Load Balancing McAfee Web GatewayDeployment Guidev1.1.3Copyright © 2015 Loadbalancer.org, Inc.1
Load Balancer ConfigurationCreate the Virtual Service (VIP)• Using the WUI go to Cluster Configuration > Layer 4 – Virtual Services• Click [Add a N
Define the Real Servers (RIPs)• Using the WUI go to Cluster Configuration > Layer 4 – Real Servers• Click [Add a new Real Server] next to the newly
Web Gateway ConfigurationModify the Web Gateways to accept traffic for the VIPConceptAs mentioned previously, DR mode is our recommended load balancer
Web Gateway Operating ModeThe McAfee Web Gateway can easily be configured for proxy mode using the WUI option: Configuration > Proxies (HTTP(S), FT
Client ConfigurationClient browser settings must be set so that browsers connect via the VIP. In a Microsoft based LAN environment, this is typically
Option 2 - Transparent (Routed) Proxy ModeDeployment ArchitectureNotes• If rules are added to the router so that traffic is sent transparently to the
Load Balancer ConfigurationCreate the Virtual Service (VIP)• Using the WUI go to Cluster Configuration > Layer 4 – Virtual Services• Click [Add a N
• Enter an appropriate IP address for the Virtual Service, e.g. 192.168.2.202• Click Update• Using the WUI, go to Maintenance > Firewall Script• Sc
Define the Real Servers (RIPs)• Using the WUI go to Cluster Configuration > Layer 4 – Real Servers• Click [Add a new Real Server] next to the newly
Web Gateway ConfigurationWeb Gateway Operating ModeThe McAfee Web Gateway can easily be configured for transparent routed mode using the WUI option: C
Table of ContentsAbout this Guide...
3) enable the HTTP ProxyNOTE: When using transparent routed mode, it's not necessary to modify the Web Gateway to accept traffic destined for the
Router / Default Gateway ConfigurationN.B. This is required when no changes have been made to the clients gateway settingsDepending on your network co
Testing & ValidationTo verify that the traffic is passing through the load balancer correctly the following reporting options can be used:System O
Transparent ModeThe example screen shot below illustrates illustrates the difference when running in transparent mode.Many reporting and dashboard opt
Appendix1 – Clustered Pair Configuration – Adding a Slave UnitIf you initially configured just the master unit and now need to add a slave, please ref
2 – Loadbalancer.org Company Contact InformationWebsite URL : www.loadbalancer.orgNorth America (US) Loadbalancer.org, Inc.270 Presidential DriveWilm
3 – McAfee Company Contact InformationWebsite URL : www.mcafee.comWorldwide Support Options McAfee support: http://service.mcafee.com/default.aspx
About this GuideThis guide details the configuration of Loadbalancer.org appliances for deployment with McAfee's range of Web Gateway products. I
Benefits of Implementing a Load BalancerSince secure, reliable and available Internet access is essential and not just a luxury, steps must be taken t
Persistence - aka Server AffinityPersistence may or may not be required and depends on the specific Web Gateway being used. Two possible methods are d
Loadbalancer.org Appliance – the BasicsNetwork ConfigurationThe IP address, default gateway and DNS settings can be configured in several ways dependi
Accessing the Web User Interface (WUI)The WUI can be accessed from a browser at: http://192.168.2.21:9080/lbadmin* Note the port number → 9080(replac
The screen shot below shows the v7.6 WUI once logged in:Clustered Pair ConfigurationLoadbalancer.org recommend that load balancer appliances are deplo
Option 1 - Proxy Mode (Recommended)Deployment ArchitectureNotes• Browser settings on client PC's must be changed to point at the Virtual Server/S
Comments to this Manuals