cs user manual

CAE ICT KNOWLEDGE BASE ARTICLE:Work Instruction:ClearSwift Web Gateway

document.docx

ScopeAdministrators of Clearswift Web Gateway (CSW)

Requirement- Internet Browser (preferably Internet Explorer) - Current access details (username & password) for Clearswift Web Gateway (CSW)

ApplicationThese set of instructions are to be used to educate an end user in the basic administrative tasks, general administration and most frequently used tools of the Clearswift Web Gateway (CSW)

Document Control Printing this document or transferring it to another electronic format will result in the document being an uncontrolled copy. Please check that you are using the current version by checking on the CAE intranet site.Process Owner: Sahan KumarageVersion Date: 07/02/2012

Approved: Date:07/02/2012CAE 253 Flinders Lane Melbourne 3000 Ph 9652 0611 www.cae.edu.au

of 22


document.docx

Clearswift Web Gateway – Web Interface

The IP address of the CSW is:10.50.10.4

To access the web interface, point your browser (without a proxy server enabled) to:https://10.50.10.4 or https://csw.cae.edu.au

Input the current username & password to gain access to the CSW Dashboard.



of 22

https://csw.cae.edu.au/

https://10.50.10.4/


document.docx

Clearswift Web Gateway – Dashboard Menu

When you log in to the CSW web interface,The user is greeted by the following menu and a few brief details about the CSW, such as:

- System Health Overview- Network Bandwidth Overview- Any warning messages- Access to Management Centers- Recent client activity log



of 22


document.docx

Clearswift Web Gateway – Policy Center

When you click on ‘Policy’ tab you will be greeted to the Policy center home page.

- Try not to make any changes to the ‘Global Web Policy’ page.o It should normally be left as is. This policy will affect the whole organization. Furthermore you will

need to restart the proxy device which will take at least 10mins to boot up.

- ‘Content Rules’ can be modified or created to use with the ‘Web Policy Routes’.

- ‘Web Policy Routes’ is where you create, modify or prioritize the policies of your organization.

o You either create ‘Block’ policies or ‘Allow’ policies, depending on the organization’s Active directory user groups.

o This is where you manage almost everything about policies and user groups.

GLOBAL WEB POLICY WEB POLICY ROUTES CONTENT RULES



of 22


document.docx

Clearswift Web Gateway – Report Center- ‘Report Center’ is where you can monitor user activity and other threats to the internal network.



of 22


document.docx

Clearswift Web Gateway – System Center Home- In ‘System Center Home’ we can manage, configure and edit the basic device settings.



of 22


document.docx



of 22


document.docx

Clearswift Web Gateway – System Health- System Health Page is where we can get an overall idea of the system status.



of 22


document.docx

Clearswift Web Gateway – User Center Home- This page configures user access and management.



of 22


document.docx

Setting up the device for the first time

Clear Swifts NIC1 is set to 192.168.10.10 by default. We need to connect NIC1 to a PC using a cross cable.Make your pc’s IP address 192.168.10.5 or something and subnet 255.255.255.0

********************************Not necessary************************************************** If you connect the device to a LCD monitor and if you need to SSH to it, type***

Username : consolePassword : console

This will take you to the console menu.***********************************************************************************************

Once connected type this url on your browser. https://192.168.10.10

Follow the Setup wizard to complete the installation.During the setup wizard you can assign IPs for NIC1 / NIC2. You can create and change “system”, “console” and “Web admin” passwords during this. Make sure to write them down. Once this is done the device will restart couple of times.



of 22

https://192.168.10.10/


document.docx

Once the device is rebooted you must be able to access the gateway from any PC which is on the domain using the new IP address you assigned during the setup wizard. Make sure you use “https://”.

Log in using the Web admin account you just created during the setup.

Once you log in successfully go to SYSTEM > Ethernet Settings and verify you configurations.

Configure DNS servers in the following order.

o Primary Server : 10.50.10.101o Secondary : 202.174.227.2o Tertiary : 208.67.222.222 (Internet public DNS server address)

Ensure that the “Enable DNS caching ” is on Under “Static host entries” click on “new” and enter 10.50.10.101 assigned to hostname “left1.cae.edu.au”



of 22


document.docx

SSH access control Go to “Service control” under “System” menu and ensure all the services are running. Go to “SSH access” and enable SSH. Use couple of admin PC IP addresses to SSH in to the device in case

of an emergency.

Authorization Certificates You can create an Authorization certificate for the device if you need to. Please refer to \\10.50.10.8\ict\!!!The

Book of Bobby\CLEARSWIFT\Creating a certificate authority certificate.docx

Domain Authentication settings Go to “Authentication Settings” in “System” menu under “Proxy Settings” Enable “Client Integrated and Basic Authentication using Domain Controller”. For more information about

authentication settings click on this LINK Click on “NTLM Domain controller”. In the “Full domain name” field type in “cae.edu.au”. In the “Domain” field

type “cae”. Select “Use domain controller” and type “left1.cae.edu.au” as the main domain controller. Click “Save” once done!



of 22

http://apphelpweb.clearswift.com/25/en/csgateway_Left.htm#CSHID=%3Cid%3D105%7CStartTopic=Content%2FSections%2FSystemsCenter%2FSYCAboutAuthentication.htm%7CSkinName=WebSkin


document.docx

Then click on “Join domain” link at the left pane. Enter a domain admin username and password. (cae\administrator)

Then “Test Authentication” by clicking on that link to verify the connectivity.



of 22


document.docx

Backup & RestoreThe Clearswift backups are configured to be created every day at 2.00 am in the morning. Backups are normally copied to a FTP server. Thus we have created a FTP server in “caemgmt01” server. The settings are as follows,

FTP server IP : 10.50.10.99 on port 21Username : cae\cwgPassword : (device admin password)



of 22


document.docx



of 22


document.docx

Web Policy Management



of 22

Global Web Policy

Web Policy Routes

Content Rules

USER NAMES MACHINES INTERNET

ZONES END USER &

BLOCK PAGES INTRANET

SITES LEXICAL

EXPRESSIONS

BLOCK

ALLOW


document.docx



of 22


document.docx

Monitoring and EvaluationThis article will be maintained and updated by the following users:

- ICT Systems Engineers- ICT Systems Team Leader- ICT Operations Team Leader- ICT Manager

Referenceshttps://10.50.10.4

Creation DateMarch 2012



of 22

https://10.50.10.4/

cs user manual

Documents

csw web interface

web policy routes

global web policy page

current version

cae intranet site

cae ict knowledge base

sahan kumarage version

csw dashboard