R3000 Internet Filter ® QUICK START GUIDE Model: R3000IR MSA-002-003 R3000 Release: 2.1.10, ER Release: 4.1.20 / Updated: 12.01.08...
Page 2
8e6 Technologies. Every effort has been made to ensure the accuracy of this document. However, 8e6 Technologies makes no war- ranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose.
ontents R3000IR I ntRoduCtIon About this Document ... 2 Conventions Used in this Document ... 3 ...4 eRvICe nfoRmatIon RelImInaRy etuP RoCeduRes Unpack the Unit from the Carton ... 5 Select a Site for the Server ... 6 Rack Mount the Server ... 6 Check the Power Supply ...
Page 4
led I ndICatoRs and Diagrams and Descriptions ... 73 egulatoRy PeCIfICatIons and Declaration of the Manufacturer or Importer ... 74 ...77 ndex ...73 uttons ...74 IsClaImeRs 6 R3000iR Q uick taRt uide...
R3000IR I ntRoduCtIon Thank you for choosing to evaluate the 8e6 Technologies R3000IR Internet Filter with Integrated Reporter. This product combines the R3000 Internet Filter with the ER Enter- prise Reporter to track end user Internet activity and generate reports that assist admin- istrators in developing policies and targeting sites to be filtered, in order to maximize bandwidth utilization and productivity.
Introduction - This section is comprised of an overview of the R3000IR product and how to use this document • Service Information - This section provides 8e6 Technologies contact information • Preliminary Setup Procedures - This section includes instructions on how to physi- cally set up the R3000IR in your network environment •...
Conventions Used in this Document The following icons are used throughout this document to call attention to important information pertaining to handling, operation, and maintenance of the server; safety and preservation of the equipment, and personal safety: NOTE: The “note” icon is followed by additional information to be consid- ered.
The user should not attempt any maintenance or service on the unit beyond the proce- dures outlined in this document. Any initial hardware setup problem that cannot be resolved at your internal organiza- tion should be referred to an 8e6 Technologies solutions engineer or technical support representative. 8e6 Corporate Headquarters (USA)
RelImInaRy etuP Unpack the Unit from the Carton Inspect the packaging container for evidence of mishandling during transit. If the packag- ing container is damaged, photograph it for reference. Carefully unpack the unit from the carton and verify that all accessories are included. Save all packing materials in the event that the unit needs to be returned to 8e6 Tech- nologies.
Select a Site for the Server The server operates reliably within normal office environmental limits. Select a site that meets the following criteria: • Clean and relatively free of excess dust. • Well-ventilated and away from sources of heat, with the ventilating openings on the server kept free of obstructions.
Rack Mount the Server Rack Setup Precautions Warning: Before rack mounting the server, the physical environment should be set up to safely accommodate the server. Be sure that: • The weight of all units in the rack is evenly distributed. Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading.
Rack Mount Instructions Optional: Install the Chassis Rails NOTE: If your chassis does not come with chassis rails, please follow the procedure listed on the last page of this sub-section to install the unit directly into the rack. CAUTION: Please make sure that the chassis covers and chassis rails are installed on the chassis before you install the chassis into the rack.
Page 13
3. Locate the three holes on each side of the chassis and locate the three correspond- ing holes on each of the inner rail. 4. Attach an inner rail to each side of the chassis and secure the inner rail to the chas- sis by inserting three Type G screws through the holes on each side of the chassis and the inner rail.
Page 14
Optional: Install the Traditional UP Racks After you have installed the inner rails on the chassis, you are ready to install the outer rails of rail assemblies to the rack. NOTE: The rails are designed to fit in the racks with the depth of 28” to 33”. •...
Page 15
7. Slide the chassis into the rack as shown below. NOTE: The chassis may not slide into the rack smoothly or easily when installed the first time. Some adjustment to the slide assemblies might be needed for easy installation. 8. You will need to release the safety taps on both sides of the chassis in order to com- pletely remove the chassis out of the rack.
Page 16
Optional: Install the Open Racks After you have installed the inner rails on the chassis, you are ready to install the outer rails of rail assemblies to the rack. NOTE: The rails are designed to fit in the racks with the depth of 28” to 33”. •...
Page 17
3. Attach the front (short) bracket to the front end of the rack, and secure it to the rack with two Type H screws and Type I washers as shown below. (See the previous page for descriptions of Type H and Type I hardware components.) 4.
Page 18
5. Measure the depth of your rack and adjust the length of the rails accordingly. Then, secure the rails to the chassis with Type G screws. 6. Slide the inner rails which are attached to the chassis into the outer rails on the rack. 6 R3000iR Q uick taRt...
Page 19
Install the Chassis into the Rack CAUTION: Before installing the chassis into the rack: • Make sure that the rack is securely anchored onto an unmovable surface or structure before installing the chassis into the rack. • Unplug power cord(s) of the rack before installing the chassis into the rack. •...
Check the Power Supply This server is equipped with a universal power supply that handles 100-240 V, 50/60 Hz. A standard power cord interface (IEC 950) facilitates power plugs that are suitable for most European, North American, and Pacific Rim countries. Power Supply Precautions Warning: •...
• Do not expose the server to rain or use near water. If liquids of any kind should leak into the chassis, power down the server, unplug it, and contact 8e6 Technologies technical support. • Disconnect power from the server before cleaning the unit. Do not use liquid or aero- sol cleaners.
AC Power Cord and Cable Precautions Warning: • The AC power cord for the server must be plugged into a grounded, power outlet. • Do not modify or use a supplied AC power cord if it is not the exact type required in the region where the server will be installed and used.
Motherboard Battery Precautions Caution: The battery on the motherboard should not be replaced without following instructions provided by the manufacturer. Only qualified service personnel should replace batteries. The battery contains energy and, as with all batteries, a malfunction can cause heat, smoke, or fire, release toxic materials, or cause burns.
nstall the Step 1: Setup Procedures This step requires you to link the workstation to the R3000IR. You have the option of us- ing the text-based Quick Start setup procedures described in Step 1A, or the Administra- tor console setup procedures described in Step 1B. Quick Start Setup Requirements The following hardware is required for the Quick Start setup procedures: •...
Step 1A: Quick Start Setup Procedures Link the Workstation to the R3000IR Monitor and Keyboard Setup A. Connect the PC monitor and keyboard cables to the rear of the chassis (see Fig. 1). B. Turn on the PC monitor. C. Power on the R3000IR by dropping down the face plate and pressing the large but- ton at the right of the front panel (see Fig.
HyperTerminal Setup Procedures If using a serial console, follow these procedures to create a HyperTerminal session. A. Launch HyperTerminal by going to Start > Programs > Accessories > Communica- tions > HyperTerminal: B. In the Connection Description dialog box, enter any session Name, and then click OK to open the Connect To dialog box: C.
Page 27
D. Specify the following session settings: • Bits per second: 9600 • Data bits: 8 • Parity: None • Stop bits: 1 • Flow control: Hardware E. Click OK to connect to the HyperTerminal session: 6 R3000iR Q uick taRt uide...
Page 28
F. In the HyperTerminal session window, go to File > Properties to open the Properties dialog box, displaying the Connect To and Settings tabs: G. Click the Settings tab, and at the Emulation menu select “VT100”. H. Click OK to close the dialog box, and to go to the login screen. NOTE: If using a HyperTerminal session, the login screen will display with black text on a white background.
Login screen The login screen displays after powering on the R3000IR unit using a monitor and key- board, or after creating a HyperTerminal session. NOTE: If the screensaver currently displays on your screen, press the Enter key to display the login screen. A.
Quick Start menu: administration menu A. At the Press the number of your selection prompt, press 2 to select the “Quick Start Setup” process. The Quick Start menu takes you to the following configuration screens to make en- tries for configuring the R3000: •...
R3000 console login screen. Option A, “Reset system to factory defaults”, should only be used by an 8e6 Technologies technical representative. Option D, “Reset admin console account”, should be used for resetting the administrator console username and password to the factory default ‘admin’/’user3’...
NOTE: Modifications can be made at any time by returning to the specific screen of the Quick Start procedures. Log Off, Disconnect the Peripherals A. After completing the Quick Start setup procedures, return to the Quick Start menu screen and press 9 to log out. B.
Step 1B: Console Setup Procedures Preliminary Setup Create a “setup workstation” using a Windows-based laptop or desktop machine with a network card and Internet Explorer 5.5 (or later). The setup workstation will be used for accessing the R3000 Administrator console on the network and configuring the server. NOTE: The Java Plug-in version specified for the R3000 software version must be installed on your workstation.
Page 34
Link the Workstation to the R3000IR The procedures outlined in this sub-section require the use of the CAT-5E crossover cable. A. Plug one end of the CAT-5E crossover cable into the R3000IR’s LAN 2 port. NOTE: When facing the rear of the chassis, the LAN 2 port is the port on the right.
The Boot Up Process The boot-up process may take 5 - 10 minutes. When the drive light remains off for 30 seconds, the system is booted up. (See the LED Indicators and Buttons section for a description of front panel LED indicators and buttons.) If you wish to verify that the unit has been booted up, you can perform the following test on your workstation: 1.
Page 36
Log in to R3000 Administrator Console A. In the console, click the link for Filtering to open the R3000 Introductory Window: NOTE: This window must be left open throughout your session. The Introductory Window displays minimized when the login dialog box of the R3000 Administrator console application opens: B.
Page 37
D. Click OK to go to the main screen of the R3000 Administrator console: 6 R3000iR Q uick taRt uide...
Page 38
Network Click the System button at the top of the screen to go to the System section of the con- sole: In this section of the console you will: • Specify the operation mode the R3000 will use for filtering the network, listening to traffic, and sending traffic •...
Network: Operation Mode From the navigation panel at the left of the screen, click Mode and choose Operation Mode from the pop-up menu: Make the following entries in the Operation Mode window: A. In the Mode frame, select the operational mode the R3000 will use for filtering: Invis- ible, Router, Firewall, Mobile, or ICAP.
(the NetBIOS name must be capitalized). It is important to enter something identifiable, because once the product is registered, this host name is used by 8e6 Technologies to recognize your account for library updates. This name needs to be a valid DNS entry.
Page 41
WARNING: For the router and firewall mode, do not use the same subnet for LAN 1 and LAN 2 or the console will become inaccessible. D. Enter the Primary IP address of the first DNS name server. The R3000 uses this name server to resolve the domain name requested by users from the LAN.
Page 42
The NTP Servers window is used for specifying the Network Time Protocol (NTP) serv- ers to be used by the R3000, so that the R3000 is synchronized with computer clocks on the Internet. Note that the following server IP addresses display in the Servers list box: 128.59.35.142, 142.3.100.15, 129.132.98.11.
Page 43
Network: Regional Setting From the navigation panel, click Network and choose Regional Setting from the pop-up menu: Make the following selections in the Regional Setting window: A. At the Region pull-down menu, select your country from the available choices. B. At the Location pull-down menu, select the time zone for the specified region. If necessary, select a language set from the Language pull-down menu to display that text in the console.
Physically Connect the R3000IR to the Network Once your R3000 network parameters are set, you must physically connect the unit to your network. This step requires two standard CAT-5E cables. NOTE: This section requires you to restart the R3000. If you wish to relocate the R3000IR before connecting it to the network, you must first shut down the server instead of restarting it.
Did you restart the R3000 after changing the network settings? • Do you have both LAN ports connected to your network hub? • If still unsuccessful, contact an 8e6 Technologies solutions engineer or technical sup- port representative. 6 R3000iR Q uick taRt...
A. Test the R3000’s filtering by opening a browser window on a network workstation, and going to http://test.8e6.net (an empty site for testing pornography filtering). B. You should receive a block page. If you do not, contact an 8e6 Technologies solu- tions engineer or technical support representative.
R3000 library updates. Library updates are critical for filtering as new sites are added to the 8e6 library each day. To activate updates, visit the 8e6 Technologies Web site and enter the activation code that was issued to you by e-mail (also included on the product invoice).
Perform a Complete Library Update Your R3000IR was shipped with the latest library update for the current software re- lease. However, as new updates continually become available, before you begin using the R3000IR you must perform a complete library update to ensure you have the latest library updates.
Monitor the Library Update Process To verify that the library is being updated: A. From the navigation panel, click Updates and select Library Update Log from the menu. B. In the Library Update Log window, click View Log to display the update activity: NOTE: You will be notified in the log when the library has been completely updated by the message: “Full URL Library Update has completed.”...
Page 50
Now that the R3000 is filtering your network, the next step is to set up groups and create filtering profiles for group members. To activate a default filter profile more appropriate for your operations, or to specify a more limited IP range to filter, consult Chapter 2: Group screen in the Global Administra- tor Section of the R3000 User Guide.
Step 5: Change the ER Admin User Name and Password, Set Self-Monitoring After configuring the R3000, click the Quit button at the top of the screen to exit the R3000 Administrator console. You will now need to log in to the ER Administrator con- sole and make some changes to settings in screens.
D. Click OK to go to the main screen of the ER Administrator console: Change User Name and Password A. Set up a new administrator user name and password by clicking on the Network pull- down menu and choosing Administrators to display the Add/Edit/Delete Administra- tors screen: B.
C. Enter a User Name and Password. D. In the Confirm Password field, re-enter the password. E. Click Save. Set Self-Monitoring A. From the Server pull-down menu, choose Self-Monitoring to display the Self Moni- toring screen: B. Choose YES to activate monitoring. C.
Step 6: Client Workstation Configuration Once your ER is installed, you need to be sure the workstation that will run the client has the following minimum requirements: • Pentium III class processor or greater • 512 MB RAM minimum, 1 GB RAM recommended •...
Step 7: Launch the ER Client A. Launch IE, enter http://x.x.x.x:8080 or https://x.x.x.x:8443 in the address window (in which “x.x.x.x” represents the IP address of the ER server), and then click Go to access the login window of the ER client. B.
Page 56
C. In the navigation panel, select Settings, and then choose User Permissions from the menu: D. Click Add User to open the Enter User Permissions dialog box: E. Enter the Username. F. Enter the Password, and Confirm Password. G. Select the User Type (“Admin” or “Sub-Admin”). H.
Refer to the ER Web Client User Guide for information on generating reports. NOTE: If you cannot view reports, or if your specific environment is not covered in the ER Administrator User Guide, contact an 8e6 Technologies solutions engineer or technical support representative. Port 22 (SSH) and Port 3306 (SQL) must be open on your network to allow access by remote technical support.
IlteRIng Threat Class Groups 8e6’s filtering library currently consists of 103 library filtering categories, each placed in one of the 20 filtering category groups defined in the interface: Adult Content, Bandwidth, Business/Investments, Community/Organizations, Education, Entertainment, Govern- ment/Law/Politics, Health/Fitness, Illegal/Questionable, Information Technology, Internet Communication, Internet Productivity, Internet/Intranet Misc., News/Reports, Religion/ Beliefs, Security, Shopping, Society/Lifestyles, Travel/Events, and Custom Categories.
Filtering Scenarios This collection of filtering scenarios is designed to help you get started filtering the net- work. Each scenario is followed by R3000 setup information. Please consult the “How to” section in the index of the R3000 User Guide for pages containing detailed, step-by-step instructions on configuring and/or using the tools and features in that scenario.
To block categories in a profile using the X Strikes Blocking feature, go to: • SYSTEM: System > X Strikes Blocking > Configuration tab, and Categories tab • GROUP: Group > IP > member > member Profile > Filter Options tab, X Strikes Blocking enabled or GROUP: Group >...
6. Search Engine Keywords Block access to network-endangering content via search engine keywords. In pertinent library categories, enter SE keywords to be blocked. Block these categories in applicable profiles. To set up Search Engine Keywords to be blocked, go to: •...
9. Override Account bypass Use an Override Account to grant a user access to categories blocked at the root level. To grant designated users access to globally-blocked categories, set up an Override Account at the Global Group level, or enable the option to allow the Mini- mum Filtering Level to be bypassed with an Override Account, and then set up the Override Account at the group level.
In the R3000 User Guide index, see: • How to: configure filtering • How to: use library categories in a profile 12. File type blocking Prevent users from downloading and using executable files that may threaten your network security. Create a custom category for file extensions and add “.exe” to the URL Keyword list.
2. Overall Quota Restrict all quota time in a profile to improve bandwidth usage and productivi- ty. Cap the amount of time a user spends in all quota-marked categories by enabling the Overall Quota option and specifying the number of minutes the end user can visit quota-marked categories before being notified and then locked out of these catego- ries.
In the R3000 User Guide index, see: • How to: configure filtering • How to: configure the Warn Option Setting • How to: use library categories in a profile 5. Warn-strike Warn users before they access unacceptable content and may be locked out of the Internet.
7. IM patterns Block IM services. Enable Pattern Blocking for all users. In the profile, block Inter- net Communication > Chat and Instant Messaging (IM) categories. To block IM services, go to: • SYSTEM: System > Control > Filter window •...
10. Remote Access patterns Block remote access patterns. Enable Pattern Blocking for all users. In the profile, block Internet Productivity > Remote Access category. To block remote access patterns, go to: • SYSTEM: System > Control > Filter window • GROUP: Group >...
13. Rule block Use a rule to block the Bandwidth category. Create a rule that blocks the Band- width category and apply this rule to pertinent profiles. To create and block a rule for the Bandwidth category, go to: • GROUP: Group >...
Page 69
In the R3000 User Guide index, see: • How to: set up URL Keywords • How to: set up profile options 16. Custom Block/Warn/X Strikes/Quota pages Customize a block, warning, X Strikes, or quota pages. Modify page contents to point to a URL within your organization, send a request to your administrator’s email address, or include verbiage of your choice that informs users of their Internet usage activities that triggered the page.
III. General/Productivity 1. Warn Feature with higher thresholds Warn users before they access unacceptable content. Set HTTPS filtering at the “high” level to block certificates that may be questionable. Configure Warning set- tings. In the end user’s profile, apply the warn option to pertinent categories. The end user may not be able to access all requested sites due to high settings, and will receive the warning message for excessive Internet usage.
Page 71
3. Time Quota/Hit Quota Limit time spent in PASSED categories to increase productivity. Enable the Quota Settings feature, and configure the Seconds Per Hit. Set up pertinent catego- ries in the user’s profile with quotas so the user is notified and then locked out of those categories after all minutes in the quota have been used.
6. Customize an 8e6 Supplied Category Include region-specific content in an 8e6 Supplied category. Add/delete content to/from an existing 8e6 Supplied Category that only includes content pertinent to your organization or region that should be blocked. Apply this category to a profile. To customize and use an 8e6 Supplied Category in a profile, go to: •...
IV. Pass/Allow 1. Always Allow Custom Category Create a white list custom category. Set up an Always Allow category and add all URLs deemed acceptable. Apply this category to all pertinent profiles. To create a white list custom category and use it in a profile, go to: •...
4. Override Accounts Set up override accounts to grant specified users access to URLs blocked for general users. Enable the option to bypass the Minimum Filtering Level using an override account. Create the override account profile, including the accessible cat- egories.
mPoRtant nfoRmatIon aBout usIng the valuatIon When evaluating the ER and using this product in the evaluation mode, the Expiration screen in the Administrator console and the ER Server Statistics window in the client will display and function differently than they do in the activated (standard) mode of the ER (described in the ER Administrator User Guide and ER Web Client User Guide).
ER Client, ER Server Statistics Window In the ER Server Statistics window, the note “*Evaluation Mode Enabled” displays above the ER Activity frame. To the right of this note, the Info button displays. When this button is clicked, an alert box opens with the message: “Evaluation Mode – Max Data Storage ‘X’...
led I ndICatoRs and Diagrams and Descriptions LED indicators and buttons for hardware status monitoring display on the front panel, located on the right side of the chassis (see diagram below). Chassis control panel LED indicators alert you to the status of a feature on the unit while buttons let you per- form a function on the unit.
egulatoRy Declaration of the Manufacturer or Importer Safety Compliance USA: UL 60950-1 2nd ed. 2007 Europe: Low Voltage Directive (LVD) 2006/95/EC to CB Scheme EN 60950: 2006 International: UL/CB to IEC 60950-1:2006 Electromagnetic Compatibility (EMC) USA: FCC CFR 47 Part 15, Verified Class A Limit Canada: IC ICES-003 Class A Limit Europe:...
Electromagnetic Compatibility Class A Notice Industry Canada Equipment Standard for Digital Equipment (ICES-003) Bureau of Standards Metrology and Inspection (BSMI) - Taiwan 6 R3000iR Q uick taRt uide...
I, the undersigned, hereby declare that the equipment specified above conforms to the above Directive(s) and Standard(s). Location: Orange, CA, USA Date: January 21, 2008 8e6 Technologies 828 W. Taft Avenue Orange, CA 92865 Low Voltage • 2006/95/EC • 2004/108/EC Safety •...
Need help?
Do you have a question about the Enterprise Filter R3000IR and is the answer not in the manual?
Questions and answers