Web Gateway: Installation Instructions

[#1]

• Introduction
• License and Software Download
• What to do with the downloaded ISO?
• And if I want to use USB?
• The imaging process and wizards
• First Login to the User Interface

Introduction

This article is designed to show you how to download the McAfee Web Gateway software, image an appliance and work through the initial configuration and activation. Further articles in this series will describe how to configure individual features.

License and Software Download

McAfee Web Gateway Licenses, Documentation and Software Downloads are all available on https://contentsecurity.mcafee.com

If you do not have an account for this page, please email our Customer Service department (licensing@mcafee.com) with your Grant number and request an account.

After the Login you can select "McAfee Web Gateway" under the product section

The download section offers ISO as well as USB images. ISO images are most commonly used (e.g. for virtual server) and we do recommend you stick with the "Main Release" unless you have a specific reason to go with the "Controlled Release".

You can find more information about the different releases and update procedures in this article: https://community.mcafee.com/docs/DOC-5036

The license section will show your purchased and evaluation Web gateway license. Click on the desired license to start the download.

What to do with the downloaded ISO?

After downloading the ISO, you have three options on how to use the ISO to image your physical or virtual appliance:

a) Burn the ISO image to a CD and physically insert and image the appliance (normally not needed anymore because of options b and c)

b) Use the Remote Access card on your physical appliance to mount the ISO directly (highly recommended). More details about the remote access cards can be found in this article:

Web Gateway: Configuring your Remote Access Card (RMM)

And inside the MWG Hardware Guide:

Web Gateway 7.8.2 Hardware Guide

c) Mount the ISO directly into your virtual Appliance. For example in VMware ESXi you can mount it from the ESX datastore

And if I want to use USB?

The USB drive must be bootable if to be used for re-imaging. You can create a bootable USB drive with a suitable program, for example, Microsoft Win32diskimager

For more information, please see following Knowledge Base article (KB75504):

How to image a Web Gateway appliance using a USB memory stick / thumb drive on Windows platforms

The imaging process and wizards

Once the appliance boots from the ISO image, you will see an Installation dialog. It is highly recommended to go with the default option "video console (with configuration wizard)"

The imaging process will proceed and no further interaction is needed until the appliance reboots and starts the configuration Wizard. The imaging process should only take about 5 minutes.

The first step in the installation wizard is to select "No" for the DHCP configuration option

 

On the next screens configure your IP address, subnet mask, default gateway and hostname for the appliance. Afterwards the configuration wizard will ask you to configure your primary DNS server. A secondary DNS server is normally not needed for the initial setup: 

Configure your IP Address

Subnet Mask

Enter your default gateway  

Answer yes to configure your DNS server

 Enter your DNS Server

Double check your Network settings on the summary page and then confirm with "Yes"

The next step is to set and confirm the root password for your appliance

Type your root password

Type it again... 

The next step in the configuration wizard is to decide whether you would like to allow root logins via SSH or not. "Yes" is the most commonly used option here

Would you like to permit root login over SSH?

Choose the volume scheme

The default installation of Web Gateway on all hardware appliances restricts the /opt partition to 40GB and gives the remaining space to the cache. When you switch to the alternate scheme, the cache partition size will be limited to 40GB and the /opt partition gets the remainder.

The scheme can be changed after installation by running mwg-cache-wizard, but this can only be performed once.

The system will now apply the configuration and finish the boot process. Once you see the login prompt, you can leave the command line and open the web interface UI (see below)

 

First Login to the User Interface

The Web Gateway User Interface can be accessed via your internet browser:

http://<IP of your appliance>:4711

or (recommended)

https://<IP of your appliance>:4712 

The default credentials for the interface are:

Username: admin

Password: webgateway

When you access the User Interface, you can use the browser (in Internet Explorer), as a Java WebStart Application or as in-browser HTML. If using the browser you will likely get prompted to allow popups to ensure the interface can function properly. In addition you might see several java warnings that need to be acknowledged for the UI to load. To run the UI as a Java WebStart Application, click the link to download the MWG-UI WebStart, you can then run the UI directly as a Java application outside of the browser. Use “UI as in-browser HTML” to have access without using Java at all.

Once the UI is fully loaded, you will see an initial Setup wizard which allows you to import your license (downloaded at the beginning of this article) and activate the product.

All other steps in this wizard are optional and can be skipped by clicking the "Close Wizard" Button.

At this point your McAfee Web Gateway is up and running and you could point your browser at it for the first test requests.

The default proxy port is 9090.