Surf Control v5.5 manual Database Considerations, Database Platforms, SQL Server Express

Page 26

INSTALLATION DECISIONS

Database Considerations

2

DATABASE CONSIDERATIONS

Before you start to install Web Filter, you should decide:

Which database platform you plan to use (SQL Server Express or SQL Server).

How Web Filter will connect to the database (Windows or SQL authentication).

DATABASE PLATFORMS

Web Filter uses SQL Server Express, or a fully-licensed version of SQL Server 2000 or 2005. SurfControl recommends that you ensure your choice of database platform is installed and running, before attempting to install Web Filter. SurfControl recommends that you use SQL Server rather than SQL Server Express for the following reasons:

SQL Server allows greater scalability.

SQL Server enables you to fine-tune database performance.

SQL Server is more suitable for environments with heavy Web traffic.

SQL Server Express has a maximum size of 4GB.

Web Filter connects to the database using a fully-qualified connection string. This string contains all the details required to connect to a database including database type, name of the server, user ID, password, and database name. Using a connection string does not require the creation of Data Source Names (DSN), therefore, any Web Filter client or server on the network can access the database without creating a link through the ODBC driver.

SQL Server Express

If you are not using a SQL Server database, you need to install SQL Server Express. SurfControl recommends you install your database platform before installing Web Filter. If you want to use SQL Server Express, be aware of the following:

You must install .NET Framework 2.0 before installing SQL Server Express.

If installing on a Windows 2000 computer, you must install Windows Installer 3.1 before installing SQL Server Express.

You must install SQL Server Express as a Default Instance when prompted during installation.

You must install the Database and Connectivity Components when prompted during installation.

You must perform the steps outlined below after installing SQL Server Express, and before installing Web Filter.

By default, SQL Server Express runs as a Network Service. When performing a database archive or restore, it needs to run with a local admin account to be able to access drive C.

The following post SQL Server Express installation configuration is taken from the MSDN Blog entry: http:/ /blogs.msdn.com/sqlexpress/archive/2004/07/23/192044.aspx which explains the steps in more detail. The Post SQL Server Express Installation Configuration steps are as follows:

1Make sure SQL Server Express is running correctly (assumes a default install).

2Open a Command Prompt.

SurfControl Web Filter for ISA v5.5

Starter Guide 21

Image 26
Contents SurfControl Web Filter Trademarks SurfControl Web Filter Table of Contents Appendix Chapter HOW WEB Filter and ISA Server Interact Microsoft ISA Server EditionISA Server System Requirements Hardware RequirementsGeneral System Requirements SQL Server Licensing System Requirements Installation Decisions Network Considerations User Name ResolutionIntroduction Database OptionsDMZ Recommendations Network ConsiderationsDeployment Recommendations Network Considerations Firewall Port Configuration Web Filter communication portsISA Server 2004/2006 ISA Server AuthenticationISA Server User Name Resolution EUMEUM on Windows 2000 and 2003 domain controllers Methods of Installing EUMEUM Agent on Domain Controllers EUM on Windows NT domain controllersBefore installation Logging Levels NetwareeumIgnoring Users in NetWare EUM Installing the Login Agent on Windows 2000 EUM Login AgentInstalling the Login Agent on NT Domains Login Agent Location EumLogin.ini file Below is a copy of the supplied .ini fileHow to configure the file EumLogin.ini file sectionsConfiguring a logon and logoff script Add an Exception to the Windows FirewallSQL Server Express Database ConsiderationsDatabase Platforms SQL Server SQL Server minimum requirements on Web Filter serverWindows Authentication Database AuthenticationReasons to Install SQL Server on a Dedicated Server SQL AuthenticationCategorization Options Other ConsiderationsInternet Threat Database Internet Threat Database Improvement ProgramRemote Administration Client Mail NotificationsRemote Administration Client minimum requirements Privacy Edition ConsiderationsInstalling Web Filter Installation Process NetWare client on to the Web Filter serverInstalling SQL Server Express Optional Installing Surfcontrol WEB Filter Select I accept the terms of the license agreementInstalling SurfControl Web Filter Select SurfControl Web Filter Installing SurfControl Web Filter Installing SurfControl Web Filter Changes to the Server Configuring WEB Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Configuring Web Filter Threat Database Internet Threat Database Update screen is displayedAutomatic Database Management screen is displayed Configuring Web Filter Click Add to list Enterprise User Monitoring recommended NetBIOS Configuring Web Filter Configuring Web Filter Installing Service Pack Installing Service Pack Installing Service Pack Further Configuration Firewall Policy Rules for ISA Server 2004 Post Installation TasksALL Installations Network DependentInstalling the EUM Agent on Your Domain Controllers User Name Resolution Making changes to the EUM Agent configuration Select Domain Controllers screen is displayedUser Name Resolution Installing the EUM Login Agent on Your Network Installing NetwareeumAdd Web Filter Servers to NetWare EUM Automatically loading the NetWare EUMUnloading the NetWare EUM Ignored users in NetWare EUMInstall Surfcontrol Report Central Installing the Remote Administration Client Select I accept the terms of the license agreement Select Remote Administration Installing the Remote Administration Client Remote Administration Client and Windows Vista InstallShield Wizard Complete screen is displayedFirewall Policy Rules Allow Internet Threat Database UpdatesConfigure IE and the VCA Allow VCA Spider FunctionalityFrom Access Rule Destinations, click Add Allow the Remote Administration Client AccessConfigure a Firewall Policy Rule for the VCA From the Primary Connection Information screen, click NewEnter 8888 in the Port Range From field Allow Remote Access to Surfcontrol Report CentralSRC Click Apply in the Firewall Policy window Appendix Contact Technical Support Location Contact information Sales and Feedback