cancel
Showing results for 
Search instead for 
Did you mean: 
masaboor
Level 7

Deploymetn of Mcafee Web Gateway 7.*

Is there any step by step document for deployment of Mcafee Web Gateway Version 7.* in Windows Domain Environment???

0 Kudos
3 Replies
McAfee Employee

Re: Deploymetn of Mcafee Web Gateway 7.*

Hello masaboor,

here you will find the information how to join the MWG to a domain:

https://community.mcafee.com/docs/DOC-4918#jive_content_id_Configuration

Best regards,

Marcel

0 Kudos
Peacekeeper
Level 20

Re: Deploymetn of Mcafee Web Gateway 7.*

Moved to Web Gateway

0 Kudos
Regis
Level 12

Re: Deploymetn of Mcafee Web Gateway 7.*

masaboor wrote:

Is there any step by step document for deployment of Mcafee Web Gateway Version 7.* in Windows Domain Environment???

Personally I'd go with 7.6 as 7.7 is quite new and is the feature branch right now vs the stable branch.

The docs to know about if you haven't seen them already are the installation guide and then the product guide:

https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/26000/PD26167/en_US/...

https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/26000/PD26168/en_US/...

I believe there are best practices lying about a plenty too:  Best Practices Documents:  Web Gateway

And the web gateway Expert Center deserves a bookmark too

Personally, Web gateway is not a product I'd spin up for a domain environment without some consulting help.  At the very least a quick start engagement remotely (that's how we started with it), especially if you've not done a web proxy before.  We'd come from a lot of experience with [vendor that rhymes with FluBoat] but even then, there's enough of a different mind set to these awesome boxes that good consulting help is well worth it if available.   Otherwise I've had glorious luck on this product with Enhanced Business or Platinum support on these (we started with Gold which was fine on this product too but on other products was pretty rough).

Getting authentication right (consider Kerberos) and SSL inspection right is non-trivial (not terribly hard with the ruleset library mind you, but it ain't trivial), and I'd strongly encourage you to do SSL inspection. If you have a Microsoft certificate authority on your domain that's not hard either, but.. also, not trivial.  An experienced guide is helpful.   Someone to point out all the sorta mind blowing functionality that's available in these can pay dividends for years.  We're 5 years in and I'm still learning things these can do that I wasn't aware of. 

Consider putting the FOCUS conference on your calendar is you haven't already (there's a heck of a discount on tickets if you buy by end of year here too Events | Intel Security ​ )  as they have a lot of sessions on web gateway and you can meet miscreants from these forums like Jon Scholten in real life and confirm that he's actually not a bot.  It's in Las Vegas October 17-19.

0 Kudos