the locking tabs “click”.

4. (Optional) Insert and tighten the thumbscrews that hold the front of the server to the rack.

Preliminary Setup Procedures

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3.3.3.6 Install the Server into a Telco Rack

If you are installing the server into a Telco type rack, follow the directions given on the previous pages for rack installation. The only difference in the installation procedure will be the positioning of the rack brackets to the rack. They should be spaced apart just enough to accommodate the width of the Telco rack.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3.3.4 Install the Bezel on the 500 and 700 Series Chassis

After rack mounting a 500 or 700 series server, the bezel should be installed on the front end of the

chassis.

1. Hold the bezel upright and facing towards you.

Note: This portion of the installation process requires you to unpack the bezel. The bezel has been packaged separately from the unit to prevent damage during shipping.

Preliminary Setup Procedures

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

holes

U-shaped handles

2. Note the short pair of end pins on the left side, and the longer pair of fixed pins on the inside top towards the middle.

3. Note the end pin holes on the inside of the U-shaped, aluminum rail handles on both ends of the chassis rails. Note also that the holes for the longer pair of pins are located on the front of the chassis above the third hard drive bay.

4. Insert the end pins into the holes of the left U-shaped handle.

5. Align the bezel with the front of the chassis, and then gently push the bezel towards the front of the chassis, inserting the pins on the inside of the bezel into the holes on the front of the chassis.

6. Press in the release knob on the right side of the bezel to retract the end pins on that side, and then release the knob to let the end pins extend into the holes of the right U-shaped handle.

3.4 Check the Power Supply

The server is equipped with a universal power supply that handles 100-240 V, 50/60 Hz. A standard power cord interface (IEC 950) facilitates power plugs that are suitable for most European, North American, and Pacific Rim countries.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3.4.1 Power Supply Precautions

Warning:

• Use a regulating uninterruptible power supply (UPS) to protect the server from power surges, voltage spikes and to keep the server operating in case of a power failure.

• In geographic regions that are susceptible to electrical storms, Trustwave highly recommends plugging the AC power cord for the server into a surge suppressor.

• Use appropriately rated extension cords or power strips only.

Allow power supply units to cool before touching them.T

•

3.5 General Safety Information

3.5.1 Server Operation and Maintenance Precautions

Caution:

Observe the following safety precautions during server operation and maintenance.

Caution: If the server is used in a manner not specified by the manufacturer, the protection provided by the server may be impaired.

Caution: Trustwave is not responsible for regulatory compliance of any server that has been modified. Altering the server’s enclosure in any way other than the installation operations specified in this document may invalidate the server’s safety certifications.

Warning: Never pile books, papers, or other objects on the chassis, drop it, or subject it to pressure in any other way. The internal circuits can be damaged, and the battery may be crushed or punctured. Besides irreparable damage to the unit, the result could be dangerous heat and even fire

Warning: There are no user-serviceable components inside the chassis. The chassis should only be opened by qualified service personnel. Never disassemble, tamper with, or attempt to repair the server. Doing so may cause smoke, fire, electrical shock, serious physical injury, or death

Warning: In 700 series servers, multiple sources of supply exist. Be sure to disconnect all sources before servicing

• Do not insert objects through openings in the chassis. Doing so could result in a short circuit that might cause a fire or an electrical shock.

• Do not operate the server in an explosive atmosphere, in the presence of flammable gases.

Preliminary Setup Procedures

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

• To ensure proper cooling, always operate the server with its covers in place. Do not block any openings on the chassis. Do not place the server near a heater.

• Always exit the software application properly before turning off the server to ensure data integrity.

• Do not expose the server to rain or use near water. If liquids of any kind should leak into the chassis, power down the server, unplug it, and contact Trustwave technical support.

• Disconnect power from the server before cleaning the unit. Do not use liquid or aerosol cleaners.

3.5.2 AC Power Cord and Cable Precautions

Warning:

• The AC power cord for the server must be plugged into a grounded, power outlet.

• Do not modify or use a supplied AC power cord if it is not the exact type required in the region where the server will be installed and used. Replace the cord with the correct type.

• Route the AC power cord and cables away from moving parts and foot traffic.

• Do not allow anything to rest on the AC power cord and cables.

• Never use the server if the AC power cord has been damaged.

• Always unplug the AC power cord before removing the unit for servicing

3.5.3 Electrical Safety Precautions

Warning:

from damage.

Warning: Dangerous voltages associated with the 100-240 V AC power supply are present inside the unit. To avoid injury or electrical shock, do not touch exposed connections or components while the power is on.

• To prevent damage to the server, read the information in this document for selection of the proper input voltage.

• Do not wear rings or wristwatches when troubleshooting electrical circuits.

• To avoid fire hazard, use only the specified fuse(s) with the correct type number, voltage, and current ratings. Only qualified service personnel should replace fuses.

• Qualified service personnel should be properly grounded when servicing the unit.

• Qualified service personnel should perform a safety check after any service is performed.

Heed the following safety precautions to protect yourself from harm and the server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3.5.4 Motherboard Battery Precautions

Warning: The battery on the motherboard should not be replaced without following instructions provided by the manufacturer. Only qualified service personnel should replace batteries.

The battery contains energy and, as with all batteries, a malfunction can cause heat, smoke, or fire, release toxic materials, or cause burns. Do not disassemble, puncture, drop, crush, bend, deform, submerge or modify the battery. Do not incinerate or expose to heat above 140°F (60°C).

There is a danger of explosion if the battery on the motherboard is installed upside down, which will reverse its polarities.

CAUTION: DANGER OF EXPLOSION IF BATTERY IS INCORRECTLY REPLACED. REPLACE ONLY WITH THE SAME OR EQUIVALENT TYPE RECOMMENDED BY THE MANUFACTURER. DISPOSE OF THE USED BATTERIES ACCORDING TO THE MANUFACTURER’S INSTRUCTIONS.

ATTENTION: IL Y A DANGER D’EXPLOSION S’IL Y A REPLACEMENT INCORRECT DE LA BATTERIE, REMPLACER UNIQUEMENT AVEC UNE BATTERIE DU MÊME TYPE OU D’UN TYPE ÉQUIVALENT RECOMMANDÉ PAR LE CONSTRUCTEUR. METTRE AU REBUT LES BATTERIES USAGÉES CONFORMÊMENT AUX INSTRUCTIONS DU FABRICANT.

Caution: Users in Member States should consult Article 20 of Directive 2006/66/EC of the European

Parliament and of the Council before disposing the motherboard battery.

Preliminary Setup Procedures

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

4 Install the Server

4.1 Setup Procedures

This section guides you through the process of entering parameters required for the Web Filter to function on the network. You have the option of using the text-based Quick Start setup procedures described in Section 4.2, or the LCD panel setup procedures described in Section 4.3.

Tip: Quick Start with a PC monitor and keyboard provides the best experience with minimum requirements.

4.1.1 Quick Start Setup Requirements

The following hardware is required for the Quick Start setup procedures:

• Web Filter with AC power cord(s)

• either one of two options:

a. PC monitor with AC power cord and keyboard, or

b. PC laptop computer with terminal emulator software such as HyperTerminal or PuTTY, a serial port

crossover cable (null modem cable), and also a USB DB9 serial adapter if there is no serial port on your laptop

Go to Section 4.2 to execute Quick Start Setup Procedures.

Note:

• For 300 series models, the power adapter supplied with the power cord must also be used

• Windows XP includes HyperTerminal. If using a more recent version of Windows, please be sure HyperTerminal or an equivalent terminal emulator program is installed on your machine.

4.1.2 LCD Panel Setup Requirements

The following hardware is required for LCD panel setup procedures:

• Web Filter with AC power cord(s)

Go to Section 4.3 to execute LCD Panel Setup Procedures.

Note: For 300 series models, the power adapter supplied with the power cord must also be used

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

4.2 Quick Start Setup Procedures

4.2.1 Link the Workstation to the Web Filter

4.2.1.1 Monitor and Keyboard Setup

1. Connect the PC monitor and keyboard cables to the rear of the Web Filter chassis.

2. Turn on the PC monitor.

3. Proceed to the next set of instructions: Power on the Web Filter.

4.2.1.2 Serial Console Setup

1. Using the serial port null modem cable (and USB DB9 serial adapter, if necessary), connect the laptop to the rear of the chassis.

Figure 1: Rear of 300 series chassis with serial port identified

Figure 2: Portion of 500 series chassis rear with serial port identified

Figure 3: Portion of 700 series chassis rear with serial port identified

2. Power on the laptop.

3. Proceed to the next set of instructions: Power on the Web Filter.

4.2.2 Power on the Web Filter

4.2.2.1 Power up a 300 Series Model

1. Make sure the power adapter is plugged into the back of the chassis and connected to the power cord.

2. Plug the power cord into a power source with an appropriate rating.

Caution: It is strongly suggested you use an uninterruptible power supply.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3. Go to the LCD panel on the front of the chassis, and press down the green check mark key for three seconds.

4. When the LCD panel displays a message that indicates the Web Filter is running, proceed to the following set of instructions:

• For Monitor and Keyboard Setup, go to Login screen.

• For Serial Console Setup, go to HyperTerminal Setup Procedures.

4.2.2.2 Power up a 500 or 700 Series Model

1. Make sure the power cord(s) is/are plugged into the back of the chassis.

2. Plug the power cord(s) into a power source with an appropriate rating.

Caution: It is strongly suggested you use an uninterruptible power supply.

3. Remove the bezel and press the large button at the right of the front panel.

4. Replace the bezel on the front of the chassis. When the LCD panel displays a message that indicates the Web Filter is running, proceed to the following set of instructions:

• For Monitor and Keyboard Setup, go to Login screen.

• For Serial Console Setup, go to Serial Connection Setup Procedures.

4.2.3 Serial Connection Setup Procedures

To configure Web Filter using a serial port connection using HyperTerminal or another terminal program, please specify these session settings:

• 9600 bits per second

• 8 data bits

•no parity

•1 stop bit

• hardware (RTS/CTS) flow control

• VT100 emulation settings

Note: For a detailed walk-through of HyperTerminal setup, see Appendix A.

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

4.2.4 Login screen

The login screen displays after powering on the Web Filter using a monitor and keyboard, or after creating

a serial (HyperTerminal) session.

Note: If using a HyperTerminal session, the login screen will display with black text on a white background.

If the screensaver currently displays on your screen, press the Enter key to display the login screen.

1. At the login prompt, type in: menu

2. Press the Enter key to display the Password prompt.

3. At the Password prompt, type in the following: #s3tup#r3k

4. Press Enter to display the Quick Start menu screen.

4.2.5 Quick Start menu screen

1. At the Press the number of your selection prompt, press 2 to select the Quick Start setup process.

2. At the login prompt, re-enter your password: #s3tup#r3k

3. Press Enter to display the administration menu where you can begin using the Quick Start setup procedures.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

4.2.6 Quick Start menu: administration menu

1. At the Press the number of your selection prompt, press 2 to select the “Quick Start Setup” process.

• The Quick Start menu takes you to the following configuration screens to make entries:

• Change filtering mode

• For Invisible, Router, and Firewall mode:

• Configure network interface LAN1

• Configure network interface LAN2

• For Bridge mode:

• Configure Bridge network interface

• Configure default gateway

•Configure DNS servers

• Configure host name

• Time Zone regional setting

2. After making all entries using the Quick Start setup procedures, press X to return to the Quick Start menu screen. Or, to verify the status of the Web Filter and review the entries you made using the

Quick Start setup, press 1 to view the System Status screen.

Note: To configure an individual screen from the Quick Start menu, press the number or letter corresponding to that menu option, as described in the following sub-sections.

4.2.6.1 Change filtering mode

1. From the Quick Start menu, press 3 to go to the Filter mode configuration screen.

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2. Select a filter mode (Invisible, Router, Firewall, or Bridge) using up-arrow and down-arrow keys. Press

Y when you have selected the appropriate mode, or press Esc to cancel this change.

Tip: To set up this Web Filter in any other mode (such as mobile or ICAP mode), you must use the web

based interface later. If you plan to use a different mode, at this time choose Invisible mode.

4.2.6.2 Configure network interface LAN1

This step applies to Invisible, Router, and Firewall mode. For Bridge mode, go to Section 4.2.6.4.

1. From the Quick Start menu, press 4 to go to the Configure Network Interface screen for LAN1.

2. At the Enter interface LAN1 IP address prompt, type in the LAN1 IP address and press Enter.

3. At the Enter interface LAN1 netmask prompt, type in the netmask for the LAN1 IP address and press Enter.

4. Press Y to confirm, or press any other key to cancel this change.

Tip: This interface will be the management interface. You will connect to it with a web browser to administer this Web Filter.

4.2.6.3 Configure network interface LAN2

1. From the Quick Start menu, press 5 to go to the Configure Network Interface screen for LAN2.

2. At the Enter interface LAN2 IP address prompt, type in the LAN2 IP address and press Enter.

3. At the Enter interface LAN2 netmask prompt, type in the netmask for the LAN2 IP address and press Enter.

4. Press Y to confirm, or press any other key to cancel this change.

4.2.6.4 Configure bridge network interface

This step applies to Bridge mode only. For other modes, go to Section 4.2.6.5.

1. From the Quick Start menu, press 4 to go to the Configure Network Interface screen for the Bridge interface.

2. At the Enter interface Bridge IP address prompt, type in the LAN1 IP address and press Enter.

3. At the Enter interface Bridge netmask prompt, type in the netmask for the LAN1 IP address and press Enter.

4. Press Y to confirm, or press any other key to cancel this change.

Tip: This interface will be the management interface. You will connect to it with a web browser to administer this Web Filter.

4.2.6.5 Configure default gateway

1. From the Quick Start menu, press 6 to go to the Configure default gateway screen.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2. At the Enter default gateway IP prompt, type in the gateway IP address and press Enter.

3. Press Y to confirm, or press any other key to cancel this change.

4.2.6.6 Configure DNS servers

1. From the Quick Start menu, press 7 to go to the Configure Domain Name Servers screen.

2. At the Enter first DNS server IP prompt, type in the IP address of the DNS server to use and press Enter.

3. At the Enter (optional) second DNS server IP prompt, either type in the IP address of an alternate DNS server to use and press Enter, or just press Enter to bypass making a second DNS server entry.

4.2.6.7 Configure host name

1. From the Quick Start menu, press 8 to go to the Configure host name screen.

2. At the Enter host name prompt, type in the host name and press Enter.

3. Press Y to confirm, or press any other key to cancel this change.

4.2.6.8 Time Zone regional setting

1. From the Quick Start menu, press 9 to go to the Time Zone regional configuration screen.

2. Select a region using up-arrow and down-arrow. Press Y when you have selected the appropriate region, or press Esc to cancel this change.

Note: If this server is located in the USA, please select “US” and not “America”.

3. After you select the region, you may be prompted to select the locality within the selected region. Select the locality and press Y to confirm, or press Esc to cancel the change.

Quick Start settings are now complete. Press X to return to the Quick Start menu screen. Or, to verify the status of the Web Filter and review the entries you made using the Quick Start setup, press 1 to view the System Status screen (see Section 4.2.7).

4.2.6.9 Additional Administrative Options

The options described below are available on the menu, but are not required for the quick start setup process.

4.2.6.9.1 Reset system to factory defaults

1. From the Quick Start menu, press A to go to the Reset confirmation screen.

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2. At the Press Y to continue prompt, press Y to continue, or press any other key to cancel the reset

process.

Caution: This option will delete all configuration settings and profiles stored on the server, and revert the server back to the original software version on the hard drive. Any software updates applied since the original version on the hard drive will need to be downloaded and re-applied.

4.2.6.9.2 Reboot system

1. From the Quick Start menu, press B to go to the Reboot confirmation screen.

2. At the Really reboot the system? prompt, press Y to continue, or press any other key to cancel reboot.

4.2.6.9.3 Change Quick Start password

1. From the Quick Start menu, press C to go to the Change Administrator Password screen.

Note: This option will change the password used for accessing the Quick Start menu (the default password being ‘#s3tup#r3k’) but will not change the password used for accessing the Web Filter login screen.

Option D, “Reset Admin account”, should be used for resetting the Web Filter Administrator console username and password to the factory default ‘admin’/’user3’ and for unlocking all IP addresses currently locked.

2. At the Enter the new administrator password prompt, type in the new password to be used for accessing the Quick Start menu and press Enter.

3. At the Re-enter the new administrator password prompt, re-type the password you just entered and press Enter, or press Esc to cancel the change.

4.2.6.9.4 Reset admin console account

1. From the Quick Start menu, press D to go to the Reset admin GUI account confirmation screen that displays the following message:

• Reset admin account password? Are you sure?

NOTE: This process will also unlock the admin account and unlock all currently locked IPs.

Note: This option resets the Web Filter Administrator console username and password to the factory default ‘admin’/’user3’ and will unlock all IP addresses currently locked.

2. Press Y to continue, or press any other key to cancel admin account reset.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

4.2.7 System Status screen

The System Status screen displays the following information:

• Serial Number assigned to the chassis

• Operation Mode for the Web FIlter specified in screen 3 (Change filtering mode)

• One or more of the following, depending on mode:

• lan1 IP address and netmask specified in screen 4, and current status (“Active” or “Inactive”)

• lan2 IP address and netmask specified in screen 5, and current status (“Active” or “Inactive”)

• bridge IP address and netmask specified in screen 4, and current status (“Active” or “Inactive”)

• Default gateway IP address specified in screen 6 (Configure default gateway)

• Web Filter host name specified in screen 8 (Configure host name)

• DNS server IP address(es) specified in screen 7 (Configure DNS servers)

• Regional timezone setting specified in screen 9 (Time Zone regional setting)

• Current status of the Web Filter

• Current Web Filter software Version installed

• Library update status

Note: Modifications can be made at any time by returning to the specific screen of the Quick Start procedures.

4.2.8 Log Off, Disconnect the Peripherals

1. After completing the Quick Start setup procedures, return to the Quick Start menu screen and press 9 to log out.

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2. Disconnect the peripherals from the Web Filter.

Proceed to Section 4.4: Physically Connect the Unit to the Network.

4.3 LCD Panel Setup Procedures

4.3.1 LCD Panel

1. Connect the AC power cord(s) to the back of the chassis and plug the cord(s) into a UPS power supply unit.

2. Power on the server following the instructions at Section 4.2.2.

4.3.1.1 LCD panel keypad

To configure the Web Filter via the LCD panel on front of the chassis bezel, use the keypad located to the right of the LCD screen.

The keypad includes the following keys:

• On a 300 series model: Up arrow, down arrow, left arrow, right arrow, check mark, and “X” keys.

• On a 500 or 700 series model: Up, down, left, right, CANCEL, and ENTER keys.

To display software status information about the Web Filter, press the right (arrow) key. To go to the LCD Menu, press “X” / CANCEL. Pressing “X” / CANCEL again returns you to the software status display.

4.3.1.2 LCD Menu

The LCD Menu tree includes the following two main menu selections:

• LCD Options - This choice includes options for viewing the LCD display and monitoring the Web Filter once it is configured and running on the network. Information about using LCD Options is included in this document after the Trustwave menu sub-section.

• Trustwave menu - Many of the menu items in this sub-section are used for configuring the Web Filter unit.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

The menu tree displays an arrow to the left of the currently selected menu item. Use the up or down (arrow) keys to navigate the menu. After making your menu selection, press the check mark / ENTER key to accept your selection.

4.3.2 Trustwave menu

When the Trustwave menu option is selected from the LCD Menu tree, the following menu items display in the panel, the entire list which is viewable by using the navigation keys:

•WF Patch Level >

• Serial Number >

• WF Filter Mode > *

• For Invisible, Router, or Firewall mode:

•IP / LAN1 > *

•IP / LAN2 > *

• For Bridge mode:

•IP / Bridge > *

•Gateway > *

•DNS 1 > *

•DNS 2 > *

•Host Name > *

• Regional Setting (Time Zone, date, time) *

• Reset WF Admin Console Password

• Reboot >

• Shutdown >

Please make a note of the LAN 1 and LAN 2 IP address and host name you assign to the Web Filter server, as you will need to use this information in later steps of the installation procedure.

Note:

When using the Trustwave menu to execute quick start setup procedures, be sure to configure all menu items marked in the list above with an asterisk ( * ).

Please make a note of the LAN 1 and LAN 2 IP address and host name you assign to the Web Filter server, as you will need to use this information in later steps of the installation procedure.

Tips: Navigation tips in the Trustwave menu: Use the up / down (arrow) key to scroll up / down the menu

• Press the check mark / ENTER key to choose the current selection

• Press the “X” / CANCEL key to go back to the previous screen.

Make a selection from the menu, and press the check mark / ENTER key to go to that screen.

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

After making all settings in the required menu items, proceed to Section 4.4: Physically Connect the Unit to the Network.

4.3.2.1 WF Filter Mode

When the WF Filter Mode option is selected, the WF Filter Mode screen displays.

1. At the Mode field, use the left / right arrow keys to view and choose from the available options: Invisible, Router, Firewall, or Bridge.

Tip: To set up this Web Filter in any other mode (such as mobile or ICAP mode), you must use the web based interface later. If you plan to use a different mode, the selection you make now is not important.

2. Press the check mark / ENTER key to go to the Save Changes screen.

3. On the Save Changes screen:

•Choose Yes to accept your changes and to return to the main menu.

•Choose No to return to the Mode field.

4.3.2.2 IP / LAN1 and 2

You must configure these settings for both LAN 1 and LAN 2 if present. If you selected Bridge mode, go to Section 4.3.2.3.

Tip: The LAN 1 interface will be the management interface. You will connect to it with a web browser to administer this Web Filter.

When the IP / LAN 1 (2) option is selected, the IP / LAN 1 (2) screen displays with the following menu items:

•Configure LAN 1 (2) IP

• Change LAN1 (2) Netmask

1. Choose Configure LAN 1 (2) IP and press the check mark / ENTER key to go to the Configure LAN 1 (2) IP screen.

2. Use the up / down keys to increase / decrease the current value, and the left / right (arrow) keys to navigate across the line.

3. Press the check mark / ENTER key to accept your entry and to return to the previous screen.

4. Choose Change LAN1 (2) Netmask and press the check mark / ENTER key to go to the Change LAN1 (2) Netmask screen.

5. Use the up / down keys to increase / decrease the current value, and the left / right (arrow) keys to navigate across the line.

6. Press the check mark / ENTER key to accept your entry and to return to the previous screen.

7. Press the “X” / CANCEL key to return to the Trustwave menu.

Go to Section 4.3.2.4.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

4.3.2.3 IP / Bridge

You must configure this setting if you selected Bridge mode.

Tip: The Bridge interface will be the management interface. You will connect to it with a web browser to administer this Web Filter.

When the IP / Bridge option is selected, the IP / Bridge screen displays with the following menu items:

• Configure Bridge IP

• Change Bridge Netmask

1. Choose Configure Bridge IP and press the check mark / ENTER key to go to the Configure Bridge IP screen.

2. Use the up / down keys to increase / decrease the current value, and the left / right (arrow) keys to navigate across the line.

3. Press the check mark / ENTER key to accept your entry and to return to the previous screen.

4. Choose Change Bridge Netmask and press the check mark / ENTER key to go to the Change Bridge Netmask screen.

5. Use the up / down keys to increase / decrease the current value, and the left / right (arrow) keys to navigate across the line.

6. Press the check mark / ENTER key to accept your entry and to return to the previous screen.

7. Press the “X” / CANCEL key to return to the Trustwave menu.

4.3.2.4 Gateway

When the Gateway option is selected, the Gateway screen displays with the Configure Gateway IP menu item.

1. Choose Configure Gateway IP and press the check mark / ENTER key to go to the Configure Gateway IP screen.

2. Use the up / down keys to increase / decrease the current value, and the left / right (arrow) keys to navigate across the line.

3. Press the check mark / ENTER key to accept your entry and to return to the previous screen.

4. Press the “X” / CANCEL key to return to the Trustwave menu.

4.3.2.5 DNS 1 and 2

When the DNS 1 (2) option is selected, the DNS 1 (2) screen displays with the Configure DNS IP 1 (2) menu item.

1. Choose Configure DNS IP 1 (2) and press the check mark / ENTER key to go to the Configure DNS IP 1 (2) screen.

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2. Use the up / down keys to increase / decrease the current value, and the left / right (arrow) keys to navigate across the line.

3. Press the check mark / ENTER key to accept your entry and to return to the previous screen.

4. Press the “X” / CANCEL key to return to the Trustwave menu.

4.3.2.6 Host Name

When the Host Name option is selected, the Host Name screen displays with the Configure Hostname menu item.

1. Choose Configure Hostname and press the check mark key to go to the Configure Hostname screen.

2. Use the up, down, left, right (arrow) keys to navigate the menu. Press the right (arrow) key to view the alphabet in first uppercase and then lowercase, numbers from 0-9, and lastly the symbol

characters.

Tips:

• If the down (arrow) key is pressed first—instead of the right (arrow) key—the symbol characters display first.

• Press the “X” / CANCEL key to remove a character and move the cursor to the first position in the line.

3. Press the check mark / ENTER key to return to the previous screen.

4. Press the “X” / CANCEL key to return to the Trustwave menu.

4.3.2.7 Regional Setting (Time Zone, date, time)

When the Regional Setting (Time Zone, date, time) option is selected, the Regional Setting (Time Zone, date, time) screen displays with the Region menu item.

1. Choose Region, and use the left / right (arrow) keys to view the available region selections.

2. After making a selection, press the check mark / ENTER key to display the Choose a Location screen.

3. Choose Location, and use the left / right (arrow) keys to view the available location selections.

4. After making a selection, press the check mark / ENTER key to display the Save Changes? screen:

•Choose Yes to save your changes and to return to the Trustwave menu.

•Choose No to return to the previous screen.

4.3.2.8 Additional Administrative Options

The options described below are available on the menu, but are not required for the quick start setup process.

4.3.2.8.1 WF Patch Level

When the WF Patch Level option is selected, “Web Filter” and the version number of the currently installed software build displays.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

4.3.2.8.2 Serial Number

When the Serial Number option is selected, the serial number of the chassis displays.

4.3.2.8.3 Reset WF Admin Console Password

When the Reset WF Admin Console Password option is selected, the Reset Admin Console screen displays with a WARNING menu item.

1. Choose *** WARNING *** to display the message screen:

• *** WARNING *** The Admin console username/password will be reset to ‘admin’/’user3’ and all locked IPs will be unlocked.

2. After reading the warning message, select one of two options on the screen:

•Choose Yes, reset it now! to reset the password and to return to the main menu.

•Choose No, cancel reset to return to the previous screen.

4.3.2.8.4 Reboot

When the Reboot option is selected, the Reboot screen displays with two menu items.

1. Choose one of two options:

• Yes, reboot now!!! - This selection reboots the Web Filter.

• No, cancel reboot - This selection returns you to the previous screen.

2. Press the “X” / CANCEL key to return to the Trustwave menu.

4.3.2.8.5 Shutdown

When the Shutdown option is selected, the Shutdown screen displays with two menu items.

1. Choose one of two options:

• Yes, shutdown now!! - This selection shuts down the Web Filter.

• No, cancel shutdown - This selection returns you to the previous screen.

2. Press the “X” / CANCEL key to return to the main menu.

4.3.3 LCD Options menu

When “LCD Options >” is selected, the following menu items display on the screen: Heartbeat, Backlight, LCD Controls >. Make a selection from the menu, and press the check mark / ENTER key to go to that screen.

4.3.3.1 Heartbeat

When the Heartbeat option is selected, the Heartbeat screen displays.

1. Press the check mark / ENTER or right (arrow) key three times to view each of the three available options:

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

• heartbeat feature enabled (populated field)

• heartbeat feature disabled (empty field)

• check for a heartbeat now (blinking heartbeat symbol displayed in the line above)

2. After making your selection, press the “X” / CANCEL key to return to the previous screen.

4.3.3.2 Backlight

When the Backlight option is selected, the Backlight screen displays.

1. Press the check mark / ENTER or right (arrow) key three times to view each of the three available options:

• backlight feature enabled (populated field, backlight turns on)

• backlight feature disabled (empty field, backlight turns off)

• display the backlight now (populated field, backlight turns on)

2. After making your selection, press the “X” / CANCEL key to return to the previous screen.

4.3.3.3 LCD Controls

When the LCD Controls option is selected, the LCD Controls screen displays with the following menu items: Contrast, On Brightness, Off Brightness.

1. Choose one of the menu selections and press the check mark / ENTER or right (arrow) key to go to that screen:

• Contrast - In the Contrast screen, use the left / right (arrow) keys to decrease / increase the text

and screen contrast.

• On Brightness - In the On Brightness screen, use the left / right (arrow) keys to decrease /

increase the brightness of a screen with a feature that is enabled.

• Off Brightness - In the Off Brightness screen, use the left / right (arrow) keys to decrease /

increase the brightness of a screen with a feature that is disabled.

2. After making your selection, press the “X” / CANCEL key to return to the previous screen.

4.4 Physically Connect the Unit to the Network

Now that your Web Filter network parameters are set, you can physically connect the unit to your network.

This step requires two standard CAT-5E cables.

Caution: Cabling instructions are different depending on the mode. Bridge mode appliances have separate instructions. Use the correct section.

4.4.1 Invisible, Firewall, or Router mode

1. Plug one end of a standard CAT-5E cable into the Web Filter’s LAN 1 port, the port on the left.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

Figure 4: Rear of 300 series chassis with LAN ports identified

Figure 5: Portion of 500 series chassis rear with LAN ports identified

Figure 6: Portion of 700 series chassis rear with LAN ports identified

2. Plug the other end of the CAT-5E cable into an open port on the network hub that handles the Internet traffic you wish to filter.

3. Repeat the sub-steps above for the Web Filter’s LAN 2 port.

4. Reboot the server by using the Reboot system option (as described in Section 4.2), or by using the Reboot option on the LCD panel (as described in Section 4.3).

4.4.2 Bridge mode

In Bridge mode, the appliance is installed “in line” between the internal network and the Internet router. Bridge mode also supports use of a bypass network card in the appliance (for some models). The bypass

card ensures connectivity if the appliance is powered down or unresponsive.

Caution: Connecting the Web Filter in Bridge mode requires you to physically disconnect Internet access for a brief time. You should plan to perform this installation during a network maintenance period.

• If you do not have a bypass card, network connectivity will be lost until the Web Filter software is active.

The following points apply to all Bridge mode installations:

1. Identify the network connection that carries outbound HTTP and HTTPS traffic from the internal network switch to the Internet router. This connection will be redirected through the Web Filter appliance.

2. Have ready two Cat-5e (or Cat-6) cables to complete the connection.

3. After completing the physical connection and starting the appliance, use the Web Filter GUI (Admin Console) to generate a CA Certificate that Web Filter will use to allow decoding of Google and YouTube HTTPS requests from users’ browsers. See the System > Bridge screen in the console.

For advanced networking suggestions, see Trustwave Knowledge Base article Q15554

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

4.4.2.1 Bridge mode with bypass card installed

When connecting the bypass card you must connect the cables to the correct ports on the card.

Note:

500 and 700 series appliances shipped with software version 5.1.00 include a bypass card. 300 series appliances do not include a bypass card. For appliances without a bypass card, see Section 4.4.2.2.

1. Plug one end of a standard CAT-5e cable into the INT port (left side) on the Web Filter’s bypass card.

Figure 7: Typical rear view of 500 or 700 series appliance with bypass LAN ports identified.

2. Plug the other end of this cable into the port on the network switch that handles the outgoing Internet

traffic you wish to filter.

Unplug any cable that previously provided a direct outbound connection for this traffic.

Tip:

3. Plug one end of the second CAT-5e cable into the EXT port (right side) on the Web Filter’s bypass card.

4. Plug the other end of this cable into a port on the network router, firewall, or other device that

provides outbound Internet access for your network.

Tip: Usually this will be the port that was previously used by the other end of the cable you unplugged from the switch.

Once both cables are connected, traffic will flow through this connection even if

the Web Filter appliance is powered down.

5. Do not connect any cables to the LAN1 and LAN2 ports on the appliance motherboard.

6. Reboot the server by using the Reboot system option (as described in Section 4.2), or by using the Reboot option on the LCD panel (as described in Section 4.3).

4.4.2.2 Bridge mode without bypass card installed

If you plan to use Bridge mode without a bypass card (for instance, with model 300 appliances), you must connect the cables to the correct ports.

1. Plug one end of a standard CAT-5E cable into the LAN1 port on the Web Filter (the one on the left).

2. Plug the other end of this cable into an open port on the network hub that handles the Internet traffic

you wish to filter.

Tip: Unplug any cable that previously provided a direct outbound connection for this traffic.

3. Plug one end of the second CAT-5E cable into the LAN2 port on the Web Filter (the one on the right).

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

4. Plug the other end of this cable into a port on the network router, firewall, or other device that

provides outbound Internet access for your network.

Tip: Usually this will be the port that was previously used by the other end of the cable you unplugged from the switch.

5. Reboot the server by using the Reboot system option (as described in Section 4.2), or by using the Reboot option on the LCD panel (as described in Section 4.3).

4.5 Access the Web Filter Online

4.5.1 Access the Web Filter via its LAN 1 or Bridge IP Address

1. Launch a supported web browser:

•Firefox 16

• Internet Explorer 8 or 9

• Safari 5 or 6

•Google Chrome 23

2. In the address line of the browser window, enter the URL (web address) of the Web Filter interface.

• The URL is like https://

• (HTTPS and port 1443 are used for a secure network connection).

For example, if the LAN 1 IP address is 10.10.10.10 type in https://10.10.10.10:1443.

Tip: For Bridge mode, use the Bridge IP address.

3. Click Go.

The browser will display a security certificate issue page. This is expected behavior in the Web Filter setup.

4. Accept the security certificate to proceed to the login page.

Tip: For a full walk-through of accepting certificates in supported browsers, see Appendix B.

If you see an error other than the security certificate issue, check the following points:

• The Web Filter is powered on.

{the LAN 1 IP address}

:1443

• The Web Filter is connected to the same hub as your router/firewall.

• Can the administrator workstation normally connect to the Internet?

• Is the Web Filter plugged into a switch instead of a hub?

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

• Do you have both LAN ports connected as described in the instructions above?

• Is there a caching server?

• Is the administrator workstation able to ping the Web Filter’s LAN 1 (or Bridge) IP address? (To ping the Web Filter using the Command Prompt in Windows XP, Vista, and 7, go to Start | All Programs | Accessories | Command Prompt, type in ping

• For example, enter ping 10.10.10.10

You should see a series of replies that show a time in ms (milliseconds). The reply “Destination host unreachable” indicates an error.

• If pinging the IP address of the Web Filter is unsuccessful, try restarting the network service or rebooting the Web Filter.

• If still unsuccessful, contact a Trustwave solutions engineer or technical support representative.

and the IP address and then press Enter.)

4.6 Log in, Generate SSL Certificate

In this step, you will log in to the Web Filter and generate a self-signed certificate to ensure secure exchanges between the appliance and your browser. If using an IE browser, you will need to complete the security certificate acceptance procedures.

4.6.1 Log in to the Web Filter

1. In the Web Filter Administrator console login window, type in the Username (admin) and Password (user3):

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2. Click LOGIN to display the Web Filter Admin console Welcome window:

4.6.2 Generate SSL Certificate

1. Navigate to System | UI SSL Certificate to open the SSL Certificate window:

2. Click Generate Certificate to open the box that asks if you wish to continue, which would restart your server.

3. Click Yes to generate the SSL certificate and restart the Web Filter.

4. After the certificate is generated, you will be prompted to click OK and close your browser. Wait a few minutes before attempting to access the user interface.

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

• If using an IE browser, proceed to Section 4.6.3: IE Security Certificate Installation Procedures.

• If using a Firefox, Safari, or Chrome browser, proceed to Section 4.7: Test Filtering or the Mobile

Security Client Connection.

4.6.3 IE Security Certificate Installation Procedures

4.6.3.1 Accept the Security Certificate in IE

Go to the appropriate sub-section if using the following Windows operating system and IE browser:

• Windows XP or Vista with IE 8 or 9

• Windows 7 with IE 8 or 9

4.6.3.1.1 Windows XP or Vista with IE 8 or 9

1. If using an IE 8 or 9 browser on a Windows XP or Vista machine, in the page “There is a problem with this website's security certificate.”, click Continue to this website (not recommended):

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

• Selecting this option displays the Web Filter login page with the address field and the Certificate

Error button to the right of the field shaded a reddish color:

2. Click Certificate Error to open the Certificate Invalid box:

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3. Click View certificates to open the Certificate window that includes the host name you assigned to the Web Filter:

4. Click Install Certificate... to launch the Certificate Import Wizard:

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5. Click Next > to display the Certificate Store page:

6. Choose the option “Place all certificates in the following store” and then click Browse... to open the Select Certificate Store box:

7. Choose “Trusted Root Certification Authorities” and then click OK to close the box.

8. Click Next > to display the last page of the wizard:

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

9. Click Finish to close the wizard and to open the Security Warning dialog box asking if you wish to install the certificate:

10. Click Yes to install the certificate and to close the dialog box. When the certificate is installed, the alert window opens to inform you the certificate installation process has been completed.

11. Click OK to close the alert box, and then close the Certificate window.

Now that the security certificate is installed, you will need to map the Web Filter’s IP address to its host name. Proceed to Map the Web Filter’s IP Address to the Server’s Host Name.

4.6.3.1.2 Windows 7 with IE 8 or 9

1. If using an IE 8 or 9 browser on a Windows 7 machine, in the page “There is a problem with this website's security certificate.”, click Continue to this website (not recommended).

2. From the toolbar, select Tools | Internet Options to open the Internet Options box.

3. Select the Security tab, click Trusted sites, and then click Sites to open the Trusted sites box.

4. In the Trusted sites box, confirm the URL displayed in the field matches the IP address of the Web Filter, and then click Add and Close.

5. Click OK to close the Internet Options box.

6. Refresh the current Web page by pressing the F5 key on your keyboard.

7. Follow steps a to k documented in Windows XP or Vista with IE 8 or 9:

a. When the security issue page re-displays with the message: “There is a problem with this

website's security certificate.”, click Continue to this website (not recommended). Choosing this option displays the Web Filter login window with the address field and the Certificate Error button to the right of the field shaded a reddish color.

b. Click Certificate Error to open the Certificate Invalid box.

c. Click View certificates to open the Certificate window that includes the host name you assigned

to the Web Filter.

d. Click Install Certificate... to launch the Certificate Import Wizard.

e. Click Next > to display the Certificate Store page.

f. Choose the option “Place all certificates in the following store” and then click Browse... to open

the Select Certificate Store box.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

g. Choose “Trusted Root Certification Authorities” and then click OK to close the box.

h. Click Next > to display the last page of the wizard.

i. Click Finish to close the wizard and to open the Security Warning dialog box asking if you wish to

install the certificate.

j. Click Yes to install the certificate and to close the dialog box. When the certificate is installed, the

alert window opens to inform you the certificate installation process has been completed.

k. Click OK to close the alert box, and then close the Certificate window.

8. From the toolbar of your browser, select Tools | Internet Options to open the Internet Options box.

9. Select the Security tab, click Trusted sites, and then click Sites to open the Trusted sites box.

10. Select the URL you just added, click Remove, and then click Close.

Now that the security certificate is installed, you will need to map the Web Filter’s IP address to its host name. Proceed to Map the Web Filter’s IP Address to the Server’s Host Name.

4.6.3.2 Map the Web Filter’s IP Address to the Server’s Host Name

1. From your workstation, launch Windows Explorer and enter C:\WINDOWS\system32\drivers\etc in the address field to open the folder where the hosts file is located:

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2. Double-click “hosts” to open a window asking which program you wish to use to open the file. Doubleclick “Notepad” or “TextPad” to launch the hosts file using that selected program:

3. Enter a line in the hosts file with the Web Filter’s IP address and its host name (as entered earlier in the Configure host name screen of the Quick Start Setup Procedures, or the Host Name screen in LCD Panel Setup Procedures. Then save and close the file.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

4. In the address field of your newly opened IE browser on this workstation, from now on you can the Web Filter’s host name instead of its IP address—that is https://hostname:1443 would be used instead of https://x.x.x.x:1443 Click Go to open the Web Filter login window:

Proceed to Section 4.7: Test Filtering or the Mobile Security Client Connection.

4.7 Test Filtering or the Mobile Security Client Connection

4.7.1 Test Filtering on the Web Filter

If the Web Filter has been set up in the Invisible, Router, or Firewall mode, you should test filtering the Web Filter.

1. Open a browser window on a network workstation, and then go to the following empty sites to test pornography filtering:

• http://test.8e6.com

• http://testsite.marshal.com

2. You should receive a block page for each URL tested. If you do not, contact a Trustwave solutions engineer or technical support representative.

4.7.2 Test the Mobile Security Client Connection

If the Web Filter has been set up to use the Mobile mode, you should verify that the Mobile Security Client can reach the Web Filter.

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

1. Use a workstation on which the Mobile Security Client is installed that is not on a filtered portion of the LAN. Open a browser window on a network workstation, and then go to a few test sites you set up to be blocked by the Mobile Security Client.

2. The connections should be blocked, and the block pages served by the Web Filter should display in the browser’s Address field. If you do not receive a block page for each tested URL, contact a Trustwave solutions engineer or technical support representative.

4.8 Set Library Updates

After verifying that the Web Filter is correctly functioning on your network, you need to activate Web Filter library updates. Library updates are critical for filtering as new sites are added to the Trustwave library each day. To activate updates, visit the Trustwave Web site and enter the activation code that was issued

to you by e-mail (also included on the product invoice).

Note: Port 443 (HTTPS) must be open for outgoing requests so that the Web Filter can receive library updates.

4.8.1 Activate and Register the Web Filter

Be sure you have a valid host name chosen before activating your account.

1. Open an Internet browser window and go to http://www.trustwave.com/support/activate-

appliance.asp:

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2. After reading through the online End User License Agreement, click Accept to go to Step 2 of the activation process:

3. Enter your activation code from the email.

4. Click Activate to activate the Web Filter. You should receive a confirmation page informing you that the Web Filter has been activated. Verify that your serial number and activation code are the same as shown on this registration page.

• You may wish to print the confirmation page for future reference in dealing with technical issues.

4.8.2 Perform a Complete Library Update

Your Web Filter was shipped with the latest filtering library update for the current software release. However, as new updates continually become available, before you begin using the Web Filter you must perform a complete library update to ensure you have the latest library updates.

To download the latest library updates:

1. Click the Library button at the top of the screen.

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2. From the navigation panel to the left, click Updates and select Manual Update from the menu:

3. In the Manual Update to Trustwave Supplied Categories window, click the radio button corresponding to Full URL Library Update.

4. Click Update Now to begin the update process.

4.8.3 Monitor the Library Update Process

To verify that the library is being updated:

1. From the navigation panel, click Updates and select Library Update Log from the menu.

2. In the Library Update Log window, click View Log to display the update activity:

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

Note: You will be notified in the log when the library has been completely updated by the message: “Full URL Library Update has completed.” If this message does not yet display, click View Log again to view the latest information.

Caution: At the conclusion of this step, your Web Filter will be actively filtering your network. The Web Filter is initially set to filter pornography sites on all of your network traffic associated with the hub to which it is connected. You should continue with additional configuration as described in the next section.

4.9 Next Steps

Congratulations! You have completed the Web Filter installation procedures.

Now that the Web Filter is filtering your network, the next step is to set up groups and create filtering profiles for group members.

To activate a default filter profile more appropriate for your operations, or to specify a more limited IP range to filter, see the Policy Screen of the Web Filter Console. For information on how to give end users access to acceptable HTTPS sites if strict HTTPS filtering settings are used, see the System Screen of the Console. To learn more about these screens, refer to the Global Administrator Section of the Web Filter Administrator Guide.

Obtain the latest Web Filter Administrator Guide at

http://www.trustwave.com/support/wf/documentation.asp

For troubleshooting tips, visit http://www.trustwave.com/software/8e6/ts/wf.html

rustwave recommends proceeding to the Best Filtering Practices section to implement

setup procedures for the filtering scenarios described within that section.

Install the Server

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5 Best Filtering Practices

This collection of setup and usage scenarios is designed to help you understand and use basic tools in the Web Filter console for configuring the user interface and creating filtering profiles for users in your network. Each scenario is followed by console setup information. Please consult the “How to” section in the index of the Web Filter Administrator Guide for pages containing detailed, step-by-step instructions on configuring and/or using the tools and features described in that scenario.

In this section you will learn how to:

• block user access to filtering categories, URL and search engine keywords, and various pattern types and file types

• set up user profiles or accounts to bypass blocked filtering categories

• create a custom category for URLs and keywords you wish to block

• establish time quotas and time profiles for user access to specified library categories

• lock out end users from Internet access after a designated number of hits to specified sites

Best Filtering Practices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1 Threat Class Groups

Trustwave’s filtering library currently consists of 104 library filtering categories, each placed in one of the 20 filtering category groups defined in the interface: Adult Content, Bandwidth, Business/Investments, Community/Organizations, Education, Entertainment, Government/Law/Politics, Health/Fitness, Illegal/Questionable, Information Technology, Internet Communication, Internet Productivity, Internet/Intranet Misc., News/Reports, Religion/Beliefs, Security, Shopping, Society/Lifestyles, Travel/Events, and Custom Categories.

Outside of the interface, we have also grouped these library categories into four Threat Class Groups, based on the type of security level that best defines them:

•Threats/Liabilities

• Bandwidth/Productivity

• General/Productivity

• Pass/Allow

Please review the scenarios for each of the four Threat Class Groups to fulfill the functions specified therein.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.1 Threats/Liabilities

5.1.1.1 Category block

Block categories that threaten your network/organization. In pertinent profiles, block access to the Security category group and other categories containing content that threaten your organization.

To block categories in a profile, go to:

• POLICY: Policy | IP | member | member profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: use library categories in a profile

5.1.1.2 Rule block

Use a rule to block categories that threaten your network/organization. Create a rule that blocks access to the Security category group and other categories containing content that threaten your organization, and then apply this rule to pertinent profiles. Or use a defined rule—such as the CIPA Compliance rule, if in the educational sector—to block related categories.

To create a rule and block categories in a profile, go to:

• POLICY: Policy | Global Group | Rules

• Policy | IP | member | member profile | Category tab

or Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

•How to: use rules

• How to: use library categories in a profile

Best Filtering Practices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.1.3 X-Strike on blocked categories

Lock out users from workstations after “X” number of attempts are made to access content that could endanger your network/organization. Enable and configure the X Strikes Blocking

feature, specifying categories that threaten your organization. Enable the X Strikes Blocking filter option in applicable profiles. The user receives a block page and is locked out of Internet/Intranet access after the specified number of “strikes” are made to any of these categories.

To block categories in a profile using the X Strikes Blocking feature, go to:

• SYSTEM: System | X Strikes Blocking | Configuration tab, and Categories tab

• POLICY: Policy | IP | member | member Profile | Filter Options tab, X Strikes Blocking enabled

or POLICY: Policy | Global Group | Global Group Profile | Filter Options tab (X Strikes Blocking enabled)

In the Web Filter Administrator Guide index, see:

• How to: set up X Strikes Blocking

• How to: set up profile options

5.1.1.4 Custom Lock, Block, Warn, X Strikes, Quota pages

Customize a lock, block, warning, X Strikes, or quota page. Modify page contents to point to a URL within your organization, send a request to your administrator’s email address, or include verbiage of your choice that informs users of their Internet usage activities that triggered the page.

To customize pages, go to:

• SYSTEM: System | Customization | Common Customization window, and other applicable

customization windows

In the Web Filter Administrator Guide index, see:

• How to: customize pages

5.1.1.5 URL Keywords

Block access to network-endangering content via URL keywords. In pertinent library categories, enter URL keywords to be blocked. Block these categories in applicable profiles.

To set up URL keywords to be blocked, go to:

• LIBRARY: Library | Category Groups | category | URL Keywords

enabled)

In the Web Filter Administrator Guide index, see:

• How to: set up URL Keywords

• How to: set up profile options

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.1.6 Search Engine Keywords

Block access to network-endangering content via search engine keywords. In pertinent library categories, enter SE keywords to be blocked. Block these categories in applicable profiles.

To set up Search Engine Keywords to be blocked, go to:

• LIBRARY: Library | Category Groups | category | Search Engine Keywords

Filter Control enabled)

In the Web Filter Administrator Guide index, see:

• How to: set up Search Engine Keywords

• How to: set up profile options

5.1.1.7 Custom Category (blocked)

Add a category to block content that could endanger your network/organization. Create a custom category with contents tailored to safeguard your organization. Block this category in appropriate profiles.

To set up a custom category and block it, go to:

• LIBRARY: Library | Category Groups | Custom Categories | Add Category

• POLICY: Policy | IP | member | member Profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: set up a custom category

• How to: use library categories in a profile

5.1.1.8 Minimum Filtering Level

At the root level, block categories that could endanger your network/organization. Configure the Minimum Filtering Level to block specified categories, and do the same in the Global Group Profile.

To configure the minimum filtering level, go to:

• POLICY: Policy | Global Group | Minimum Filtering Level

• Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: configure the Minimum Filtering Level

• How to: use library categories in a profile: Global Group Profile

Best Filtering Practices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.1.9 Override Account bypass

Use an Override Account to grant a user access to categories blocked at the root level. To grant designated users access to globally-blocked categories, set up an Override Account at the Global Group level, or enable the option to allow the Minimum Filtering Level to be bypassed with an Override Account, and then set up the Override Account at the group level.

To set up an override account at the Global Group level, go to:

• POLICY: Policy | Global Group | Override Account window

To configure the bypass feature and set up a group level override account, go to:

• POLICY: Policy | Global Group | Minimum Filtering Level | Min. Filter Bypass

• Policy | IP | group | Override Account window

In the Web Filter Administrator Guide index, see:

• How to: set up an Override Account: Global Group

or:

• How to: configure the Minimum Filtering Level: Bypass Options

• How to: set up an Override Account: Group profile

5.1.1.10 Exception URL bypass

Use exception URLs to grant users access to URLs blocked at the root. To grant users access to globally-blocked URLs, enable the exception URL bypass option in the Minimum Filtering Level. For these users, add the exception URLs in their profiles.

To set up the Exception URL bypass for users to bypass blocked URLs, go to:

• POLICY: Policy | Global Group | Minimum Filtering Level | Min. Filter Bypass

• Policy | IP | member | Exception URL window

In the Web Filter Administrator Guide index, see:

• How to: configure the Minimum Filtering Level: Bypass Options

• How to: set up Exception URLs

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.1.11 Proxy Patterns

Prevent users from using proxy patterns to bypass the Internet filter. Enable Pattern Blocking for all users. In the profile, block Security | Web-based Proxies/Anonymizers.

To set up the proxy pattern blocking feature and apply it to profiles, go to:

• SYSTEM: System | Control | Filter window

• POLICY: Policy | IP | member | member Profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: configure filtering

• How to: use library categories in a profile

5.1.1.12 File type blocking

Prevent users from downloading and using executable files that may threaten your network security. Create a custom category for file extensions and add “.exe” to the URL Keyword list. Other files

you might include in the list are: .dll, .ocx, .scr, .bat, .pif, .cpl, .cmd, .hta, .lnk, .inf, .sys, .vbs, .vb, .wsc, .wsh, .wsf. Do NOT include “.com” in the list, or the files will not be found and blocked. In the applicable profiles, block this custom category and enable both URL Keyword Filter Control and extension options.

To set up file type blocking and apply this feature to profiles, go to:

• LIBRARY: Library | Category Groups | Custom Categories | Add Category

• Library | Custom Categories | category | URL Keywords

Keyword Filter Control and extension options enabled)

In the Web Filter Administrator Guide index, see:

• How to: set up a custom category

• How to: set up URL Keywords: Custom Categories

• How to: use library categories in a profile

• How to: set up profile options

Best Filtering Practices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.2 Bandwidth/Productivity

5.1.2.1 Time Quota/Hit Quota

Limit time spent in PASSED categories to prevent excessive bandwidth usage and increase productivity. Enable the Quota Settings feature, and configure the Seconds Per Hit. Set up pertinent

categories in the user’s profile with quotas so the user is notified and then locked out of those categories after all minutes in the quota have been used.

To set up the quota feature and configure profiles to use this feature, go to:

• SYSTEM: System | Quota Setting window

• POLICY: Policy | IP | member profile | Category tab (Quota column)

or Policy | Global Group | Global Group Profile | Category tab (Quota column)

In the Web Filter Administrator Guide index, see:

• How to: set up Quotas

• How to: use library categories in a profile

5.1.2.2 Overall Quota

Restrict all quota time in a profile to improve bandwidth usage and productivity. Cap the amount of time a user spends in all quota-marked categories by enabling the Overall Quota option and specifying the number of minutes the end user can visit quota-marked categories before being notified and then locked out of these categories.

To set up the quota option and configure profiles to use the Overall Quota, go to:

• SYSTEM: System | Quota Setting window

• POLICY: Policy | IP | member profile | Category tab (Overall Quota)

or Policy | Global Group | Global Group Profile | Category tab (Overall Quota)

In the Web Filter Administrator Guide index, see:

• How to: set up Quotas

• How to: use library categories in a profile

5.1.2.3 Time Based Profiles

Schedule a profile to be used at a specific time. Set up one or more profiles for each user or group to be active at a scheduled time.

To set up Time Profiles, go to:

• POLICY: Policy | IP | member | Time Profile window

In the Web Filter Administrator Guide index, see:

• How to: set up a Time Profile

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.2.4 Warn option with low filter settings

Warn users before they access unacceptable content that their Internet activities are logged. Set HTTPS filtering at the “low” level, and then configure the number of minutes for the interval the warning page will re-display for any user who attempts to access content deemed unacceptable. In the end user’s profile, set the Warn categories.

To set up and use the warn option, go to:

• SYSTEM: System | Control | Filter window

•System | Warn Option Setting window

• POLICY: Policy | IP | member | member profile | Category tab (Warn column)

or POLICY: Policy | Global Group | Global Group Profile | Category tab (Warn column)

In the Web Filter Administrator Guide index, see:

• How to: configure filtering

• How to: configure the Warn Option Setting

• How to: use library categories in a profile

5.1.2.5 Warn-strike

Warn users before they access unacceptable content and may be locked out of the Internet. Enable the Warn feature along with X Strikes Blocking. After the end user is warned for the designated number of times defined in X Strikes Blocking, that user is locked out of all Internet/intranet access.

To set up and use the warn option with X Strikes Blocking, go to:

• SYSTEM: System | X Strikes Blocking window

•System | Warn Option Setting window

• POLICY: Policy | IP | member | member profile | Category Profile tab (Warn column), and Filter Options tab (X Strikes Blocking enabled)

or POLICY: Policy | Global Group | Global Group Profile | Category tab (Warn column), and Filter

Options tab (X Strikes Blocking enabled)

In the Web Filter Administrator Guide index, see:

• How to: set up X Strikes Blocking

• How to: configure the Warn Option Setting

• How to: use library categories in a profile

• How to: set up profile options

Best Filtering Practices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.2.6 P2P patterns

Block P2P services. Enable Pattern Blocking for all users. In the profile, block Bandwidth | Peer-topeer/File Sharing category.

To block P2P services, go to:

• SYSTEM: System | Control | Filter window

• POLICY: Policy | IP | member | member profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: configure filtering

• How to: use library categories in a profile

5.1.2.7 IM patterns

Block IM services. Enable Pattern Blocking for all users. In the profile, block Internet Communication | Chat and Instant Messaging (IM) categories.

To block IM services, go to:

• SYSTEM: System | Control | Filter window

• POLICY: Policy | IP | member | member profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: configure filtering

• How to: use library categories in a profile

5.1.2.8 Game patterns

Block game patterns. Enable Pattern Blocking for all users. In the profile, block Entertainment | Games category.

To block game patterns, go to:

• SYSTEM: System | Control | Filter window

• POLICY: Policy | IP | member | member profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: configure filtering

• How to: use library categories in a profile

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.2.9 Streaming Media patterns

Block streaming media patterns. Enable Pattern Blocking for all users. In the profile, block Bandwidth | Streaming Media category.

To block streaming media patterns, go to:

• SYSTEM: System | Control | Filter window

• POLICY: Policy | IP | member | member profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: configure filtering

• How to: use library categories in a profile

5.1.2.10 Remote Access patterns

Block remote access patterns. Enable Pattern Blocking for all users. In the profile, block Internet Productivity | Remote Access category.

To block remote access patterns, go to:

• SYSTEM: System | Control | Filter window

• POLICY: Policy | IP | member | member profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: configure filtering

• How to: use library categories in a profile

5.1.2.11 HTTPS settings

Establish the security level for HTTPS site access. Configure HTTPS filter settings in the Filter window. Choose “None” if you do not want the Web Filter to filter HTTPS sites, “Low” if you want the Web Filter to filter HTTPS sites without having the Web Filter communicate with IP addresses or hostnames of HTTPS servers, “Medium” if you want the Web Filter to communicate with HTTPS servers in order to get the URL from the certificate for URL validation only (this is the default setting), or “High” if you want the Web Filter to communicate with HTTPS servers to obtain the certificate with a very strict validation of the return URL.

To configure HTTPS settings, go to:

• SYSTEM: System | Control | Filter window

In the Web Filter Administrator Guide index, see:

• How to: configure filtering

Best Filtering Practices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.2.12 Category block

Block the Bandwidth category. Set the Bandwidth category to be blocked in pertinent profiles.

To block the Bandwidth category, go to:

• POLICY: Policy | IP | member | member profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: use library categories in a profile

5.1.2.13 Rule block

Use a rule to block the Bandwidth category. Create a rule that blocks the Bandwidth category and apply this rule to pertinent profiles.

To create and block a rule for the Bandwidth category, go to:

• POLICY: Policy | Global Group | Rules

• Policy | IP | member | member profile | Category tab

or Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

•How to: use rules

• How to: use library categories in a profile

5.1.2.14 SE Keywords

Block specific search engine keywords to restrict access to bandwidth-consumptive categories. In pertinent library categories, enter URL keywords to be blocked. Block these categories in

the profile.

To set up search engine keywords and block them in a profile, go to:

• LIBRARY: Library | Category Groups | category group | category | Search Engine Keywords

Filter Control enabled)

In the Web Filter Administrator Guide index, see:

• How to: set up Search Engine Keywords

• How to: set up profile options

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.2.15 URL Keywords

Block specific URL keywords to restrict access to bandwidth-consumptive categories. In pertinent library categories, enter SE keywords to be blocked. Block these categories in the profile.

To set up and block URL keywords in a profile, go to:

• LIBRARY: Library | Category Groups | category group | category | URL Keywords

enabled)

In the Web Filter Administrator Guide index, see:

• How to: set up URL Keywords

• How to: set up profile options

5.1.2.16 Custom Block/Warn/X Strikes/Quota pages

Customize a block, warning, X Strikes, or quota pages. Modify page contents to point to a URL within your organization, send a request to your administrator’s email address, or include verbiage of your choice that informs users of their Internet usage activities that triggered the page.

To customize pages, go to:

• SYSTEM: System | Customization | Common Customization window, and other applicable

customization windows

In the Web Filter Administrator Guide index, see:

• How to: customize pages

5.1.2.17 Real Time Probe information

Monitor Internet usage activity in real time. Enable Real Time Probe reporting. Create a probe to monitor Internet traffic by category, user IP address, username, or URL. Set up a schedule for the probe to run during a specific time period.

To enable and use Real Time Probe reporting, go to:

• REPORTING: Report | Real Time Probe | Configuration tab

• Real Time Probe | Go to Real Time Probe Reports GUI link | Real Time Probe Reports | Create tab

In the Web Filter Administrator Guide index, see:

• How to: set up Real Time Probes

Best Filtering Practices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.3 General/Productivity

5.1.3.1 Warn Feature with higher thresholds

Warn users before they access unacceptable content. Set HTTPS filtering at the “high” level to block certificates that may be questionable. Configure Warning settings. In the end user’s profile, apply the warn option to pertinent categories. The end user may not be able to access all requested sites due to high settings, and will receive the warning message for excessive Internet usage.

To set up and use the warn option with high filter settings, go to:

• SYSTEM: System | Control | Filter window

•System | Warn Option Setting window

• POLICY: Policy | IP | member profile | Category tab (Warn column)

or POLICY: Policy | Global Group | Global Group Profile | Category tab (Warn column)

In the Web Filter Administrator Guide index, see:

• How to: configure filtering

• How to: configure the Warn Option Setting

• How to: use library categories in a profile

5.1.3.2 Warn-strike with higher thresholds

Warn users before they access unacceptable content and may be locked out of the Internet. Set HTTPS filtering at the “high” level, configure Warning settings, and enable X Strikes Blocking. In the end user’s profile, set the Warn categories, and enable X Strikes Blocking. The end user may not be able to access all requested sites due to high settings, and will receive the warning message for excessive Internet usage. After being warned for the designated number of times defined in X Strikes Blocking, that user is locked out of all Internet/Intranet access.

To set up and use the warn option, go to:

• SYSTEM: System | Control | Filter window

• System | X Strikes Blocking window

•System | Warn Option Setting window

• POLICY: Policy | IP | member | member profile | Category tab (Warn column), and Filter Options tab (X Strikes Blocking enabled)

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

or POLICY: Policy | Global Group | Global Group Profile | Category tab (Warn column), and Filter

Options tab (X Strikes Blocking enabled)

In the Web Filter Administrator Guide index, see:

• How to: configure filtering

• How to: set up X Strikes Blocking

• How to: configure the Warn Option Setting

• How to: use library categories in a profile

• How to: set up profile options

5.1.3.3 Time Quota/Hit Quota

Limit time spent in PASSED categories to increase productivity. Enable the Quota Settings feature, and configure the Seconds Per Hit. Set up pertinent categories in the user’s profile with quotas so the user is notified and then locked out of those categories after all minutes in the quota have been used.

To set up the Quota feature and use quotas in profiles, go to:

• SYSTEM: System | Quota Setting window

• POLICY: Policy | IP | member | profile | Category tab (Quota column)

or POLICY: Policy | Global Group | Global Group Profile | Category tab (Quota column)

In the Web Filter Administrator Guide index, see:

• How to: set up Quotas

• How to: use library categories in a profile

5.1.3.4 Time Based Profiles

Schedule a profile to be used at a specific time. Set up one or more profiles for each user or group to be active at a scheduled time.

To set up and use time profiles, go to:

• POLICY: Policy | IP | member | Time Profile window

In the Web Filter Administrator Guide index, see:

• How to: set up a Time Profile

Best Filtering Practices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.3.5 Overall Quota

Restrict all quota time in a profile to improve productivity. Cap the amount of time a user spends in all quota-marked categories by enabling the Overall Quota option and specifying the number of minutes the end user can visit quota-marked categories before being notified and then locked out of these categories.

To set up the quota option and configure profiles to use the Overall Quota, go to:

• SYSTEM: System | Quota Setting window

• POLICY: Policy | IP | member profile | Category tab (Overall Quota)

or Policy | Global Group | Global Group Profile | Category tab (Overall Quota)

In the Web Filter Administrator Guide index, see:

• How to: set up Quotas

• How to: use library categories in a profile

5.1.3.6 Customize a Trustwave Supplied Category

Include region-specific content in a Trustwave Supplied category. Add/delete content to/from an existing Trustwave Supplied Category that only includes content pertinent to your organization or region that should be blocked. Apply this category to a profile.

To customize and use a Trustwave Supplied Category in a profile, go to:

• LIBRARY: Library | Category Groups | category group | category (add/delete URLs, URL Keywords, Search Engine Keywords)

• POLICY: Policy | IP | member | member profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: set up URLs in categories: Trustwave Supplied Categories

• How to: use library categories in a profile

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.3.7 Local category adds/deletes

Include region-specific content in a Custom category. Set up a custom category that only includes content pertinent to your organization or region that should be blocked. Apply this category to a profile.

To create a Custom Category and use it in a profile, go to:

• LIBRARY: Library | Category Groups | Custom Categories | Add Category (add URLs, URL Keywords, Search Engine Keywords)

• POLICY: Policy | IP | member | member profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: set up a custom category

• How to: use library categories in a profile

5.1.3.8 Custom Block/Warn/X Strikes/Quota pages

To customize pages, go to:

• SYSTEM: System | Customization | Common Customization window, and other applicable

customization windows

In the Web Filter Administrator Guide index, see:

• How to: customize pages

Best Filtering Practices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.4 Pass/Allow

5.1.4.1 Always Allow Custom Category

Create a white list custom category. Set up an Always Allow category and add all URLs deemed acceptable. Apply this category to all pertinent profiles. Please keep in mind that if any library category in this list is set up to be blocked in the Minimum Filtering Level, the Minimum Filtering Level setting will override the entry in the Always Allow custom category.

To create a white list custom category and use it in a profile, go to:

• LIBRARY: Library | Category Groups | Custom Categories | Add Category (add URLs, URL Keywords, Search Engine Keywords)

• POLICY: Policy | IP | member | member profile | Category tab

or POLICY: Policy | Global Group | Global Group Profile | Category tab

In the Web Filter Administrator Guide index, see:

• How to: set up a custom category

• How to: use library categories in a profile

5.1.4.2 URL exceptions

Use Exception URLs to let specified individuals bypass the Minimum Filtering Level. Enable the option to bypass the Minimum Filtering Level using exception URLs. Enter the exception URLs in the applicable profile.

To set up the Exception URL bypass for users to bypass blocked URLs, go to:

• POLICY: Policy | Global Group | Minimum Filtering Level | Min. Filter Bypass

• Policy | IP | member | Exception URL window

In the Web Filter Administrator Guide index, see:

• How to: configure the Minimum Filtering Level: Bypass Options

• How to: set up Exception URLs

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.4.3 IP exceptions

Use Exception URLs to grant individuals access to IPs blocked by the Minimum Filtering Level. Enable the option to bypass the Minimum Filtering Level using exception URLs. Enter the exception Internet/intranet IP addresses in the applicable profile.

To set up the Exception URL bypass for bypassing blocked IP addresses, go to:

• POLICY: Policy | Global Group | Minimum Filtering Level | Min. Filter Bypass

• Policy | IP | member | Exception URL window

In the Web Filter Administrator Guide index, see:

• How to: configure the Minimum Filtering Level: Bypass Options

• How to: set up Exception URLs

5.1.4.4 Override Accounts

Set up override accounts to grant specified users access to URLs blocked for general users. Enable the option to bypass the Minimum Filtering Level using an override account. Create the override account profile, including the accessible categories. To grant designated users access to globally-blocked categories, set up an Override Account at the Global Group level, or enable the option to allow the Minimum Filtering Level to be bypassed with an Override Account, and then set up the Override Account at the member level.

To set up an override account at the Global Group level, go to:

• POLICY: Policy | Global Group | Override Account window

To configure the bypass feature and set up a group level override account, go to:

• POLICY: Policy | Global Group | Minimum Filtering Level | Min. Filter Bypass

• Policy | IP | group | Override Account window

In the Web Filter Administrator Guide index, see:

• How to: set up an Override Account: Global Group

or:

• How to: configure the Minimum Filtering Level: Bypass Options

• How to: set up an Override Account: Group profile

Best Filtering Practices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

5.1.4.5 Pattern detection bypass

Allow specific IP addresses to always bypass filtering. Block all patterns with the exception of a list of specific IP addresses that should always bypass the filter.

To set up pattern detection whitelisting, go to:

• SYSTEM: System | Control | Filter window

• LIBRARY: Library | Pattern Detection Whitelist

In the Web Filter Administrator Guide index, see:

• How to: configure filtering

• How to: set up pattern detection whitelisting

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

500 series chassis front panel

700 series chassis front panel

6 LED Indicators and Buttons

6.1 Front Control Panels on 500 and 700 Series Units

Control panel buttons, icons, and LED indicators display on the right side of the 500 and 700 series model front panel. The buttons let you perform a function on the unit, while an LED indicator corresponding to an icon alerts you to the status of that feature on the unit.

The buttons and LED indicators for the depicted icons function as follows:

Table 1: Buttons and icons

Item Explanation

Power (button) – When the power button is pressed, the main power to the server is turned

on. When the power button is pressed again, the main power to the server is removed but standby power is still supplied to the server.

UID (button) and U icon – On a 700 series unit, when the UID button is pressed, a steady blue LED displays on both the front and rear of the chassis. These indicators are used for easy location of the chassis in a large stack configuration. The LED remains on until the button is pressed a second time.

Overheat/Fan Fail (icon) – This LED is unlit unless the chassis is overheated. A flashing red LED indicates a fan failure. A steady red LED (on and not flashing) indicates an overheating condition, which may be caused by cables obstructing the airflow in the system or the ambient room temperature being too warm.

NIC2 (icon) – A flashing green LED indicates network activity on LAN2. On a 500 series unit, the LED is a steady green with link connectivity, and unlit if there with no link connectivity.

NIC1 (icon) – A flashing green LED indicates network activity on LAN1. On a 500 series unit, the LED is a steady green with link connectivity, and unlit if there with no link connectivity.

HDD (icon) – In addition to displaying in the control panel, this icon also displays on the front panel on each hard drive carrier. Hard drive activity is indicated by a flashing amber LED in the control panel, and a flashing green LED on a drive carrier. An unlit LED on a drive carrier may indicate a hard drive failure.

RESET (button) – The RESET button is used for rebooting the server.

LED Indicators and Buttons

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

Table 1: Buttons and icons

Item Explanation

Power (icon) – The LED is unlit when the server is turned off. A steady green LED indicates

power is being supplied to the unit’s power supplies.

6.2 Rear Panel on the 700 Series Unit

Power Supplies (LED indicators) – The power supplies are located at the right on the rear of the chassis. An LED indicator is located above each of the power plugs.

UID (LED indicator) – On the rear of the 700 series chassis, to the right of the LAN ports, a steady blue UID LED indicator displays when the UID button on the control panel is pressed. This LED remains lit until the UID button is pressed again.

6.3 Front Control Panel on a 300 Series Unit

In addition to executing functions listed in the LCD panel menu, the keypad on the front of the server is also

used for performing basic server functions.

• Boot up - Depress and hold the check mark key for

3 seconds.

• Reboot - Depress and hold the check mark key for

10 seconds.

• Shut down - Depress and hold the ‘X’ key for 10

seconds.

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

7 Regulatory Specifications and Disclaimers

7.1 Declaration of the Manufacturer or Importer

7.1.1 Safety Com plian ce

USA: UL 60950-1 1st ed. 2007

Europe: Low Voltage Directive (LVD) 2006/95/EC to CB Scheme IEC 60950-1: 2001

Canada CSA C22.2 No. 60950-1 1st ed. 2006

International: IEC 60950-1 1st ed. 2001

7.1.2 Electromagnetic Compatibility (EMC)

USA: FCC CFR47 Part 15 Subpart B

Canada: IC ICES-003 Class A Limit

Europe: EMC Directive, 2004/108/EC

7.1.3 Federal Communications Commission (FCC) Class A Notice (USA).

Note: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense.

7.1.4 FCC Declaration of Conformity

Models: 300-001-001, 500-003-001, 700-004-001

7.1.5 Electrom agnetic C ompatibility Class A Notice

7.1.5.1 Industry Canada Equipment Standard for Digital Equipment (ICES-003)

Regulatory Specifications and Disclaimers

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

7.1.6 EC Declaration of Conformity

7.1.6.1 European Community Directives Requirement (CE)

Manufacturer’s Name: M86 Security

Manufacturer’s Address:

Application of Council Directive(s): Low Voltage • 2006/95/EC

Standard(s): Safety • EN60950-1:2001+A11:2004

828 W. Taft Avenue

Orange, CA 92865

EMC • 2004/108/EC

EMC • EN55022:2006+A1:2007

• EN55024:1998+A2:2003

• IEC CISPR 22:2008

• IEC CISPR 24:1997+A1:2001+ A2:2002

• EN61000-3-2:2006

• EN61000-3-3:2008

• CFR47 Part 15 Subpart B: 2009

Product Name(s): Security Appliance

Product Model Number(s): 300-001-001, 500-003-001, 700-004-001

Year in which conformity is declared: 2010

All hardware components supplied in this unit’s shipping carton are certified by our vendors to be RoHS compliant.

I, the undersigned, hereby declare that the equipment specified above conforms to the above Directive(s) and Standard(s).

Location: Orange, CA, USA Signature:

Date: April 5, 2010 Full Name: Gregory P. Smith

Position: Director, Engineering Operations

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

Appendices

Appendix A: HyperTerminal setup procedures

If you want to use a serial port connection for the initial configuration of the Web Filter, you can use the

following procedures to launch HyperTerminal and connect to the Web Filter.

Note: HyperTerminal is available with Windows XP, but it is not included in later Windows OS versions. If you do not have an equivalent type of terminal emulator program installed on your workstation, Hilgraeve, Inc., the maker of HyperTerminal, offers HyperTerminal Private Edition for Windows Vista and Windows 7. A free trial of HyperTerminal is available on Hilgraeve’s Web site at

http://www.hilgraeve.com/hyperterminal.html

1. Launch HyperTerminal by going to Start | Programs | Accessories | Communications | HyperTerminal:

(accessed May 22, 2012).

2. In the Connection Description dialog box, enter any session Name, and then click OK to open the Connect To dialog box:

Appendices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3. At the Connect using field, select the COM port assigned to the serial port on the laptop (probably “COM1”), and then click OK to open the Properties dialog box, displaying the Port Settings tab:

4. Specify the following session settings:

• Bits per second: 9600

• Data bits: 8

•Parity: None

• Stop bits: 1

• Flow control: Hardware

• VT100 emulation settings

5. Click OK to connect to the HyperTerminal session:

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

6. In the HyperTerminal session window, go to File | Properties to open the Properties dialog box, displaying the Connect To and Settings tabs:

7. Click the Settings tab, and at the Emulation menu select “VT100”.

8. Click OK to close the dialog box, and to go to the Web Filter login screen.

Appendices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

Appendix B: Accepting Security Certificates

When you connect to the Web Filter, you may need to accept a security certificate exception. This is a normal behavior for the certificate used by this product. This appendix provides detailed walk-throughs of the procedure in several supported web browsers.

B.1 Accept the Security Certificate in Firefox

1. If using a Firefox browser, in the page “This Connection is Untrusted,” click the option I Understand the Risks:

2. In the next set of instructions that display, click Add Exception...:

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

3. Clicking Add Exception opens the Add Security Exception window:

4. In the Add Security Exception window, click Get Certificate and wait a few seconds until the security certificate is obtained by the server.

5. With the check box Permanently store this exception selected, click Confirm Security Exception to open the Security warning dialog box:

6. With the check box “Always trust content from this publisher.” populated, click Yes to close the Security warning dialog box and to access the login window of the Web Filter user interface:

Appendices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

B.2 Temporarily Accept the Security Certificate in IE

If using an IE browser, in the page “There is a problem with this website's security certificate.”, click Continue to this website (not recommended):

Selecting this option displays the Web Filter login page with the address field and the Certificate Error button to the right of the field shaded a reddish color:

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

B.3 Accept the Security Certificate in Safari

If using a Safari browser, the window explaining “Safari can't verify the identity of the website...” opens:

1. Click Show Certificate to open the certificate information box at the bottom of this window:

Appendices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

2. Click the “Always trust...” check box and then click Continue:

3. You will be prompted to enter your password in order to install the certificate.

B.4 Accept the Security Certificate in Chrome

If using a Chrome browser, in the page “This is probably not the site you are looking for!” click the button Proceed anyway:

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

1. Clicking this button launches the Web Filter login window:

Note: With Chrome, you must follow this procedure every time you connect to Web Filter.

Appendices

Trustwave Web Filter - Appliance Installation Guide - Version 5.1.00

Trustwave 300, 500, 700 Installation Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

Legal Notice

Formatting Conventions

Table of Contents

List of Figures

1 Web Filter Appliance Introduction

1.1 About this Document

2 Service Information

2.1 Trustwave Technical Support Call Procedures

3 Preliminary Setup Procedures

3.1 Unpack the Unit from the Carton

3.2 Select a Site for the Server

3.2.1 300 Series Server Setup Procedures

3.2.1.1 Set Top Applications

3.2.1.2 Optional 1U 2-Unit Tray Kit Applications

3.3 Rack Mount the Server

3.3.1 Rack Setup Precautions

3.3.2 Rack Mount Instructions for 500 Series Servers

3.3.2.1 Rack Setup Suggestions

3.3.2.2 Install the Inner Slides

3.3.2.3 Install the Outer Slides

3.3.2.4 Install the Slide Assemblies to the Rack

3.3.2.5 Install the Chassis into the Rack

3.3.3 Rack Mount Instructions for 700 Series Servers

3.3.3.1 Rack Setup Suggestions

3.3.3.2 Identify the Sections of the Rack Rails

3.3.3.3 Install the Inner Rails

3.3.3.4 Install the Outer Rails

3.3.3.5 Install the Server into the Rack

3.3.3.6 Install the Server into a Telco Rack

3.3.4 Install the Bezel on the 500 and 700 Series Chassis

3.4 Check the Power Supply

3.4.1 Power Supply Precautions

3.5 General Safety Information

3.5.1 Server Operation and Maintenance Precautions

3.5.2 AC Power Cord and Cable Precautions

3.5.3 Electrical Safety Precautions

3.5.4 Motherboard Battery Precautions

4 Install the Server

4.1 Setup Procedures

4.1.1 Quick Start Setup Requirements

4.1.2 LCD Panel Setup Requirements

4.2 Quick Start Setup Procedures

4.2.1 Link the Workstation to the Web Filter

4.2.1.1 Monitor and Keyboard Setup

4.2.1.2 Serial Console Setup

Figure 1: Rear of 300 series chassis with serial port identified

Figure 2: Portion of 500 series chassis rear with serial port identified

Figure 3: Portion of 700 series chassis rear with serial port identified

4.2.2 Power on the Web Filter

4.2.2.1 Power up a 300 Series Model

4.2.2.2 Power up a 500 or 700 Series Model

4.2.3 Serial Connection Setup Procedures

4.2.4 Login screen

4.2.5 Quick Start menu screen

4.2.6 Quick Start menu: administration menu

4.2.6.1 Change filtering mode

4.2.6.2 Configure network interface LAN1

4.2.6.3 Configure network interface LAN2

4.2.6.4 Configure bridge network interface

4.2.6.5 Configure default gateway

4.2.6.6 Configure DNS servers

4.2.6.7 Configure host name

4.2.6.8 Time Zone regional setting

4.2.6.9 Additional Administrative Options

4.2.7 System Status screen

4.2.8 Log Off, Disconnect the Peripherals

4.3 LCD Panel Setup Procedures

4.3.1 LCD Panel

4.3.1.1 LCD panel keypad

4.3.1.2 LCD Menu

4.3.2 Trustwave menu

4.3.2.1 WF Filter Mode

4.3.2.2 IP / LAN1 and 2

4.3.2.3 IP / Bridge

4.3.2.4 Gateway

4.3.2.5 DNS 1 and 2