Table of Contents
Advertisement
Chapter 2: Hardware Installation
2.1 Installation Requirements
Before installing the Content Security Gateway, make sure your network meets the following requirements.
- Mechanical Requirements
The Content Security Gateway is to be installed between your Internet connection and local area network.
The Content Security Gateway can be placed on the table or rack. Locate the unit near the power outlet.
- Electrical Requirements
The Content Security Gateway is a power-required device, it means, the Content Security Gateway will not
work until it is powered. If your networked PCs will need to transmit data all the time, please consider use
an UPS (Uninterrupted Power Supply) for your Content Security Gateway. It will prevent you from network
data loss. In some area, installing a surge suppression device may also help to protect your Content
Security Gateway from being damaged by unregulated surge or current to the Content Security Gateway.
- Network Requirements
In order for Content Security Gateway to secure your network traffic, the traffic must pass through Content
Security Gateway at a useful point in a network. In most situations, the Content Security Gateway should
be placed behind the Internet connection device.
2.2 Operation Mode
CS-500 DMZ port supports three operation modes, Disable, NAT and Transparent. In Disable mode, the DMZ
port is not active. In transparent mode, CS-500 works as proxy with forward DMZ packet to WAN and forward
WAN packet to DMZ, the DMZ and WAN side IP addresses are in the same subnet. In NAT mode, DMZ side
user will share one public IP address of WAN port to make Internet connection. Please find the following two
pictures for example.
2.2.1 Transparent Mode Connection Example
CS-500
WAN: 61.11.11.11
LAN:
192.168.1.1
LAN PC 1:
LAN PC 2:
192.168.1.2
192.168.1.3
Content Security Gateway User's Manual
Internet
ISP
ADSL Modem
DMZ: Transparent
to WAN
DMZ PC 3:
DMZ PC 2:
61.11.11.12
61.11.11.13
- 5 -
Advertisement
Table of Contents
