M86 web filter installation guide models: 300, 500, 700 software version: 4.0.10 document version: 01.21.11.
Ii m86 s ecurity i nstallation g uide m86 w eb f ilter i nstallation g uide for 300, 500, 700 m odels © 2011 m86 security all rights reserved. Printed in the united states of america local: 714.282.6111 • domestic u.S.: 1.888.786.7999 • international: +1.714.282.6111 this document may not, in whole ...
M86 s ecurity i nstallation g uide iii c ontents m86 wf a ppliance i ntroduction ...............................................................1 about this document...................................................................................................... 2 conventions used in this docum...
C ontents iv m86 s ecurity i nstallation g uide lcd panel setup requirements ............................................................................................19 step 1a: quick start setup procedures...................................................................... 20 link the workstat...
C ontents m86 s ecurity i nstallation g uide v step 4: log in, generate ssl certificate. ................................................................... 43 log in to the web filter ..........................................................................................................43 genera...
C ontents vi m86 s ecurity i nstallation g uide 2. Warn-strike with higher thresholds . ............................................................................69 3. Time quota/hit quota .................................................................................................69 4. Time b...
M86 wf a ppliance i ntroduction m86 s ecurity i nstallation g uide 1 m86 wf a ppliance i ntroduction thank you for choosing to install and evaluate the m86 web filter appliance. M86 security’s web filter tracks each user’s online activity, and can be configured to block specific web sites, service p...
M86 wf a ppliance i ntroduction a bout this d ocument 2 m86 s ecurity i nstallation g uide about this document this document is divided into the following sections: • introduction - this section is comprised of an overview of the web filter product and how to use this document • service information ...
S ervice i nformation m86 s ecurity c orporate h eadquarters (usa) m86 s ecurity i nstallation g uide 3 s ervice i nformation the user should not attempt any maintenance or service on the unit beyond the procedures outlined in this document. Any initial hardware setup problem that cannot be resolved...
P reliminary s etup p rocedures u npack the u nit from the c arton 4 m86 s ecurity i nstallation g uide p reliminary s etup p rocedures unpack the unit from the carton inspect the packaging container for evidence of mishandling during transit. If the packaging container is damaged, photograph it for...
P reliminary s etup p rocedures s elect a s ite for the s erver m86 s ecurity i nstallation g uide 5 select a site for the server the server operates reliably within normal office environmental limits. Select a site that meets the following criteria: • clean and relatively free of excess dust. • wel...
P reliminary s etup p rocedures r ack m ount the s erver 6 m86 s ecurity i nstallation g uide rack mount the server rack setup precautions warning: before rack mounting the server, the physical environment should be set up to safely accommodate the server. Be sure that: • the weight of all units in ...
P reliminary s etup p rocedures r ack m ount the s erver m86 s ecurity i nstallation g uide 7 rack mount instructions for 500 series servers rack setup suggestions • determine the placement of each component in the rack before you install the rails. • install the heaviest server components on the bo...
P reliminary s etup p rocedures r ack m ount the s erver 8 m86 s ecurity i nstallation g uide install the slide assemblies to the rack 1. After you have installed the short and long brackets to the outer slides, you are ready to install the whole slide assemblies (outer slides with short and long br...
P reliminary s etup p rocedures r ack m ount the s erver m86 s ecurity i nstallation g uide 9 install the chassis into the rack 1. Push the inner slides, which are attached to the chassis, into the grooves of the outer slide assemblies that are installed in the rack as shown below: 2. Push the chass...
P reliminary s etup p rocedures r ack m ount the s erver 10 m86 s ecurity i nstallation g uide rack mount instructions for 700 series servers rack setup suggestions • determine the placement of each component in the rack before you install the rails. • install the heaviest server components on the b...
P reliminary s etup p rocedures r ack m ount the s erver m86 s ecurity i nstallation g uide 11 install the inner rails 1. Place the inner rack extensions on the side of the chassis aligning the hooks of the chassis with the rail extension holes. Make sure the extension faces "outward" just like the ...
P reliminary s etup p rocedures r ack m ount the s erver 12 m86 s ecurity i nstallation g uide.
P reliminary s etup p rocedures r ack m ount the s erver m86 s ecurity i nstallation g uide 13 install the server into the rack 1. Confirm that chassis includes the inner rails (a) and rail extensions (b). Also, confirm that the outer rails (c) are installed on the rack. 2. Line chassis rails (a and...
P reliminary s etup p rocedures r ack m ount the s erver 14 m86 s ecurity i nstallation g uide install the server into a telco rack if you are installing the server into a telco type rack, follow the directions given on the previous pages for rack installation. The only difference in the installatio...
P reliminary s etup p rocedures r ack m ount the s erver m86 s ecurity i nstallation g uide 15 install the bezel on the 500 and 700 series chassis after rack mounting a 500 or 700 series server, the bezel should be installed on the front end of the chassis. Note: this portion of the installation pro...
P reliminary s etup p rocedures c heck the p ower s upply 16 m86 s ecurity i nstallation g uide check the power supply the server is equipped with a universal power supply that handles 100-240 v, 50/ 60 hz. A standard power cord interface (iec 950) facilitates power plugs that are suitable for most ...
P reliminary s etup p rocedures g eneral s afety i nformation m86 s ecurity i nstallation g uide 17 • to ensure proper cooling, always operate the server with its covers in place. Do not block any openings on the chassis. Do not place the server near a heater. • always exit the software application ...
P reliminary s etup p rocedures g eneral s afety i nformation 18 m86 s ecurity i nstallation g uide motherboard battery precautions caution: the battery on the motherboard should not be replaced without following instruc- tions provided by the manufacturer. Only qualified service personnel should re...
I nstall the s erver s tep 1: s etup p rocedures m86 s ecurity i nstallation g uide 19 i nstall the s erver step 1: setup procedures this step requires you to set up parameters for the web filter to function on the network. You have the option of using the text-based quick start setup procedures des...
I nstall the s erver s tep 1a: q uick s tart s etup p rocedures 20 m86 s ecurity i nstallation g uide step 1a: quick start setup procedures link the workstation to the web filter monitor and keyboard setup a. Connect the pc monitor and keyboard cables to the rear of the web filter chassis. B. Turn o...
I nstall the s erver s tep 1a: q uick s tart s etup p rocedures m86 s ecurity i nstallation g uide 21 power on the web filter power up a 300 series model a. Make sure the power adapter is plugged into the back of the chassis and connected to the power cord. B. Plug the power cord into a power source...
I nstall the s erver s tep 1a: q uick s tart s etup p rocedures 22 m86 s ecurity i nstallation g uide hyperterminal setup procedures if using a serial console, follow these procedures on a windows xp machine to create a hyperterminal session. Note: hyperterminal is no longer included with windows as...
I nstall the s erver s tep 1a: q uick s tart s etup p rocedures m86 s ecurity i nstallation g uide 23 c. At the connect using field, select the com port assigned to the serial port on the laptop (probably “com1”), and then click ok to open the properties dialog box, displaying the port settings tab:...
I nstall the s erver s tep 1a: q uick s tart s etup p rocedures 24 m86 s ecurity i nstallation g uide f. In the hyperterminal session window, go to file > properties to open the prop- erties dialog box, displaying the connect to and settings tabs: g. Click the settings tab, and at the emulation menu...
I nstall the s erver s tep 1a: q uick s tart s etup p rocedures m86 s ecurity i nstallation g uide 25 login screen the login screen displays after powering on the web filter using a monitor and keyboard, or after creating a hyperterminal session. Notes: if using a hyperterminal session, the login sc...
I nstall the s erver s tep 1a: q uick s tart s etup p rocedures 26 m86 s ecurity i nstallation g uide quick start menu: administration menu a. At the press the number of your selection prompt, press 2 to select the “quick start setup” process. The quick start menu takes you to the following configur...
I nstall the s erver s tep 1a: q uick s tart s etup p rocedures m86 s ecurity i nstallation g uide 27 change filtering mode a. From the quick start menu, press 3 to go to the filter mode configuration screen. B. Select a filter mode (invisible, router, or firewall) using up-arrow and down- arrow key...
I nstall the s erver s tep 1a: q uick s tart s etup p rocedures 28 m86 s ecurity i nstallation g uide configure host name a. From the quick start menu, press 8 to go to the configure host name screen. B. At the enter host name prompt, type in the host name and press enter. C. Press y to confirm, or ...
I nstall the s erver s tep 1a: q uick s tart s etup p rocedures m86 s ecurity i nstallation g uide 29 non-quick start procedures or settings the options described below do not pertain to the quick start setup process. Reset system to factory defaults a. From the quick start menu, press a to go to th...
I nstall the s erver s tep 1a: q uick s tart s etup p rocedures 30 m86 s ecurity i nstallation g uide system status screen the system status screen contains the following information: • operation mode for the web filter specified in screen 3 (change filtering mode) • capturing interface specified in...
I nstall the s erver s tep 1b: lcd p anel s etup p rocedures m86 s ecurity i nstallation g uide 31 step 1b: lcd panel setup procedures lcd panel a. Connect the ac power cord(s) to the back of the chassis and plug the cord(s) into a ups power supply unit. B. Power on the server following the instruct...
I nstall the s erver s tep 1b: lcd p anel s etup p rocedures 32 m86 s ecurity i nstallation g uide m86 menu when the m86 menu option is selected from the lcd menu tree, the following menu items display in the panel, the entire list which is viewable by using the navi- gation keys: • wf patch level >...
I nstall the s erver s tep 1b: lcd p anel s etup p rocedures m86 s ecurity i nstallation g uide 33 wf filter mode when the wf filter mode option is selected, the wf filter mode screen displays. A. At the mode field, use the left / right arrow keys to view and choose from the available options: invis...
I nstall the s erver s tep 1b: lcd p anel s etup p rocedures 34 m86 s ecurity i nstallation g uide dns 1 and 2 when the dns 1 (2) option is selected, the dns 1 (2) screen displays with the configure dns ip 1 (2) menu item. A. Choose configure dns ip 1 (2) and press the checkmark / enter key to go to...
I nstall the s erver s tep 1b: lcd p anel s etup p rocedures m86 s ecurity i nstallation g uide 35 non-quick start procedures or settings the options described below do not pertain to the quick start setup process. Wf patch level when the wf patch level option is selected, “web filter” and the versi...
I nstall the s erver s tep 1b: lcd p anel s etup p rocedures 36 m86 s ecurity i nstallation g uide lcd options menu when “lcd options >” is selected, the following menu items display on the screen: heartbeat, backlight, lcd controls >. Make a selection from the menu, and press the checkmark / enter ...
I nstall the s erver s tep 2: p hysically c onnect the u nit to the n etwork m86 s ecurity i nstallation g uide 37 step 2: physically connect the unit to the network now that your web filter network parameters are set, you can physically connect the unit to your network. This step requires two stand...
I nstall the s erver s tep 3: a ccess the w eb f ilter o nline 38 m86 s ecurity i nstallation g uide step 3: access the web filter online access the web filter via its lan 1 ip address a. Launch an internet supported browser: • firefox 3.5 • internet explorer 7 or 8 • safari 4.0 b. In the address fi...
I nstall the s erver s tep 3: a ccess the w eb f ilter o nline m86 s ecurity i nstallation g uide 39 accept the security certificate in firefox a. If using a firefox browser, in the page “this connection is untrusted,” click the option i understand the risks: b. In the next set of instructions that ...
I nstall the s erver s tep 3: a ccess the w eb f ilter o nline 40 m86 s ecurity i nstallation g uide c. In the add security exception window, click get certificate and wait a few seconds until the security certificate is obtained by the server. D. With the checkbox permanently store this exception s...
I nstall the s erver s tep 3: a ccess the w eb f ilter o nline m86 s ecurity i nstallation g uide 41 temporarily accept the security certificate in ie if using an ie browser, in the page “there is a problem with this website's security certificate.”, click continue to this website (not recommended):...
I nstall the s erver s tep 3: a ccess the w eb f ilter o nline 42 m86 s ecurity i nstallation g uide accept the security certificate in safari a. If using a safari browser, the pop-up window "safari can't verify the identity of the website..." opens: click show certificate to open the certificate in...
I nstall the s erver s tep 4: l og in , g enerate ssl c ertificate m86 s ecurity i nstallation g uide 43 step 4: log in, generate ssl certificate this step requires you to log in and generate a self-signed certificate for the web filter to ensure secure exchanges between the appliance and your brows...
I nstall the s erver s tep 4: l og in , g enerate ssl c ertificate 44 m86 s ecurity i nstallation g uide generate ssl certificate a. Navigate to system > ssl certificate to open the ssl certificate window: b. Click generate ssl certificate to open the pop-up box that asks if you wish to continue, wh...
I nstall the s erver s tep 4: l og in , g enerate ssl c ertificate m86 s ecurity i nstallation g uide 45 ie security certificate installation procedures accept the security certificate in ie go to the appropriate sub-section if using the following windows operating system and ie browser: • windows x...
I nstall the s erver s tep 4: l og in , g enerate ssl c ertificate 46 m86 s ecurity i nstallation g uide figure a2: windows xp, ie 7 b. Click certificate error to open the certificate invalid pop-up box: figure b: windows xp, ie 7 c. Click view certificates to open the certificate window that includ...
I nstall the s erver s tep 4: l og in , g enerate ssl c ertificate m86 s ecurity i nstallation g uide 47 figure c: windows xp, ie 7 d. Click install certificate... To launch the certificate import wizard: figure d: windows xp, ie 7 e. Click next > to display the certificate store page: figure e: win...
I nstall the s erver s tep 4: l og in , g enerate ssl c ertificate 48 m86 s ecurity i nstallation g uide f. Choose the option “place all certificates in the following store” and then click browse... To open the select certificate store pop-up box: figure f: windows xp, ie 7 g. Choose “trusted root c...
I nstall the s erver s tep 4: l og in , g enerate ssl c ertificate m86 s ecurity i nstallation g uide 49 now that the security certificate is installed, you will need to map the web filter’s ip address to its host name. Proceed to map the web filter’s ip address to the server’s host name. Windows 7 ...
I nstall the s erver s tep 4: l og in , g enerate ssl c ertificate 50 m86 s ecurity i nstallation g uide now that the security certificate is installed, you will need to map the web filter’s ip address to its host name. Proceed to map the web filter’s ip address to the server’s host name. Map the we...
I nstall the s erver s tep 4: l og in , g enerate ssl c ertificate m86 s ecurity i nstallation g uide 51 c. Enter a line in the hosts file with the web filter’s ip address and its host name— the latter entered during the configure host name screen of the quick start setup procedures (step 1a), or th...
I nstall the s erver s tep 5: t est f iltering or the m obile c lient c onnection 52 m86 s ecurity i nstallation g uide step 5: test filtering or the mobile client connection test filtering on the web filter if the web filter has been set up in the invisible, router, or firewall mode, you should tes...
I nstall the s erver s tep 6: s et l ibrary u pdates m86 s ecurity i nstallation g uide 53 step 6: set library updates after verifying that the web filter is correctly functioning on your network, you need to activate web filter library updates. Library updates are critical for filtering as new site...
I nstall the s erver s tep 6: s et l ibrary u pdates 54 m86 s ecurity i nstallation g uide perform a complete library update your web filter was shipped with the latest filtering library update for the current software release. However, as new updates continually become available, before you begin u...
I nstall the s erver s tep 6: s et l ibrary u pdates m86 s ecurity i nstallation g uide 55 monitor the library update process to verify that the library is being updated: a. From the navigation panel, click updates and select library update log from the menu. B. In the library update log window, cli...
C onclusion s tep 6: s et l ibrary u pdates 56 m86 s ecurity i nstallation g uide c onclusion congratulations; you have completed the web filter installation procedures. Now that the web filter is filtering your network, the next step is to set up groups and create filtering profiles for group membe...
B est f iltering p ractices m86 s ecurity i nstallation g uide 57 b est f iltering p ractices this collection of setup and usage scenarios is designed to help you understand and use basic tools in the web filter console for configuring the user interface and creating filtering profiles for users in ...
B est f iltering p ractices t hreat c lass g roups 58 m86 s ecurity i nstallation g uide threat class groups m86 security’s filtering library currently consists of 104 library filtering categories, each placed in one of the 20 filtering category groups defined in the interface: adult content, bandwi...
B est f iltering p ractices t hreat c lass g roups m86 s ecurity i nstallation g uide 59 i. Threats/liabilities 1. Category block block categories that threaten your network/organization. In pertinent profiles, block access to the security category group and other categories containing content that ...
B est f iltering p ractices t hreat c lass g roups 60 m86 s ecurity i nstallation g uide 4. Custom lock, block, warn, x strikes, quota pages customize a lock, block, warning, x strikes, or quota page. Modify page contents to point to a url within your organization, send a request to your admin- istr...
B est f iltering p ractices t hreat c lass g roups m86 s ecurity i nstallation g uide 61 7. Custom category (blocked) add a category to block content that could endanger your network/organiza- tion. Create a custom category with contents tailored to safeguard your organiza- tion. Block this category...
B est f iltering p ractices t hreat c lass g roups 62 m86 s ecurity i nstallation g uide 10. Exception url bypass use exception urls to grant users access to urls blocked at the root. To grant users access to globally-blocked urls, enable the exception url bypass option in the minimum filtering leve...
B est f iltering p ractices t hreat c lass g roups m86 s ecurity i nstallation g uide 63 ii. Bandwidth/productivity 1. Time quota/hit quota limit time spent in passed categories to prevent excessive bandwidth usage and increase productivity. Enable the quota settings feature, and configure the secon...
B est f iltering p ractices t hreat c lass g roups 64 m86 s ecurity i nstallation g uide 4. Warn option with low filter settings warn users before they access unacceptable content that their internet activities are logged. Set https filtering at the “low” level, and then configure the number of minu...
B est f iltering p ractices t hreat c lass g roups m86 s ecurity i nstallation g uide 65 7. Im patterns block im services. Enable pattern blocking for all users. In the profile, block internet communication > chat and instant messaging (im) categories. To block im services, go to: • system: system >...
B est f iltering p ractices t hreat c lass g roups 66 m86 s ecurity i nstallation g uide 10. Remote access patterns block remote access patterns. Enable pattern blocking for all users. In the profile, block internet productivity > remote access category. To block remote access patterns, go to: • sys...
B est f iltering p ractices t hreat c lass g roups m86 s ecurity i nstallation g uide 67 13. Rule block use a rule to block the bandwidth category. Create a rule that blocks the band- width category and apply this rule to pertinent profiles. To create and block a rule for the bandwidth category, go ...
B est f iltering p ractices t hreat c lass g roups 68 m86 s ecurity i nstallation g uide 16. Custom block/warn/x strikes/quota pages customize a block, warning, x strikes, or quota pages. Modify page contents to point to a url within your organization, send a request to your administrator’s email ad...
B est f iltering p ractices t hreat c lass g roups m86 s ecurity i nstallation g uide 69 2. Warn-strike with higher thresholds warn users before they access unacceptable content and may be locked out of the internet. Set https filtering at the “high” level, configure warning settings, and enable x s...
B est f iltering p ractices t hreat c lass g roups 70 m86 s ecurity i nstallation g uide 5. Overall quota restrict all quota time in a profile to improve productivity. Cap the amount of time a user spends in all quota-marked categories by enabling the overall quota option and specifying the number o...
B est f iltering p ractices t hreat c lass g roups m86 s ecurity i nstallation g uide 71 8. Custom block/warn/x strikes/quota pages customize a block, warning, x strikes, or quota pages. Modify page contents to point to a url within your organization, send a request to your administrator’s email add...
B est f iltering p ractices t hreat c lass g roups 72 m86 s ecurity i nstallation g uide 3. Ip exceptions use exception urls to grant individuals access to ips blocked by the minimum filtering level. Enable the option to bypass the minimum filtering level using exception urls. Enter the exception in...
Led i ndicators and b uttons f ront c ontrol p anels on 500 and 700 s eries u nits m86 s ecurity i nstallation g uide 73 led i ndicators and b uttons front control panels on 500 and 700 series units control panel buttons, icons, and led indicators display on the right side of the 500 and 700 series ...
Led i ndicators and b uttons r ear p anel on the 700 s eries u nit 74 m86 s ecurity i nstallation g uide rear panel on the 700 series unit power supplies (led indicators) – the power supplies are located at the right on the rear of the chassis. An led indicator is located above each of the power plu...
R egulatory s pecifications and d isclaimers d eclaration of the m anufacturer or i mporter m86 s ecurity i nstallation g uide 75 r egulatory s pecifications and d isclaimers declaration of the manufacturer or importer safety compliance electromagnetic compatibility (emc) federal communications comm...
R egulatory s pecifications and d isclaimers d eclaration of the m anufacturer or i mporter 76 m86 s ecurity i nstallation g uide ec declaration of conformity european community directives requirement (ce) declaration of conformity manufacturer’s name: m86 security 828 w. Taft avenue orange, ca 9286...
M86 s ecurity i nstallation g uide 77 a activate and register the r3000 53 always allow custom category 71 b bandwidth/productivity 63 boot up 300 series server 74 500, 700 series server 73 c category block 59, 66 change quick start password 29 csa 75 custom block/warn/x strikes/quota pages 68, 71 c...
78 m86 s ecurity i nstallation g uide ping the sr 38 power supply precautions 16 proxy patterns 62 q quick start menu 25 r rack setup precautions 6 real time probe information 68 reboot 29, 35 300 series server 74 500, 700 series server 73 remote access patterns 66 reset admin account 29 reset syste...
M86 security corporate headquarters (usa): 828 west taft avenue orange, ca 92865-4232 • tel: 714.282.6111 or 888.786.7999 fax: 714.282.6116 (sales/technical support) • 714.282.6117 (general office).