Content Security Gateway User’s Manual

Chapter 2: Hardware Installation

2.1 Installation Requirements

Before installing the Content Security Gateway, make sure your network meets the following requirements.

- Mechanical Requirements

The Content Security Gateway is to be installed between your Internet connection and local area network. The Content Security Gateway can be placed on the table or rack. Locate the unit near the power outlet.

- Electrical Requirements

The Content Security Gateway is a power-required device, it means, the Content Security Gateway will not work until it is powered. If your networked PCs will need to transmit data all the time, please consider use an UPS (Uninterrupted Power Supply) for your Content Security Gateway. It will prevent you from network data loss. In some area, installing a surge suppression device may also help to protect your Content Security Gateway from being damaged by unregulated surge or current to the Content Security Gateway.

- Network Requirements

In order for Content Security Gateway to secure your network traffic, the traffic must pass through Content Security Gateway at a useful point in a network. In most situations, the Content Security Gateway should be placed behind the Internet connection device.

2.2 Operation Mode

CS-500 DMZ port supports three operation modes, Disable, NAT and Transparent. In Disable mode, the DMZ port is not active. In transparent mode, CS-500 works as proxy with forward DMZ packet to WAN and forward WAN packet to DMZ, the DMZ and WAN side IP addresses are in the same subnet. In NAT mode, DMZ side user will share one public IP address of WAN port to make Internet connection. Please find the following two pictures for example.

2.2.1Transparent Mode Connection Example

Internet

ISP

ADSL Modem

CS-500

WAN: 61.11.11.11

 

 

 

LAN:

 

 

 

 

 

DMZ: Transparent

 

 

 

 

192.168.1.1

 

 

 

 

 

 

to WAN

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

LAN PC 1:

LAN PC 2:

DMZ PC 3:

DMZ PC 2:

192.168.1.2

192.168.1.3

61.11.11.12

61.11.11.13

- 5 -