McAfee WebShield e500 Guide d'installation

INSTALLATION GUIDE

VERSION 2.5

WebShield e500 Appliance

English/Deutsch/Français/ ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆

NAI-525-0061-3

Issued MARCH 2002 / McAfee WebShield e500 Appliance version 2.5

Installation Guide iii

Contents

Ports and connectors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .vii

Mounting kit instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . viii

User interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .x

Installation Guide — English . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-1

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-1

Copyright and trademark attributions . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-2

Power and safety information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-3

About the WebShield e500 Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-5

Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-6

What comes with the appliance? . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-10

Getting started with the appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-13

Who should install the appliance? . . . . . . . . . . . . . . . . . . . . . . . . . ENG-13

Ports and connectors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-14

Gathering the configuration information . . . . . . . . . . . . . . . . . . . . ENG-18

Installing the appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-28

Configuring the network settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-32

Configuring the protocol settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-40

Configuring the appliance’s protocols . . . . . . . . . . . . . . . . . . . . . . ENG-41

Configuring the automatic updating feature . . . . . . . . . . . . . . . . . ENG-47

Configuring your other equipment . . . . . . . . . . . . . . . . . . . . . . . . . ENG-48

Testing your configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-50

Using the appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-53

Backing up and restoring your settings . . . . . . . . . . . . . . . . . . . . ENG-55

Restoring and upgrading the appliance’s software . . . . . . . . . . . ENG-57

Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-60

Hardware problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-60

User interface problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ENG-63

Contents

iv McAfee WebShield e500 Appliance version 2.5

Installationshandbuch – Deutsch . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-1

Übersicht . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-1

Copyright und Marken . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-2

Informationen zu Stromversorgung und Sicherheit . . . . . . . . . . . . . . . . DEU-3

Infos zu WebShield e500 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-5

Funktionen . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-6

Lieferumfang des WebShield e500 . . . . . . . . . . . . . . . . . . . . . . . . . DEU-11

Erste Schritte mit dem Gerät . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-14

Wer das Gerät installieren sollte . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-14

Ports und Stecker . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-15

Zusammenfassen der Konfigurationsinformationen . . . . . . . . . . DEU-20

Installation des McAfee WebShield e500 . . . . . . . . . . . . . . . . . . . . . . . . DEU-32

Konfigurieren der Netzwerkeinstellungen . . . . . . . . . . . . . . . . . . . . . . . DEU-36

Konfigurieren der Protokolleinstellungen . . . . . . . . . . . . . . . . . . . . . . . DEU-45

Konfigurieren der Protokolle des WebShield e500 . . . . . . . . . . . . DEU-46

Konfigurieren der Funktion zum automatischen Aktualisieren . . DEU-52

Konfigurieren weiterer Geräte . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-53

Testen Ihrer Konfiguration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-55

Verwenden des WebShield e250 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-59

Sichern und Wiederherstellen der Einstellungen . . . . . . . . . . . . . DEU-61

Wiederherstellen und Aktualisieren der Gerätesoftware . . . . . . . DEU-64

Fehlerbehebung . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-68

Hardwarefehler . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . DEU-68

Probleme mit der Benutzeroberfläche . . . . . . . . . . . . . . . . . . . . . . DEU-71

Installation Guide v

Contents

Guide d'installation – Français . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .FRA-1

Présentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-1

Copyright et attribution de marques commerciales . . . . . . . . . . . . . . . . FRA-2

Informations sur l'alimentation et la sécurité . . . . . . . . . . . . . . . . . . . . . . FRA-3

A propos de l'application WebShield e500 . . . . . . . . . . . . . . . . . . . . . . . . FRA-5

Fonctionnalités . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-6

Contenu fourni avec l'application . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-10

Mise en route de l'application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-13

Installateur de l'application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-13

Ports et connecteurs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-14

Collecter les informations de configuration . . . . . . . . . . . . . . . . . FRA-19

Installation de l'application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-31

Configuration des paramètres réseau . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-35

Configuration des paramètres de protocole . . . . . . . . . . . . . . . . . . . . . FRA-45

Configuration des protocoles de l'application . . . . . . . . . . . . . . . FRA-46

Configuration de la fonctionnalité de mise à jour automatique . FRA-52

Configuration des autres équipements . . . . . . . . . . . . . . . . . . . . . FRA-53

Tester votre configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-55

Utilisation de l'application . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-59

Sauvegarde et restauration de vos paramètres . . . . . . . . . . . . . . FRA-61

Restauration et mise à niveau du logiciel de l'application . . . . . . FRA-63

Dépannage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-67

Problèmes matériels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-67

Problèmes d'interface utilisateur . . . . . . . . . . . . . . . . . . . . . . . . . . FRA-70

Contents

vi McAfee WebShield e500 Appliance version 2.5

䉟䊮䉴䊃䊷䊦

䉟䊮䉴䊃䊷䊦䉟䊮䉴䊃䊷䊦

䉟䊮䉴䊃䊷䊦䉧䉟䊄

䉧䉟䊄䉧䉟䊄

䉧䉟䊄䋭

䋭䋭

䋭 ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 1

᭎ⷐ

᭎ⷐ᭎ⷐ

᭎ⷐ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 1

⪺૞ᮭ

⪺૞ᮭ⪺૞ᮭ

⪺૞ᮭ 䈫

䈫䈫

䈫໡ᮡ

໡ᮡ໡ᮡ

໡ᮡ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 2

㔚Ḯ

㔚Ḯ㔚Ḯ

㔚Ḯ䈍䉋䈶

䈍䉋䈶䈍䉋䈶

䈍䉋䈶቟ో

቟ో቟ో

቟ో䈮

䈮䈮

䈮㑐

㑐㑐

㑐䈜䉎

䈜䉎䈜䉎

䈜䉎ᖱႎ

ᖱႎᖱႎ

ᖱႎ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 3

WebShield e500 䉝䊒䊤䉟䉝䊮䉴

䉝䊒䊤䉟䉝䊮䉴䉝䊒䊤䉟䉝䊮䉴

䉝䊒䊤䉟䉝䊮䉴䈮䈧䈇䈩

䈮䈧䈇䈩䈮䈧䈇䈩

䈮䈧䈇䈩 . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 5

⵾ຠ

⵾ຠ⵾ຠ

⵾ຠ䈱

䈱䈱

䈱․⦡

․⦡․⦡

․⦡ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 6

䊌䉾䉬䊷䉳

䊌䉾䉬䊷䉳䊌䉾䉬䊷䉳

䊌䉾䉬䊷䉳䈱

䈱䈱

䈱ౝኈ

ౝኈౝኈ

ౝኈ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 10

䉝䊒䊤䉟䉝䊮䉴

䉝䊒䊤䉟䉝䊮䉴䉝䊒䊤䉟䉝䊮䉴

䉝䊒䊤䉟䉝䊮䉴䈱

䈱䈱

䈱Ḱ஻

Ḱ஻Ḱ஻

Ḱ஻ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 13

䉟䊮䉴䊃䊷䊦

䉟䊮䉴䊃䊷䊦䉟䊮䉴䊃䊷䊦

䉟䊮䉴䊃䊷䊦䈮

䈮䈮

䈮ᔅⷐ

ᔅⷐᔅⷐ

ᔅⷐ䈭

䈭䈭

䈭䉴䉨䊦

䉴䉨䊦䉴䉨䊦

䉴䉨䊦 . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 13

䊘䊷䊃

䊘䊷䊃䊘䊷䊃

䊘䊷䊃䈫

䈫䈫

䈫䉮䊈䉪䉺

䉮䊈䉪䉺䉮䊈䉪䉺

䉮䊈䉪䉺 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 14

⸳ቯᖱႎ

⸳ቯᖱႎ⸳ቯᖱႎ

⸳ቯᖱႎ䈱

䈱䈱

䈱෼㓸

෼㓸෼㓸

෼㓸 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 19

䉝䊒䊤䉟䉝䊮䉴

䉝䊒䊤䉟䉝䊮䉴䉝䊒䊤䉟䉝䊮䉴

䉝䊒䊤䉟䉝䊮䉴䈱

䈱䈱

䈱䉟䊮䉴䊃䊷䊦

䉟䊮䉴䊃䊷䊦䉟䊮䉴䊃䊷䊦

䉟䊮䉴䊃䊷䊦 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 31

䊈䉾䊃䊪䊷䉪

䊈䉾䊃䊪䊷䉪䊈䉾䊃䊪䊷䉪

䊈䉾䊃䊪䊷䉪᭴ᚑ

᭴ᚑ᭴ᚑ

᭴ᚑ䈱

䈱䈱

䈱⸳ቯ

⸳ቯ⸳ቯ

⸳ቯ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 35

䊒䊨䊃䉮䊦

䊒䊨䊃䉮䊦䊒䊨䊃䉮䊦

䊒䊨䊃䉮䊦䈱

䈱䈱

䈱⸳ቯ

⸳ቯ⸳ቯ

⸳ቯ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 43

䊒䊨䊃䉮䊦

䊒䊨䊃䉮䊦䊒䊨䊃䉮䊦

䊒䊨䊃䉮䊦䈱

䈱䈱

䈱⸳ቯ

⸳ቯ⸳ቯ

⸳ቯ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 44

⥄േ

⥄േ⥄േ

⥄േ䉝䉾䊒䊂䊷䊃

䉝䉾䊒䊂䊷䊃䉝䉾䊒䊂䊷䊃

䉝䉾䊒䊂䊷䊃䈱

䈱䈱

䈱⸳ቯ

⸳ቯ⸳ቯ

⸳ቯ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 50

ઁ

ઁઁ

ઁ䈱

䈱䈱

䈱ᯏེ

ᯏེᯏེ

ᯏེ䈱

䈱䈱

䈱⸳ቯ

⸳ቯ⸳ቯ

⸳ቯ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 51

⸳ቯ

⸳ቯ⸳ቯ

⸳ቯ䈱

䈱䈱

䈱䊁䉴䊃

䊁䉴䊃䊁䉴䊃

䊁䉴䊃 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 53

䉝䊒䊤䉟䉝䊮䉴

䉝䊒䊤䉟䉝䊮䉴䉝䊒䊤䉟䉝䊮䉴

䉝䊒䊤䉟䉝䊮䉴䈱

䈱䈱

䈱૶↪ᣇᴺ

૶↪ᣇᴺ૶↪ᣇᴺ

૶↪ᣇᴺ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 57

⸳ቯ

⸳ቯ⸳ቯ

⸳ቯ䈱

䈱䈱

䈱䊋䉾䉪䉝䉾䊒

䊋䉾䉪䉝䉾䊒䊋䉾䉪䉝䉾䊒

䊋䉾䉪䉝䉾䊒䈫

䈫䈫

䈫ᓳర

ᓳరᓳర

ᓳర . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 59

䉸䊐䊃䉡䉢䉝

䉸䊐䊃䉡䉢䉝䉸䊐䊃䉡䉢䉝

䉸䊐䊃䉡䉢䉝䈱

䈱䈱

䈱ᓳర

ᓳరᓳర

ᓳర 䈫

䈫䈫

䈫䉝䉾䊒䉫䊧䊷䊄

䉝䉾䊒䉫䊧䊷䊄䉝䉾䊒䉫䊧䊷䊄

䉝䉾䊒䉫䊧䊷䊄 . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 61

䊃䊤䊑䊦䉲䊠䊷䊁䉞䊮䉫

䊃䊤䊑䊦䉲䊠䊷䊁䉞䊮䉫䊃䊤䊑䊦䉲䊠䊷䊁䉞䊮䉫

䊃䊤䊑䊦䉲䊠䊷䊁䉞䊮䉫 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 65

䊊䊷䊄䉡䉢䉝

䊊䊷䊄䉡䉢䉝䊊䊷䊄䉡䉢䉝

䊊䊷䊄䉡䉢䉝䈮

䈮䈮

䈮㑐

㑐㑐

㑐䈜䉎

䈜䉎䈜䉎

䈜䉎໧㗴

໧㗴໧㗴

໧㗴 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 65

䊡䊷䉱

䊡䊷䉱䊡䊷䉱

䊡䊷䉱䉟䊮䉺䊷䊐䉢䊷䉴

䉟䊮䉺䊷䊐䉢䊷䉴䉟䊮䉺䊷䊐䉢䊷䉴

䉟䊮䉺䊷䊐䉢䊷䉴䈮

䈮䈮

䈮㑐

㑐㑐

㑐䈜䉎

䈜䉎䈜䉎

䈜䉎໧㗴

໧㗴໧㗴

໧㗴 . . . . . . . . . . . . . . . . . . . . ᣣᧄ⺆

ᣣᧄ⺆ᣣᧄ⺆

ᣣᧄ⺆ - 67

Installation Guide vii

Ports and connectors

Ports und Stecker

Ports et connecteurs

䊘䊷䊃

䊘䊷䊃䊘䊷䊃

䊘䊷䊃䈫

䈫䈫

䈫䉮䊈䉪䉺

䉮䊈䉪䉺䉮䊈䉪䉺

䉮䊈䉪䉺

Two hard disk drives Zwei Festplattenlaufwerke Deux unités de disque dur

䊊䊷䊄䊂䉞䉴䉪 2 ୘

CD-ROM drive CD-ROM-Laufwerk Lecteur CD-ROM

CD-ROM 䊄䊤䉟䊑

Control panel Bedienungsfeld Panneau de contrôle

䉮䊮䊃䊨䊷䊦䊌䊈䊦

Power socket Netzanschluß Prise d'alimentation

㔚Ḯ䉸䉬䉾䊃

Power supply switch Stromversorgungsschalter Interrupteur d'alimentation

électrique

㔚Ḯ䉴䉟䉾䉼

Keyboard port Tastatur-Port Port clavier

䉨䊷䊗䊷䊄䊘䊷䊃

Monitor port Monitor-Port Port écran

䊝䊆䉺䊘䊷䊃

LAN1 port (NIC 1) LAN1-Port (NIC 1) Port réseau local 1 (carte

réseau 1)

LAN1 䊘䊷䊃 (NIC 1)

LAN2 port (NIC 2) LAN2-Port (NIC 2) Port réseau local 1 (carte

réseau 2)

LAN2 䊘䊷䊃 (NIC 2)

A B C

D E G H IF

A

B

C

D

E

F

G

H

I

viii McAfee WebShield e500 Appliance version 2.5

Mounting kit instructions

Anweisungen für den Montagerahmen

Instructions de montage

䊙䉡䊮䊃䉨䉾䊃

䊙䉡䊮䊃䉨䉾䊃䊙䉡䊮䊃䉨䉾䊃

䊙䉡䊮䊃䉨䉾䊃䈱

䈱䈱

䈱⚵

⚵⚵

⚵䉂

䉂䉂

䉂┙

┙┙

┙䈩

䈩䈩

䈩ᣇ

ᣇᣇ

ᣇ

Supplied:

Im Lieferumfang:

Fourni:

หᪿ

หᪿหᪿ

หᪿ 䈘䉏䈩䈇䉎

䈘䉏䈩䈇䉎䈘䉏䈩䈇䉎

䈘䉏䈩䈇䉎ㇱຠ

ㇱຠㇱຠ

ㇱຠ :

22

882222

Required:

Zusätzlich

erforderlich:

Requis:

ᔅⷐ

ᔅⷐᔅⷐ

ᔅⷐ䈭

䈭䈭

䈭Ꮏౕ

ᎿౕᎿౕ

Ꮏౕ :

1

2

3

Installation Guide ix

Standard rack / Standardgestell/Rack standard / ᮡḰ

ᮡḰᮡḰ

ᮡḰ䊤䉾䉪

䊤䉾䉪䊤䉾䉪

䊤䉾䉪 :

Telco rack / Telco-Gestell / Rack Telco/ Telco ␠⵾

␠⵾␠⵾

␠⵾䊤䉾䉪

䊤䉾䉪䊤䉾䉪

䊤䉾䉪 :

4

5

4

5

x McAfee WebShield e500 Appliance version 2.5

User interface

Benutzeroberfläche

Interface utilisateur

䊡䊷䉱

䊡䊷䉱䊡䊷䉱

䊡䊷䉱䉟䊮䉺䊷䊐䉢䊷䉴

䉟䊮䉺䊷䊐䉢䊷䉴䉟䊮䉺䊷䊐䉢䊷䉴

䉟䊮䉺䊷䊐䉢䊷䉴

Your user interface might look slightly different depending on the version and language.

Ihre Benutzeroberfläche kann je nach Version und Sprache anders aussehen.

L'interface utilisateur peut présenter de légères différences selon la version et la langue

utilisées.

૶↪䈜䉎 ⸒⺆䈫䊋䊷䉳䊢䊮䈮䉋䈦䈩䇮䉟䊮䉺䊷䊐䉢䊷䉴䈱ᄖⷰ䈏ᄙዋ⇣䈭䉎႐ว䈏䈅䉍䉁䈜䇯

Navigation bar Navigationsleiste Barre de navigation

䊅䊎䉭䊷䉲䊢䊮䊋䊷

Page Seite Page

䊕䊷䉳

Panel Dialogfeld Panneau

䊕䉟䊮

Control buttons Steuerungsschaltflächen Boutons de contrôle

䉮䊮䊃䊨䊷䊦䊗䉺䊮

A

D

B

C

A

B

C

D

Installation Guide ENG - 1

1Installation Guide — English

Overview

This Installation Guide provides the information you need to install and

configure your WebShield appliance. Please refer to the following sections for

specific information:

Copyright and trademark attributions Page 2

Power and safety information Page 3

About the WebShield e500 Appliance Page 5

• Features Page 6

• What comes with the appliance? Page 10

Getting started with the appliance Page 13

• Who should install the appliance? Page 13

• Ports and connectors Page 14

• Gathering the configuration information Page 18

Installing the appliance Page 28

Configuring the network settings Page 32

Configuring the protocol settings Page 40

• Configuring the appliance’s protocols Page 41

• Configuring the automatic updating feature Page 47

• Configuring your other equipment Page 48

• Testing your configuration Page 50

Using the appliance Page 53

• Backing up and restoring your settings Page 55

• Restoring and upgrading the appliance’s software Page 57

Troubleshooting Page 60

• Hardware problems Page 60

• User interface problems Page 63

Installation Guide — English

ENG - 2 McAfee WebShield e500 Appliance version 2.5

Copyright and trademark attributions

COPYRIGHT

be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language

in any form or by any means without the written permission of Networks Associates Technology,

Inc., or its suppliers or affiliate companies. To obtain this permission, write to the attention of

the Network Associates legal department at: 3965 Freedom Circle, Santa Clara, California 95054,

or call +1-972-308-9960.

TRADEMARK ATTRIBUTIONS

Active Security, Active Security (in Katakana), ActiveHelp, ActiveShield, AntiVirus Anyware and design, Bomb

Shelter, Certified Network Expert, Clean-Up, CleanUp Wizard, CNX, CNX Certification Certified Network Expert

and design, CyberCop, CyberCop (in Katakana), CyberMedia, CyberMedia UnInstaller, Design (stylized N), Disk

Minder, Distributed Sniffer System, Distributed Sniffer System (in Katakana), Dr Solomon’s, Dr Solomon’s label,

Enterprise SecureCast, Enterprise SecureCast (in Katakana), EZ SetUp, First Aid, ForceField, GMT, GroupShield,

GroupShield (in Katakana), Guard Dog, HelpDesk, HomeGuard, Hunter, ISDN TEL/SCOPE, LANGuru,

LANGuru (in Katakana), M and design, Magic Solutions, Magic Solutions (in Katakana), Magic University,

MagicSpy, MagicTree, McAfee, McAfee (in Katakana), McAfee and design, MultiMedia Cloaking, Net Tools, Net

Tools (in Katakana), NetCrypto, NetOctupus, NetScan, NetShield, NetStalker, Network Associates, NetXray,

NotesGuard, Nuts & Bolts, Oil Change, PC Medic, PC Medic 97, PCNotary, PGP, PGP (Pretty Good Privacy),

Pretty Good Privacy, PrimeSupport, Recoverkey, Recoverkey – International, Registry Wizard, ReportMagic,

RingFence, Router PM, SalesMagic, SecureCast, Service Level Manager, ServiceMagic, SmartDesk, Sniffer, Sniffer

(in Hangul), SniffMaster, SniffMaster (in Hangul), SniffMaster (in Katakana), SniffNet, Stalker, SupportMagic,

TIS, TMEG, TNV, TVD, TNS, Total Network Security, Total Network Visibility, Total Network Visibility (in

Katakana), Total Service Desk, Total Virus Defense, Trusted Mail, UnInstaller, Virex, Virus Forum, ViruScan,

VirusScan, WebScan, WebShield, WebShield (in Katakana), WebSniffer, WebStalker, WebWall, Who’s Watching

Your Network, WinGauge, Your E-Business Defender, ZAC 2000, Zip Manager are registered trademarks of

Network Associates, Inc. and/or its affiliates in the US and/or other countries. All other registered and

unregistered trademarks in this document are the sole property of their respective owners.

LICENSE AGREEMENT

NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT

CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE GENERAL

TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW

WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE CONSULT THE SALES AND OTHER

RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANIES YOUR

SOFTWARE PACKAGING OR THAT YOU HAVE RECEIVED SEPARATELY AS PART OF THE

PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEB

SITE FROM WHICH YOU DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE

TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF

APPLICABLE, YOU MAY RETURN THE PRODUCT TO NETWORK ASSOCIATES OR THE PLACE OF

PURCHASE FOR A FULL REFUND.

Installation Guide ENG - 3

Installation Guide — English

Power and safety information

 IMPORTANT: To ensure safe operation of the WebShield e500

Appliance, read all of the following information carefully before installing

the appliance.

Power requirements

• Ensure that the power cord is suitable for the country of use. If it is not

suitable, contact your supplier. Do not attempt to modify the power cord.

• The power outlet to which you connect the appliance must meet all

applicable electrical standards for the country of use.

• When connecting the appliance to the power outlet and other equipment,

ensure that the cables are stowed or grouped safely, so that no one will trip

over them.

Using the appliance

• Do not open the appliance’s case. There are no user-serviceable parts

inside.

• The appliance is heavy. When you lift it, ensure that you have a firm grip

and carry it correctly, so that you do not injure yourself or damage the

appliance.

• Place the appliance on a flat sturdy surface, such as a desk, or secure it in a

rack, such as a 19” (inch) rack. Ensure that the surface or rack can support

the weight of the appliance, and that it cannot fall.

• Do not place any heavy objects on top of the appliance.

• The appliance’s network ports are only suitable for use with RJ-45

connectors. Do not use them with telephone equipment unless the socket

to which you are connecting is specifically intended for 10Mbps or

100Mbps Ethernet network use.

• In the unlikely event that the appliance encounters a hardware failure, turn

off the appliance and disconnect it from the power outlet. Contact your

supplier.

Installation Guide — English

ENG - 4 McAfee WebShield e500 Appliance version 2.5

Operating conditions

• Ensure that the environmental conditions surrounding the appliance are

suitable for standard computer use. Check that it is not damp, with

adequate ventilation. The operating temperature must remain within

10–40

°C, and the humidity within 0–90%. If these values are exceeded, the

appliance could fail to operate.

• When you use the appliance, ensure that there is a gap of at least 1” (25mm)

behind the case, so that the appliance can cool itself properly.

• Ensure that liquid and other objects do not enter the appliance through its

ventilation holes or fan grill.

Installation Guide ENG - 5

Installation Guide — English

About the WebShield e500 Appliance

The WebShield e500 Appliance (Figure 1-1) is a purpose-built anti-virus and

content-scanning server containing powerful WebShield software. It is fully

configurable through a web browser, and it can be used in almost any network

topology. It provides virus scanning for the following protocols:

• Simple Mail Transfer Protocol (SMTP) e-mail messages

• File Transfer Protocol (FTP) exchanges

• Hypertext Transfer Protocol (HTTP) web browsing

• Post Office Protocol version 3 (POP3) Internet e-mail messages

With additional features such as content scanning, anti-relay and anti-spam,

the appliance provides complete protection for your Internet gateway,

preventing undesirable material entering and leaving your organization.

The WebShield e500 Appliance shares its resources between the protocols that

it scans, checking inbound and outbound traffic as required. It can detect,

clean, log, and quarantine infected e-mail items, including compressed files

and macros, preventing them from reaching their intended recipients. It can

also block infected HTTP, FTP and POP3 items.

Using the appliance to perform your anti-virus scanning allows your mail

server to remain dedicated to mail activities. You can also use multiple

WebShield e500 Appliances together to increase scanning throughput and

provide fault tolerance.

For details of the different ways to use the appliance and some example

topologies, refer to Chapter 1 of the Product Guide.

Figure 1-1. WebShield e500 Appliance

Installation Guide — English

ENG - 6 McAfee WebShield e500 Appliance version 2.5

Features

Transparency — a new feature for version 2.5

If you have used a previous version of the WebShield appliance, be aware that

a new feature for version 2.5 is the addition of transparency. This means that

you can now use the appliance in either proxy mode or transparency mode:

• Proxy mode (explicit proxy) is suitable for networks where you can easily

configure your equipment to route its protocol traffic through the

appliance. Before transparency was introduced, the appliance only

operated in proxy mode.

In proxy mode, the appliance only handles traffic for the protocols that it

proxies.

• Transparency mode (transparent proxy) allows you to slot the appliance

into networks where it is difficult or time-consuming to reconfigure your

other equipment. The appliance then sits transparently on the network

using static and dynamic routing information to receive and pass on the

traffic that it scans.



NOTE: In transparency mode, the appliance must be connected to

two different subnets (through its LAN1 and LAN2 ports).

The appliance handles all IP traffic flowing between the two subnets.

For more details about these modes, see the “Proxy or transparency?” section

in the Product Guide.

 IMPORTANT: Both modes are different so it is important that you

understand and decide which mode you want to use before you install

and configure the appliance.

For details on configuring the appliance with a configuration file taken from

an earlier version of the appliance, see “Restoring your settings” on page 56.

Some of the appliance’s other features are summarized in the remainder of this

section.

Installation Guide ENG - 7

Installation Guide — English

Hardware

The appliance has many features, including the following:

• 1U high 19” (inch) rack-mountable hardware.

• Dual Intel Pentium III 1

GHz processors.

• 256

MB of PC133 SDRAM.

• Two RJ-45 10/100Mbps auto-sensing Ethernet network ports, allowing

flexible connection to your existing network and a dedicated management

interface (only available in proxy mode).

• Two 17.4

GB “hot-pluggable” SCSI hard disk drives managed in a

hardware-based RAID 1 (mirror) configuration. This ensures seamless

processing in the unlikely event of a problem with one of the drives. When

you insert a replacement drive, the RAID controller re-mirrors the new

drive automatically.

For details on the appliance’s ports and connectors, see page 14.

Software

The software on the appliance has the following features:

• Web management through Secure Sockets Layer (SSL) encryption from a

web browser.

• An easy-to-configure user interface, allowing you to set up the appliance

quickly. The appliance then requires minimal user-intervention, making it

a configure-and-forget solution.

• Flexible proxies that are simple to configure even in complex

environments; see “Gathering the configuration information” on page 18.

• Virus scanning of SMTP e-mail messages, checking for infected items and

banned content. Other SMTP features include:

– Flexible SMTP e-mail delivery configurations, allowing you to set

up multiple e-mail delivery methods and introduce fault tolerance.

– Flexible content scanning of messages, allowing you to search for

banned content and block specific attachment types.

– Spam blocking (rejecting unwanted e-mail messages) by recipient,

sender, or server.

Installation Guide — English

ENG - 8 McAfee WebShield e500 Appliance version 2.5

– Support for real-time Blackhole lists, which identify potential

sources of spam messages. The appliance can use these lists to block

spam messages. Blackhole lists are available from many

organizations, including the Mail Abuse Prevention System

(MAPS); see http://www.mailabuse.org.

– Message relay from a specified server or domain name to another

server. There is also an anti-relay feature to block unauthorized

senders from using the appliance to relay spam messages.

• Virus scanning of FTP exchanges for infected items.

• Virus scanning of HTTP web browsing, blocking infected content. You can

also block Java, ActiveX and scripting.

• Virus scanning of POP3 e-mail messages, checking for infected items.

• Separate scanning for inbound and outbound traffic, allowing you to

configure different scanning options for each direction.

• Separate automatic updating schedules for the appliance’s McAfee virus

definition (.DAT) files and McAfee scanning engine, ensuring up-to-date

virus scanning at all times.

• Virus detection within common compressed file formats.

• Flexible scan actions that allow you to clean, delete, block or quarantine

(isolate) infected items.

• Separate quarantine storage, allowing you to inspect the following types of

quarantined e-mail messages:

– Inbound messages containing infected items.

– Outbound messages containing infected items.

– Inbound messages containing banned content.

– Outbound messages containing banned content.

• Notification upon detection of an infected item, using a variety of

configurable alerting methods, such as e-mail messaging, XML logging,

SNMP reporting and ePolicy Orchestrator reporting; see the Configuration

Guide.

• Advanced logging of scan activities and protocol streams, allowing you to

view past performance and delivery information. You can also generate

charts, reports and logs from the user interface.

Installation Guide ENG - 9

Installation Guide — English

• McAfee ePolicy Orchestrator support, allowing you to integrate the

appliance with an ePolicy Orchestrator server to produce advanced

statistical, historical, management and graphical reports for the

information recorded by the appliance; see the Configuration Guide.

• A quick backup process, allowing you to store and restore your appliance’s

settings quickly over the network; see page 55.

• A quick restoration process, allowing you to restore the appliance’s

software in the unlikely event of a problem; page 57.

What doesn’t it do?

The appliance has many features, but remember the following:

• It is not a firewall. You must use it within your organization, behind your

existing firewall.

• It is not a mail server. You might need to configure your firewall, mail

server, web cache and other equipment to route protocol traffic through the

appliance; see page 48.

• It is not a mail transfer agent, and does not keep copies of the e-mail

messages that pass through it, unless they are quarantined or deferred.

• It is not a general-purpose web server for storing web pages.

• It is not a general-purpose server for storing extra software and files. Do not

install any software on the appliance or add any extra files to it unless

specifically instructed by the appliance’s documentation or your support

representative.

• In proxy mode, it handles SMTP, FTP, HTTP and POP3 traffic only. Do not

attempt to route other traffic through the appliance.

Installation Guide — English

ENG - 10 McAfee WebShield e500 Appliance version 2.5

What comes with the appliance?

Ensure that you have all the items that accompany the appliance, checking the

product’s packaging for any hidden compartments. If any of the items are

missing or damaged, please contact your supplier.

Hardware and software

• Three Cat 5 (Category 5) UTP network cables with RJ-45 connectors:

– The two blue cables are straight-through (uncrossed).

– The orange cable is crossed.

“Installing the appliance” on page 28 describes how you use these cables

with the appliance.

• Mounting kit, for installing the appliance into a 19” (inch) rack.

• WebShield e500 Appliance recovery CD.

• Various power cords for different countries.



IMPORTANT: Ensure that you use the power cord that is suitable

for the country of use. If a suitable cable is not included, contact

your supplier. Do not connect the appliance to a power source until

you have read “Power and safety information” on page 3.

User documentation

This guide is just one of the documents that we have included with the

appliance, to help you use the product effectively. See the Release Notes for a

description of the other documentation components.

Supplementary documentation

• Warranty information and mail-back card.

• McAfee PrimeSupport information.

• Additional literature, such as special offers and third-party licenses.

La page charge ...

McAfee WebShield e500 Guide d'installation

McAfee WebShield e500 Guide d'installation

dans d''autres langues

Documents connexes

Autres documents