McAfee MSA-3400-SWGI Installation Guide - Page 15

Where to place the device, Explicit proxy mode

Page 15 highlights

Pre-installation Considerations about Network Modes In transparent router mode, the device must join two networks. The device must be positioned inside your organization, behind a firewall. NOTE: Transparent router mode does not support Multicast IP traffic or non-IP protocols, such as NETBEUI and IPX. Where to place the device Use the device in transparent router mode to replace an existing router on your network. TIP: If you use transparent router mode and you do not replace an existing router, you must reconfigure part of your network to route traffic correctly through the device. Figure 4: Transparent router mode configuration You need to: • Configure your client devices to point to the default gateway. • Configure the device to use the Internet gateway as its default gateway. • Ensure your client devices can deliver email messages to the mail servers within your organization. Explicit proxy mode In explicit proxy mode, some network devices must be set up explicitly to send traffic to the device. The device then works as a proxy or relay, processing traffic on behalf of the devices. Explicit proxy mode is best suited to networks where client devices connect to the device through a single upstream and downstream device. TIP: This might not be the best option if several network devices must be reconfigured to send traffic to the device. McAfee Email and Web Security Appliance 5.5 Installation Guide 15

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60

In transparent router mode, the device must join two networks. The device must be positioned
inside your organization, behind a firewall.
NOTE:
Transparent router mode does not support Multicast IP traffic or non-IP protocols, such
as NETBEUI and IPX.
Where to place the device
Use the device in transparent router mode to replace an existing router on your network.
TIP:
If you use transparent router mode and you do not replace an existing router, you must
reconfigure part of your network to route traffic correctly through the device.
Figure 4: Transparent router mode configuration
You need to:
Configure your client devices to point to the default gateway.
Configure the device to use the Internet gateway as its default gateway.
Ensure your client devices can deliver email messages to the mail servers within your
organization.
Explicit proxy mode
In explicit proxy mode, some network devices must be set up explicitly to send traffic to the
device. The device then works as a proxy or relay, processing traffic on behalf of the devices.
Explicit proxy mode is best suited to networks where client devices connect to the device through
a single upstream and downstream device.
TIP:
This might not be the best option if several network devices must be reconfigured to send
traffic to the device.
Pre-installation
Considerations about Network Modes
15
McAfee Email and Web Security Appliance 5.5 Installation Guide