HP Webcache Filter 74

74CHAPTER 6: SECURITY

Contents

SuperStack® Page CONTENTS IGETTING STARTED IIWEBCACHE FEATURES SYSTEM TIME SECURITY 7CONTROLLING AND MONITORING WEB ACCESS 8 SYSTEM EVENTS 9PERFORMANCE MONITORING 10SYSTEM DIAGNOSTICS 11SOFTWARE UPGRADE AND INSTALLATION IIICOMMAND LINE INTERFACE PROBLEM SOLVING GNU G 2, J Page ABOUT THIS GUIDE Conventions Related Documentation Comments pddtechpubs_comments@3com.com Product Registration GETTING STARTED Page INTRODUCING THE WEBCACHE What is the Webcache Reduced Network Traffic Reduced Web Latency ■Smoother Traffic Flow ■Controlled Web Access The Webcache and 3Com Network Supervisor Webcache — Front Figure View Detail LEDs Webcache — Rear WARNING: Power Socket Console Port WAN Port CAUTION: LAN Port WAN and LAN Port LEDs Default Settings Page Page INSTALLING THE WEBCACHE WARNING: Safety Information Package Contents Choosing a Suitable Site Rack-Mounting the Webcachemounts Page Page Page The Power-up Sequence Powering-upthe Checking for Correct Operation of LEDs Solving Problems Indicated by LEDs Deploying the Webcache in Your Network Proxy Cache Transparent Cache Migrating from Proxy Cache to Transparent Cache Mode Deploying the SuperStack 3 Firewall Setting Up the Webcache for Management Setting Up Using the Web Interface Before You Begin An IP address A subnet mask A default router address A Domain Name System (DNS) server address Setting Up Using the Web Interface Setting Up Over the Test Network Setting Up Using a Cross-overCable Accessing the Web Interface Command Line Interface Setting Up Through the Console Port Accessing the Command Line Interface Getting Started Wizard Settings Connecting the Webcache to the Live Network Choosing the Correct Cables Connecting the Configuration Concepts IP Addresses Obtaining a Registered IP Address World Wide Web site: http://www.internic.net Subnets and Using a Subnet Mask Default Router Web Proxy Auto-Discovery Syntax ■Host Name ■Domain Name CONFIGURING WEB BROWSERS Manual Proxy Auto Configuration (PAC) File Scripts not 3Select System -> Caching -> Browser Auto-Config in the Navigation Tree Page Web Proxy Auto-Discovery (WPAD) Resources Third-partyTools WEBCACHE FEATURES Page MANAGING THE WEBCACHE Management Software Interfaces Logging in as a Default User Accessing the Web Interface Page Understanding the Figure 18 The Web Interface Web Interface ■The Banner ■The Toolbar ■The Navigation Tree The Toolbar The Summary View The Device View The Help View ■Device Summary Device Mimic ■Console Port Hotspot ■LAN Port Hotspot ■Unit Hotspot Page The Navigation Tree The Information Area Page SYSTEM TIME Configuring the System Time System Management Network Time Protocol Choosing a Protocol Server System Time Using the Network Time Protocol Manually System Time and Page 6 SECURITY What is Password Recovery Enabling/Disabling Password Recovery Security Recovery Performing Page WEB ACCESS Configuring Web Site Blocking Caching Web Site Blocking Domain Name Rules 2Select System -> Caching -> Customize Response in the Navigation Tree What is Web Client Client Blocking 3Select System -> Caching -> Client Machine Blocking in the Navigation Tree What is Access Logging Configuring Access Logging Access Logging Viewing the Access Log 3Select System ->Caching ->View Access Log in the Navigation Tree Analyzing the Access Logs Page SYSTEM EVENTS What are System Events Email Notification ■Webcache Software Upgrade Events This includes the following events: ■Webcache System Failure Events This includes the following events: SNMP Traps Configuring SNMP Traps PERFORMANCE MONITORING What is Monitoring Caching Performance ■Bandwidth Saving (%) ■Hit and Miss Rate (%) ■Request Rate (sec-1) ■ Hit and Miss Latencies (msec) ■ Throughput (Kbits/sec) System ■CPU Load (%) ■Memory Usage (Mbytes) ■Disk Activity (sec -1) ■Network Packets (sec -1) ■New TCP Connection (sec -1) ■DNS Lookups (sec -1) ■DNS Hit Rate (%) SYSTEM DIAGNOSTICS Diagnostics Ping Pinging Other Devices Tracing IP Addresses Performing a Trace Route System Log Configuring the What is a Syslog Server Obtaining a Syslog Server Viewing the System Log Diagnostics View System Log Page INSTALLATION Software Upgrade SNMP Traps Unsuccessful Software Upgrades Detecting Software Performing a Software Upgrade Performing an Automatically Detected Software Upgrade ■View Upgrade Version Release Notes ■Upgrade Now ■Upgrade Later ■Discard Upgrade Performing a Manual Software Upgrade System Control Upgrade Software Installation Unsuccessful Software Installations Performing a Installation Saving and Restoring Configurations Example Saving a Restoring a Page COMMAND LINE INTERFACE Page Accessing the Accessing the Command Line Interface Through the Console Port Accessing the Interface Over the Network Logging In To the Exiting the Interface Understanding the ■GettingStarted command ■Logout command ■Protocol menu ■Security menu ■System menu Entering Commands ■To enter a simple command: ■To enter multiple commands: ■To enter commands that require values: ■To display sub-menus: ■To display parent menus: ■To display the Top-levelmenu: Press [Esc] Obtaining Help A Quick Guide to Page Page Exiting the Displaying and Changing IP-related Specifying Basic IP Configuration Specifying Domain Name System Configuration Resetting IP Information to Factory Default Settings Pinging Other Devices Displaying IP Summary Information Tracing IP Addresses Changing Security Changing the Admin Password Enabling and Disabling Password Changing Webcache Information and What Happens During an Initialization Rebooting the What Happens During a Reboot Specifying a Contact Name Specifying Location Details Specifying a Setting the Webcache SNMP Community Displaying Summary ■System Name ■Location ■Contact ■Time Since Reset ■Software Version ■Hardware Version ■MAC Address PROBLEM SOLVING Page Accessing the Webcache via the Console Line The terminal or terminal emulator cannot access the Webcache. Check that: The terminal or terminal emulator can no longer access the Webcache over the network Accessing the Webcache via Telnet You cannot access the Webcache using Telnet Solving Web You cannot access the Web interface You are using Internet Explorer and you cannot access the Web interface The Web interface responds slowly to commands The Customize Response page is not displayed when a Web site is blocked The Proxy Auto Configuration (PAC) file is ignored by the Web browser The System Time does not update in the Web interface The System Time is inaccurate The Webcache fails to power-up Solving Command The Command Line Interface responds slowly to commands Line Interface Solving Webcache The performance of the Webcache is poor PerformanceCheck: No Web sites can be accessed using the Webcache Local domain sites cannot be accessed using the Webcache as a proxy Page APPENDICES AND INDEX Page SAFETY INFORMATION WARNING: AVERTISSEMENT: WARNHINWEIS: Important Safety Page Consignes importantes de sécurité AVERTISSEMENT Wichtige Sicherheitsinformat ionen Page Page PIN-OUTS Pin-outs Null-Modem Cable PC-ATSerial Cable 9-pinto 9-pin Modem Cable RJ-45 Pin Assignments Page TECHNICAL SPECIFICATIONS Page TECHNICAL SUPPORT Online Technical Services World Wide Web Site 3Com 3Com FTP Site Support from Your Network Supplier Support from 3Com Page Returning Products for Repair Page Page GLOSSARY DNS Ethernet Fast Ethernet FTP full duplex LAN LAN port latency line speed MRTG proxy cache router server SNMP subnet VLAN WAN URL UTC WAN port Page INDEX Page Page Page Page Page 3COM END USER SOFTWARE LICENSE AGREEMENT GNU G Page Page Page REGULATORY NOTICES