Web Gateway 7.1.5 Product Guide - McAfee

Proxies and caching
Network modes 3
Sample configuration – Director and scanning nodes in transparent bridge mode
This section describes a procedure for setting up two appliances in transparent bridge mode.
One of them is configured as a director node that directs data packets, the other as a scanning node
that only filters data packets, but does not direct them.
Set up a director node
To configure an appliance as a director node in transparent bridge mode, you need to enable this mode
and configure at least one network interface for the transparent bridge functions. The director role is
configured by giving the node an appropriate priority value.
Complete the following procedure to set up a director node:
1 Go to Configuration | Appliance.
2 On the appliances tree, go to the appliance you want to set up as a director node and select Network.
3 Select a still unused network interface of the appliance to use it as an interface of the transparent
bridge. However, do not enable it yet.
4 On the Advanced tab, select Bridge enabled for this interface.
5 In the Name field, type ibr0 as the name of the interface.
6 On the IPv4 tab, under IP Settings, select Disable IPv4.
7 Click Save Changes. You are logged out and logged on to the appliance again.
8 Go to Configuration | Appliances and select Network again. An additional network interface
named ibr0 is now available. Select this interface.
9 On the IPv4 tab, configure an IP address, a subnet mask, and a default route for ibr0. Then select
the checkbox next to ibr0 to enable this interface.
10 Select the interface that is currently used to access the appliance to assign it to ibr0.
11 On the Advanced tab, select Bridge enabled.
12 In the Name field, type ibr0 as the name of the interface.
13 On the IPv4 tab, under IP Settings, select Disable IPv4.
14 Enable the network interface you assigned to ibr0 in step 3.
15 Select Central Management.
16 In the Central Management Settings section, add the IP address you configured for ibr0 to the
list provided under IP address for Central Management communication.
17 Select Proxies (HTTP(S), FTP, ICAP, and IM).
18 Under Network Setup, select Transparent Bridge.
Note: After selecting this mode, specific Transparent Bridge settings appear below the Network Setup
settings.
19 Set Director priority to a value > 0.
20 Configure proxy ports and port redirects for HTTP and FTP as needed.
21 Configure also IP spoofing as needed.
22 In the Management IP field, type the IP address you configured for ibr0.
23 Click Save Changes.
If you are going to configure another appliance as a director node, be sure to configure the same proxy
ports and port redirects as for the initial director node and to add the port redirects in the same order
as for that node.
McAfee Web Gateway 7.1.5 Product Guide 47