McAfee FIREWALL 2.10 Manual de usuario

Load Balancing McAfee Web GatewayDeployment Guidev1.1.3Copyright © 2015 Loadbalancer.org, Inc.1

Load Balancer ConfigurationCreate the Virtual Service (VIP)• Using the WUI go to Cluster Configuration > Layer 4 – Virtual Services• Click [Add a N

Define the Real Servers (RIPs)• Using the WUI go to Cluster Configuration > Layer 4 – Real Servers• Click [Add a new Real Server] next to the newly

Web Gateway ConfigurationModify the Web Gateways to accept traffic for the VIPConceptAs mentioned previously, DR mode is our recommended load balancer

Web Gateway Operating ModeThe McAfee Web Gateway can easily be configured for proxy mode using the WUI option: Configuration > Proxies (HTTP(S), FT

Client ConfigurationClient browser settings must be set so that browsers connect via the VIP. In a Microsoft based LAN environment, this is typically

Option 2 - Transparent (Routed) Proxy ModeDeployment ArchitectureNotes• If rules are added to the router so that traffic is sent transparently to the

Load Balancer ConfigurationCreate the Virtual Service (VIP)• Using the WUI go to Cluster Configuration > Layer 4 – Virtual Services• Click [Add a N

• Enter an appropriate IP address for the Virtual Service, e.g. 192.168.2.202• Click Update• Using the WUI, go to Maintenance > Firewall Script• Sc

Define the Real Servers (RIPs)• Using the WUI go to Cluster Configuration > Layer 4 – Real Servers• Click [Add a new Real Server] next to the newly

Web Gateway ConfigurationWeb Gateway Operating ModeThe McAfee Web Gateway can easily be configured for transparent routed mode using the WUI option: C

Table of ContentsAbout this Guide...

3) enable the HTTP ProxyNOTE: When using transparent routed mode, it's not necessary to modify the Web Gateway to accept traffic destined for the

Router / Default Gateway ConfigurationN.B. This is required when no changes have been made to the clients gateway settingsDepending on your network co

Testing & ValidationTo verify that the traffic is passing through the load balancer correctly the following reporting options can be used:System O

Transparent ModeThe example screen shot below illustrates illustrates the difference when running in transparent mode.Many reporting and dashboard opt

Appendix1 – Clustered Pair Configuration – Adding a Slave UnitIf you initially configured just the master unit and now need to add a slave, please ref

2 – Loadbalancer.org Company Contact InformationWebsite URL : www.loadbalancer.orgNorth America (US) Loadbalancer.org, Inc.270 Presidential DriveWilm

3 – McAfee Company Contact InformationWebsite URL : www.mcafee.comWorldwide Support Options McAfee support: http://service.mcafee.com/default.aspx

About this GuideThis guide details the configuration of Loadbalancer.org appliances for deployment with McAfee's range of Web Gateway products. I

Benefits of Implementing a Load BalancerSince secure, reliable and available Internet access is essential and not just a luxury, steps must be taken t

Persistence - aka Server AffinityPersistence may or may not be required and depends on the specific Web Gateway being used. Two possible methods are d

Loadbalancer.org Appliance – the BasicsNetwork ConfigurationThe IP address, default gateway and DNS settings can be configured in several ways dependi

Accessing the Web User Interface (WUI)The WUI can be accessed from a browser at: http://192.168.2.21:9080/lbadmin* Note the port number → 9080(replac

The screen shot below shows the v7.6 WUI once logged in:Clustered Pair ConfigurationLoadbalancer.org recommend that load balancer appliances are deplo

Option 1 - Proxy Mode (Recommended)Deployment ArchitectureNotes• Browser settings on client PC's must be changed to point at the Virtual Server/S