cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Former Member
Not applicable
Report Inappropriate Content
Message 1 of 6

McAfee Web gateway sending all traffic to different web gateway Clusters.

You have two cluster web gateway in same network eachcluster has two web gateway. And two Virtual IP.

Here your problem was current running McAfee web Gateway (INProduction) is sending traffic to standalone McAfee Web Gateway.

we have MWG1 172.16.1.51 and MWG2

172.16.1.52 which is clustered to IP 172.16.1.50, ( This Web gateway in production )

* We have another 2  MWG3 IP 172.16.1.101 and MWG4

IP 172.16.1.102 Cluster IP 172.16.1.100 (stand alone Servers Still Under Implementation)

* All the 4 WW servers are in same subnet.

Problem is production webgateway is sending traffic to stand alone servers like MWG3 IP 172.16.1.101 and MWG4  IP 172.16.1.102

Regards,

Sabin Karthikeyan.

5 Replies
MSchneider
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 6

Re: McAfee Web gateway sending all traffic to different web gateway Clusters.

Following problem:

As all your servers are in the same subnet, the can see eachother. I suspect that all have Proxy HA enabled!? What will happen is, they will cluster together as a single large HA cluster.

Solution:

In case this is not wanted, here is the setting:

On the shell go to 

cd /etc/sysconfig

vi mfend

as last line add he highlighted section and use the same value for all appliances to be in one HA-cluster (I used the VRRP Router ID in my case):

### BEGIN AUTOGENERATED CONFIG

MFEND_MANAGEMENT='10.150.163.20'

MFEND_MODE='haproxy'

MFEND_ROLE='director'

MFEND_REDIRECT[0]='http 9090 vlan:none 9090'

### END AUTOGENERATED CONFIG

MFEND_LBID='51'

Michael

Michael Schneider
Senior Manager of PM
for Web Protection and UCE
(•‿•)
asabban
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 6

Re: McAfee Web gateway sending all traffic to different web gateway Clusters.

After that change a reboot is required.

Best,

Andre

Former Member
Not applicable
Report Inappropriate Content
Message 4 of 6

Re: McAfee Web gateway sending all traffic to different web gateway Clusters.

Hi Michael and Andre,

Do I have to change the MFEND on both clusters or can i leave one cluster default and change at the other cluster the mfend file?

Regards,

Ray

asabban
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 6

Re: McAfee Web gateway sending all traffic to different web gateway Clusters.

Hi,

you can leave one default. Important is that both clusters have a different ID.

Best,

Andre

Re: McAfee Web gateway sending all traffic to different web gateway Clusters.

Thanks, it's works

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community