Professional Documents
Culture Documents
Esafe Appliance Esafe Gateway: Last Revised: January 1, 2009
Esafe Appliance Esafe Gateway: Last Revised: January 1, 2009
eSafe Appliance
with
eSafe Gateway
Version 7.X
Please note that the contents of this guide may change from time to
time, to accommodate new features, corrections, etc.
The most recent product documentation can be found in the following
location: www.esafe.com/support/eSafeDocuments.asp
(Document revision number 3.06-1/1/09) All attempts have been made to make the information in this document complete and accurate. Aladdin is not responsible for any direct or indirect
damages or loss of business resulting from inaccuracies or omissions. The specifications in this document are subject to change without notice.
COPYRIGHT
No part of this Technical Document may be reproduced or transmitted in any form or by any means, except for the use of the registered user(s) without permission from Aladdin Knowledge Systems,
Ltd. Copyright© 2000-2002, Aladdin Knowledge Systems, Ltd. All rights reserved. © Partial copyright for information relating to Check Point products 2000-2002 Check Point Software Technologies
Ltd. All rights reserved.
TRADEMARKS
eSafe is a trademark of Aladdin Knowledge Systems, Ltd. Red Hat is a trademark of Red Hat, Inc. Linux is a trademark of Linus Torvalds. Check Point Software, the Check Point Software logo, FireWall-1, FireWall-1 SecureServer, FloodGate-1,
INSPECT, IQ Engine, Meta IP, MultiGate, Open Security Extension, OPSEC, Provider-1, SVN, User-to-Address Mapping, VPN-1, VPN-1 Accelerator Card, VPN-1 Appliance, VPN-1 Certificate Manager, VPN-1 Gateway, VPN-1 SecuRemote, VPN-1
SecureServer, and ConnectControl are trademarks or registered trademarks of Check Point Software Technologies Ltd. or its affiliates. Windows 95, Windows 98, Windows Me, Windows NT, Windows XP, Windows 2000, Exchange and ActiveX are
trademarks or registered trademarks of Microsoft Corporation. Java is a registered trademark of Sun Microsystems. All other product names mentioned herein are trademarks or registered trademarks of their respective owners. The Check Point
product described in this document is protected by U.S. Patent No. 5,606,668 and 5, 835,726 and may be protected by other U.S. patents, foreign patents or pending applications.
eSafe Installation Guide
Table of Contents
Before you Start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4
eSafe Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .4
Chapter 1:Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
About the eSafe Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .2
i
eSafe Installation Guide
ii
Preface
3
eSafe Appliance Setup Guide
• eSafe Virtual Appliance CD (for 500+ users): The eSafe Virtual Appliance CD
enables creating an eSafe Appliance from any Intel-based computer (that
meets the minimum requirements).
• Aladdin eSafe HG/XG Appliances: The eSafe Appliances, shown below, are
hardware devices that are pre-installed and pre-configured with eSafe
software. The following types of appliances are available: HG-100, HG-200,
and XG-300.
eSafe XG-300
eSafe Terminology
The terms that follow will be used throughout this guide. We recommend
familiarizing yourself with these terms prior to getting started with this guide.
Aladdin eSafe Appliance: A pre-installed appliance (see picture above) that can
be purchased from Aladdin that only needs to be configured and placed in the
network.
eSafe Appliance: A collective name that refers to any type of eSafe Appliance,
whether it is a pre-installed appliance from Aladdin or an appliance created using
the eSafe Virtual Appliance CD.
eSafe Operation Mode: The eSafe Appliance is pre-installed with eSafe software.
You can choose a specific product type that enables operating in a specific mode.
If you received an Aladdin eSafe Appliance (or an eSafe Appliance from an
Aladdin partner), it will be pre-configured to operate in NitroInspection (Bridge)
mode. You can change this mode, if necessary.
5
eSafe Appliance Setup Guide
6 eSafe Terminology
Chapter 1
Introduction
Introduction 1
eSafe Appliance Setup Guide
eSafe Gateway
eSafe Gateway provides full content security protection when installed as a
gateway between the local area network (LAN) and the Internet. It scans and
cleans data passing through FTP, HTTP, SMTP, and POP3 connections.
• Scans and cleans data passing through FTP, HTTP, SMTP and POP3
connections.
• eSafe Proxy
All eSafe Gateway modes include built-in mail relay capabilities for scanning
SMTP traffic, providing all the benefits of eSafe Mail (described below).
eConsole Manager
eConsole Manager is a management console that lets you configure and enforce
the corporate content security policy throughout the network. The console allows
remote configuration and administration from anywhere in the organization, or
from remote-managed service providers (MSP). Communication is over a TCP/IP
connection and is authenticated and encrypted.
You can define security rules according to specific clients, servers, e-mail
addresses, destinations, domains, senders, recipients, and file types. This allows
you to fine-tune the inspected content.
A real time statistics window shows the current traffic status presented in graphs
according to protocol. Extensive reports and alerts inform you whenever a vandal
or virus attempts to enter your network. The detailed reports can be broken
down by protocol, source, and destination.
After installing eSafe, you can install eConsole Manager from within the eSafe
Appliance Manager, as described on page 33.
Introduction 3
eSafe Appliance Setup Guide
1. Creating an eSafe Appliance using the eSafe Virtual Appliance CD (if you
choose to use your own hardware).
2. Deciding which product (operation mode) you want to use.
You can create an eSafe Appliance from an Intel-based computer (that meets the
minimum requirements) by installing the eSafe Virtual Appliance CD to the
computer’s hard disk.
Minimum Requirements
• Pentium 4, 2 Ghz & above, with CD-ROM
• Two Ethernet 10/100/1000 Mbps NICs (An optional third NIC can be used for
management)
Note: Please note that these are minimum hardware requirements. For more
accurate and recommended hardware please consult with your eSafe
partner/sales representative.
1. Use a computer that meets the minimum requirements listed in the previous
section. If you wish to install eSafe in NitroInspection mode, make sure you
install three NICs.
3. Ensure that the BIOS is configured to first boot from the CD-ROM, which is
capable of reading long filenames. (For additional information on configuring
the machine's BIOS, refer to the machine manufacturer.)
Warning: In the next step, the PC’s hard disk will be re-partitioned and
formatted. The contents of the hard disk will be erased and replaced
with the contents from the eSafe Virtual Appliance CD, including the
operating system. Before you continue, make sure that you do not
need the data on the hard disk!
This machine doesn’t match the minimum requirements for eSafe Virtual
Appliance.
Reason(s):
No suitable HD found
Not enough memory
If you proceed with installation, possible problems may occur.
(Please contact eSafe Technical Support for details.)
Type “C” to continue installation or press <ENTER> to abort.
The Virtual Appliance CD is installed onto the hard disk, which transforms the
PC into a pre-installed and pre-configured appliance, with all the capabilities
of the Aladdin eSafe Appliance.
Note: The next time you start the eSafe Appliance, the machine
will automatically boot twice.
The information in the next section assists you in deciding which type of
product you want to use.
• eSafe Proxy
* These modes also allow installing an eSafe Cluster for load balancing and fail
over.
Detailed instructions for working with eSafe Web SSL are available in the eSafe
Web SSL Installation Guide.
eSafe Proxy
eSafe Proxy combines a standard proxy server with eSafe NitroInspection Bridge
mode in a single box. This allows deploying eSafe as a proxy server that includes
all of eSafe’s content security features.
The next section guides you through connecting the eSafe Appliance to a PC that
will be used to access the eSafe Appliance Manager.
Note: The eSafe Appliance (with two network cards) will be configured
with the following IP addresses after a fresh installation:
ETH0:
IP address: 192.118.131.243 Subnet mask: 255.255.255.248
ETH1:
IP address: 192.118.131.249 Subnet mask: 255.255.255.248
2. Plug one end of a crossover cable (a red crossover cable is provided with the
Aladdin eSafe Appliance) into the ETH0 Ethernet port of the Appliance and
the other end of the crossover cable into the Ethernet port of the workstation
you prepared in the previous step.
Note: If you do not have a crossover cable, you can use a hub instead. In
this case, connect a cable between the hub and the workstation, and
between the hub and the eSafe Appliance.
• If the eSafe Appliance has more than one NIC, continue with step 3.
3. Connect the eSafe Appliance’s second network interface card to the network
via a regular Ethernet network cable. (The eSafe Appliance thus physically
separates the workstation and the LAN, and is now in-line between the
workstation and the LAN.)Connect the power cable to the eSafe Appliance,
plug it into the power supply, and turn on the power switch.
The next section guides you through the process of configuring the eSafe
Appliance to work in a specific operational mode.
1. Follow the instructions that are relevant to the operational mode you intend
to use:
This connects to the eSafe Appliance Setup Wizard that allows you to choose
the mode in which the eSafe Appliance will operate and configure Appliance
settings. A security alert appears.
2. Follow the instructions below for the version of Internet Explorer you are
using:
14 Using the eSafe Appliance Setup Wizard to Configure your eSafe Appliance
eSafe Appliance Setup Guide
3. Log in to the eSafe Manager using the default username (admin), and
password (esafe).
16 Using the eSafe Appliance Setup Wizard to Configure your eSafe Appliance
eSafe Appliance Setup Guide
7. From the drop-down list, you can choose to install eSafe Gateway in one of
the following modes:
• eSafe Proxy
When available, you can select the Cluster Mode check box if you want this
machine to be part of the eSafe Cluster.
Note: If you are isntalling eSafe Cluster in Router mode, you will be
prompted to define virtual IP addresses. At least two VIPs are needed; one
for each side of the cluster. The VIPs will be the external identity of the
eSafe Cluster. The VIPs will be available as long as at least one node in the
cluster remains healthy.
8. In the Network Settings page, define the network settings to enable the eSafe
Appliance to communicate with the network.
• For eSafe Gateway Forwarding Proxy, eSafe will act as the proxy
server. Use a valid IP address from the network.
• For eSafe Proxy, see the eSafe Proxy Installation Guide for detailed
instructions on working with eSafe Proxy.
18 Using the eSafe Appliance Setup Wizard to Configure your eSafe Appliance
eSafe Appliance Setup Guide
Note: Pay attention to the note at the bottom of the Network Settings
page, which shows via which Ethernet port the appliance is connected.
It is important that you know which IP address is assigned to which port
because later you will connect eth0 to the firewall and eth1 to the
internal network.
• Next to Default Gateway, enter the IP address of the gateway device that
is used to forward traffic to destinations beyond the local network.
• Under SMTP Client Identification, enter the string eSafe will use for
identification purposes when communicating with SMTP clients that use
the helo command. It is recommended that the string equals the name of
the eSafe machine (esafe.domain.com).
Define the settings and click Next. The next page that appears depends on
the type of eSafe product selected.
of virtual IP ranges that are “trusted”. This means that traffic to and from
these addresses will NOT be scanned.
If these default ranges are not sufficient, you can define additional IP ranges
that will not be scanned.
a. Click Add to add an internal network range.
20 Using the eSafe Appliance Setup Wizard to Configure your eSafe Appliance
eSafe Appliance Setup Guide
b. Enter the IP address of the first and last workstation in each of the
networks.
Click Next. The Mail Servers page appears. Continue with step 11.
10. If you are configuring eSafe Gateway Forwarding Proxy, you must define the
parent proxy IP and port, and the port eSafe will listen on.
b. Next to Port enter the port of the parent proxy; usually port 8080.
c. Next to Listen on port enter the port eSafe will listen on.(The port
number must be 1024 or above.)
11. In the Mail Servers page, define all internal mail servers to enable scanning
SMTP traffic.
b. Enter the FQDN (Fully Qualified Domain Name) and IP address of the mail
server. If the machine does not use the default SMTP port (port 25), add a
“:” and the port number at the end of the IP address.
22 Using the eSafe Appliance Setup Wizard to Configure your eSafe Appliance
eSafe Appliance Setup Guide
c. Click Save. The server is added to the list of Internal Mail Servers.
d. Repeat steps a—c to define all the internal mail servers on your network.
12. The eSafe Appliance Manager is supplied with a default username (admin) and
password (esafe). To ensure that only authorized users have access to the
Appliance, you must change the default password.
Note: It is also possible to change the password at a later stage using via
the eSafe Appliance Manager.
Enter and confirm the new password. Click Next to save the change.
Click Next. If you have not yet changed the default root password for the
appliance, you will be prompted to do so now. In this case, the Root Password
page appears. If you have already changed the root password, the Set Time
and Date page appears.
13. Enter a new root superuser password; re-enter the password for confirmation.
14. By default, the Appliance is not pre-configured with the current time and
date. We recommend setting the exact time and date since this information
24 Using the eSafe Appliance Setup Wizard to Configure your eSafe Appliance
eSafe Appliance Setup Guide
will be used by eSafe for various purposes, such as in all logs and reports
related to the product.
Define the current date and time, and the time zone in which the eSafe
Appliance will operate.
15. Click Next to enable working with the HeartBeat Information and the
Outbreak Sentry Service.
16. Click the Download eConsole link to download the eConsole application, if
required. (If you choose to download eConsole, make sure that you do not
click on the Apply buttons until the end of the download process.)
After installing eConsole, you must now apply the new configuration in order
26 Using the eSafe Appliance Setup Wizard to Configure your eSafe Appliance
eSafe Appliance Setup Guide
to continue.
• If you still need to place the eSafe Appliance in its physical location and
connect it to the network, click the Apply and Shutdown button and
locate the appliance in the network. After restarting, you can access the
eSafe Appliance Manager at any time using the URL displayed in this
screen.
• If you have already placed the eSafe Appliance in its physical location
and connected it to the network, click the Apply and Restart button. You
can then access the eSafe Appliance Manager at any time using the URL
displayed in this screen.
Note: You can change the eSafe Appliance settings at any time, by re-
connecting to the eSafe Appliance Setup Wizard. You will need to use the
new IP assigned to the eSafe Appliance (see step 8.), rather than the
default IP: 10.0.0.1, or 192.118.131.243.
Follow the instructions in the next section to physically connect the eSafe
Appliance to the network.
4. Using the cross-over cable, connect the eSafe Appliance to the firewall
(eth0).
5. Using an Ethernet cable, connect the eSafe Appliance to the internal switch
(eth1).
6. Check the status of the link LED on your Ethernet hub or switch to ensure that
the Ethernet connection is ’live’.
1. Place the eSafe Appliance in its physical location and connect the appliance
to the LAN/switch using an Ethernet cable.
3. Ensure that the eSafe Appliance IP address is the IP address of the proxy
machine, as defined in the client browser settings, and that a new IP address
was assigned to the parent proxy.
At this point your eSafe Appliance is physically connected to the network with a
default configuration. In order to operate properly, eSafe needs to connect to
various ports and sites. Follow the instructions in the section that follows to
enable connecting to these ports/sites.
• Allow the eSafe machine to connect to the following eSafe sites for updates:
For HTTP: (Port 80) For FTP: (Port 20 & 21)
upd1.esafe.com ftp.esafe.com
upd2.esafe.com ftp2.esafe.com
upd3.esafe.com ftp.protectme.com
upd4.esafe.com
• Allow eSafe to send email and alerts to the Internet and internal network
(port 25).
• Allow the eSafe machine to check license validity via the eSafe site (port 80).
• If you are using the eSafe Add-ons, enable the following addresses for HTTPS
(port 443) and HTTP (port 80):
For www.cobion.com:
213.252.152.103
195.127.173.190
213.252.152.118
213.252.152.105
213.252.152.81
For license.cobion.com:
213.252.152.106
195.127.173.180
213.252.152.101
What’s next?
You can now:
• Install eConsole (see a description on page 4) to remotely monitor and
manage eSafe products installed, view reports, and define security rules. For
details on installing eConsole, see "Installing eConsole Manager" on page 31.
• Register your eSafe software (recommended); see"Registering your eSafe
Software" on page 32.
• Access the eSafe Appliance Manager for maintenance and management
purposes. A description of the various options available appears in Chapter 3,
"Managing the eSafe Appliance" on page 35.
You can install eConsole Manager on a machine that meets the following minimum
requirements:
RAM: 250 MB
Disk Space: 30 MB
For your convenience, a link has been included in the eSafe Appliance Manager
that enables downloading the eConsole software.
2. Click the Download eConsole from eSafe Appliance link. You will be
prompted to open or save the eConsole executable file.
3. Select Save and choose the location to which you want to save the file.
4. After downloading the executable file to the location defined, double click
the esg_gui.exe file to install eConsole.
At the end of this evaluation period, the evaluation license will expire and
allow ALL traffic to enter the network without scanning or blocking.
2. In the eConsole, select Help | Enter License Key to enter your name,
company name, and the license key.
2. In the Welcome page, under Restore eSafe Appliance Configuration, enter the
path and file name to reach a previously backed-up configuration file, or click
Browse to search for the file. For details on creating a backup file, see
"Providing Information to eSafe Technical Support" on page 54.
• Download eConsole
• Test connectivity
This chapter provides detailed descriptions of all these options, available in the
eSafe Appliance Manager menus.
1. Open Internet Explorer and connect to the IP address of the eSafe Appliance
as configured using the eSafe Appliance Setup Wizard. For example,
https://x.x.x.x:37233, where x.x.x.x is the IP of the eSafe Appliance.
Note: eSafe Appliance uses secure HTTP protocol. Make sure that you
enter HTTPS and not HTTP.
You will be notified that you are about to view information over a secure
connection.
3. Click Yes to continue. The eSafe Appliance Manager login page appears.
4. Enter the username (admin) and password as defined in the eSafe Appliance
Setup Wizard.
• Status: Shows the status of the eSafe product being used. (When add-ons are
installed, you can select Click to Activate to activate the add-on.)
• Click the Stop/Start eSafe button to toggle between stopping and starting the
eSafe product installed. (Note: When the add-ons are disabled via the Status
screen, eSafe must be restarted in order for the changes to take effect.)
Note:
Currently, the following types of add-ons are available:
• URL filter add-on: Enables blocking access to websites according to
specific categories.
• Anti-spam add-on: Enables checking incoming and outgoing email for
spam content using advanced anti-spam technology.
• AppliFilter: Allows realtime filtering of malicious Internet content as
it enters the network.
• CPU and Memory Information: Displays the CPU's vendor name, model,
speed, RAM, and swap memory.
• Storage space: Displays the amount of free space available in the various
partitions.
• Click Advanced to view system log files. Click on a log file to download the
log file and view information about Appliance/system events.
Note: eSafe automatically negotiates the network type and speed. The
default setting should only be changed in the event that eSafe is
connected to an unsupported network device or if the auto-negotiate
feature does not operate properly.
• Click Refresh to update the network card and routing table information.
Clicking the Advanced button displays a list of all messages in the spool. The
option exists to delete messages, but is not recommended and should only be
used after consulting with eSafe technical support.
• Time and Date—allows you to change the eSafe Appliance’s time and date
settings.
• SNMP—allows you to enable or disable use of the SNMP service, and define a
management station.
• eSafe Proxy—available when working with eSafe Proxy and allows viewing
and editing proxy server settings, including defining the authentication type.
• SSL Settings—allows you to view and edit SSL proxy settings, when working
with eSafe Web SSL.
Defining IP Settings
Depending on the type of eSafe product installed, one or two (eSafe Gateway
with NitroInspection) network interface cards may exist. You can change the
status of a network interface card, define a new network interface card, define
the default gateway, and add a static route.
1. Enter the following information in the space provided below the IP Settings:
• Next to Default Gateway, you can change the IP address of the gateway
machine that is used to forward traffic to destinations beyond the local
network.
• Click Advanced to add a static route to the routing table. Enter the interface,
network, netmask, and gateway. Click Add to save the changes.
• Click Apply and Restart Networking to apply the changes and restart eSafe
and the networking services.
• DNS Servers: The IP addresses of the DNS servers in the network. The DNS
servers will be used to resolve DNS names to IP addresses when queried by the
Appliance.
In addition, you can click Advanced to define search domains and hosts:
• In the Search Domains box, enter domain names that will be appended
automatically when searching for a host name that does not include the full
domain name.
• Under Hosts, enter the IP address and host name of all host machines. Click
Add to include the host in the Hosts list.
• The IP address or name of the POP3 server from which messages will be
retrieved.
• The address to which you want to redirect email from the POP3 account.
This should be an email address that exists in one of your internal email
servers. Leaving this field empty will redirect traffic to the address that
appears in the email body.
3. Click Save to save the account details and return to the previous page.
4. From the drop-down list, define how often eSafe will check the POP3 server
for new messages. Click Apply to save the settings.
If you did not set the date and time using the eSafe Appliance Setup Wizard, you
should do so now.
1. Use the drop-down lists to select the correct date and time.
2. Select the applicable time zone.
3. Click Apply to save the settings.
• Click the Advanced button to define a Network Time Protocol (NTP) Server.
Select the checkbox to enable using the server.
• In the NTP Server field, enter the IP address of the NTP server.
Note: The default password for the root account is: kn1TG7psLu. It is
recommended to change the root account password, or disable the root
account.
or
In addition, you can configure which external IPs will be able to establish a
connection with the Appliance.
3. Next to Listen on port, define the port that the Appliance will use to listen to
connections.
4. Define from which IP addresses the eSafe Appliance will accept connections:
• Select Listed IPs Only to define a specific list of IP addresses from which
connections will be allowed.
• Select All, except listed IPs to define an exclusion list. This means that
connections will be accepted from all IP addresses EXCEPT those that
appear in the list.
When SNMP is enabled, you can save and send system logs that are related to
eSafe to the management station, in standard format.
• Under Syslog redirect, click the Enable or Disable radio button. If you choose
to enable syslog redirecting, enter the IP address of the server to which the
logs will be redirected (copied).
In the eSafe Proxy Parameters page, you can edit the port number. The default is
8080.
Click the Authentication Settings button to view and edit the authentication
parameters.
Depending on the type of authentication you select, you will need to define
authentication settings:
For NTLM:
• AD Server: Define the Active Directory server name. Enter the full FQDN
name. Then enter the password server name and Wins server name. (These
values are usually the same.)
For LDAP:
• Base DN: Define the distinguished name of the root from which user/group
details will be taken.
• Bind DN: Define a user name to allow access to the LDAP server.
• Domain: Enter the name of the domain in which you want to register the eSafe
Proxy machine.
Using the eSafe Appliance Setup Wizard allows you to define the basic
configuration required to enable operation of the eSafe Appliance in your
organization's network.
For details on working with the eSafe Appliance Setup Wizard, refer to Using the
eSafe Appliance Setup Wizard to Configure your eSafe Appliance on page 14.
After setting the required troubleshooting level and allowing eSafe to gather
information, files can be sent to technical support for analysis.
Note: Consult with the eSafe technical support team prior to making
any changes to these parameters.
• Select the level of troubleshooting (debug level) required: off (default), low,
or high.
• Click the Create and download eSafe Support Info file link to create files for
technical support. You can either create and save the files, or create the files
and automatically upload them to eSafe technical support.
• Click the Create and download eSafe Session Log files link to collect session
log files. In the page that appears, you can choose to only collect files,
collect and upload, or clear the log files. It is also possible to schedule
automatic log file collection.
• Click the Create and download eSafe Appliance Configuration backup file
link to create a backup of the configuration file. After creating the backup
file, you can download the file to a location of your choice. (To reload the
configuration, access the Configuration Wizard, enter the file details and
then click the Restore Appliance Configuration button.)
• Click the View eSafe Module Versions link to view the version number of the
eSafe modules.
eSafe log files: Displays a list of eSafe log files. Click on a filename to
open or download the file.
eSafe .ini files: Displays a list of eSafe .ini files. Click on a filename to
open or download the file, or click to edit the file.
Any changes to the .ini files will only take effect after
restarting eSafe.
• Next to RPM package Upload, enter the path to upload a hotfix, or click
Browse to locate the hotfix file. Click Install to install the hotfix. (You
can also upload hotfix files via eConsole.)
eConsole is a remote management console that can be used to manage all eSafe
products over the local network or over the Internet. eConsole is a Windows-
based application that can run on any PC running a supported Windows operating
system.
• Click on the Download eConsole from eSafe Appliance link, save the
executable file and run it after the download is complete.
• Access the Content Security Response Team web site to view information on
the latest viruses and alerts, get the latest virus and content security
updates, and security news.
Testing Connectivity
This screen enables performing the following tests:
To conduct a test:
• Click on the Test button next to the test you want to perform.
eSafe Add-Ons
eSafe Add-Ons 63
eSafe Appliance Setup Guide
Once installed, the add-ons are valid for a period of 30 days after which you must
obtain a special license to continue using them. (At the end of this period, all
traffic will be allowed without scanning or blocking.)
Updated information is constantly added to the add-on databases and lists. You
can enable updating the add-ons on a daily basis. For further information, see
Updating the eSafe Add-ons on page 69.
2. Under Anti-spam Add-on, click on the Click to Activate link. The following
page appears:
While the download is in process, you can return to the eSafe Status page to
view a progress bar. At the end of the installation, the add-on will be active.
At the end of the installation, the status will be changed to “Installed” and
the add-on will be active.
eSafe Add-Ons 65
eSafe Appliance Setup Guide
2. Under URL Filter Add-on, click on the Click to Activate link. The following
screen appears:
While the download is in process, you can return to the eSafe Status page to
view a progress bar. At the end of the installation, the add-on will be active.
At the end of the installation, the status will be changed to “Installed” and
the add-on will be active.
5. Select the Use URL Filters check box. Click List to choose which categories
will be blocked.
7. In the Add URL Categories dialog box, select the categories to block. (Use
CTRL and/or SHIFT to select multiple categories.) Click OK.
Note: Under Unblocked URLs, click the Unblock a URL button to define
specific URLs that will not be blocked if they belong to one of the
categories selected in step 5.
eSafe Add-Ons 67
eSafe Appliance Setup Guide
The AppliFilter operates for a 30 day evaluation period, after which a separate
license is required.
2. Select the Update Add-ons daily at check box, and from the drop-down list,
select when the add-ons will be updated.
3. Click Apply.
2. Enter your name, company name, and the license key and click OK.
eSafe Add-Ons 69
eSafe Appliance Setup Guide
71
eSafe Appliance Setup Guide
Default Passwords
The default usernames and passwords for the eSafe Appliance and eSafe
Appliance Manager appear below — we strongly recommend that you change the
default passwords for security purposes.
eSafe Appliance
(only valid if the password was NOT changed during installation)
Username: root
Password: kn1TG7psLu
eSafe Appliance Manager
Username: admin
Password: esafe
To connect locally:
73
eSafe Appliance Setup Guide