cancel
Showing results for 
Search instead for 
Did you mean: 

MWG7 Appliance Setup

First let me say, this is highly experimental. That is to say, it works for me and few people that have used it, but no guarantees it will work as advertised for you.

Second. This is not supported by McAfee Support in anyway.

Now with that out of the way...

MWG6 (formerly Webwasher) had a utility that you ran on a Windows PC to create a small configuration file that had basic IP address information on it. When the appliance first booted, it would look for the config file, read it, and set the interfaces to IP addresses for access to the UI and continue configuration.

McAfee Web Gateway 7 has a wizard that prompts for the networking information when first booted. But it also has similar hooks into the boot process to read a config file from a USB stick and apply the networking information.

This utility creates the config.zip file that MWG7 uses with basic networking settings like IP addresses/masks, default gateways, DNS settings, NTP settings, and static routes.

To use. Run program and fill in the blanks. Save the config.zip file it generates to a USB stick.

Capture.jpg

Reimage the appliance, but choose the option "4-video console preferred".

Do not choose 1 or 2 because it won't read the file from the USB if you do.

Capture2.jpg

Let the imaging process complete to the end.

Capture3.jpg

Replace the imaging USB stick and replace with the one with containing the config.zip.

Reboot appliance (press enter).

It will pause for a few seconds at this point. Do not press any keys, just wait.

capture4.jpg

After the timeout, it will read the USB for config.zip. You can see the evidence of that here:

Capture5.jpg

When the appliance has finished booting, you should be able to acces the UI using the IP address specified in the utility.

Capture6.jpg

The main reason I wrote this was to load large quantities of static routes into a gateway instead of tediously adding them to the appliance in the UI. This tool lets you import or paste some flat files for static routes.

Let me know if this is useful for you.

Version History:

1.0.0.3: 8/13/2012

Formatted the XML output to include line feeds.

Attachments
Comments

Excellent document eelsasser. 

I discovered if you put the config.zip onto the USB key before the image it will apply the config to the server automatically.  You do not need to wait for the second boot.

The only thing I cannot figure out is how to import or paste routes.  Is there a specific format that they need to be in?  I would also love to know what else I can set up in the config using this method.  Is there a way of setting up the root and or GUI password using this method?

Although the XML files created by this tool are valid XML, their format is not the same than written by the Konfigurator. There are two problems with this:

1. If you use a configuration created by this tool and do an update, the migration may fail (or at least will not do what it should do)

2. The Feedback Analyzer and the Consistency Checker don't work with the configuration files created by this tool

Reason for the problems is, that this tool writes a whole XML file into one line, while both migration and Consistency Checker expects that every XML-tag will begin in its own line. Indendation doesn't matter, but every XML-tag needs to begin in a new line.

Eric, this may be fixed on MWG side but until then, please fix your tool.

This should be fixed now. Each line in the XML should be on it's own newline.

Hi,

Is there a way I can make the MWG to read the config.zip contents for the second time without re-imaging the appliance ? My requirement is to change the Network settings of the appliance - IP address / Mask/ Gateway / DNS / Static Routes, without re-imaging it.

Regards,

Shridhar

Version history
Revision #:
1 of 1
Last update:
‎03-12-2012 11:32 AM
Updated by: