St. Bernard iPrism User manual

Quick Setup Guide

Quick Install of iPrism in Proxy-Mode
Plug in the iPrism Appliance
Install "Appliance Manager"
Gather etup Data
Run the " etup Wizard"
Redirect URL Traffic to iPrism
The single-interface configuration
outlined in this guide provides easy
setup, evaluation, and testing using
proxied client traffic (i.e., Proxy-Mode).
After you have familiarized yourself
with iPrism using Proxy-Mode, we
recommend reconfiguring iPrism for
Bridge-Mode (dual-interfaces) to utilize
Transparent-Mode traffic management
features like Kernel-Level filtering and
full IM/P2P filtering.
For installation and configuration guidance (including transitioning to Bridge-Mode), see the
iPrism Installation Guide and iPrism Evaluation Guide. These documents are available on the
iPrism support page at: ttp://www.stbernard.com/support/iprism.
tep 1. Plug in the iPrism Appliance
Install iPrism into a network or subnet that will be convenient for filtering iPrism users,
typically near your Internet Gateway on the internal network. Plug in the iPrism power cord,
connect a network cable between your switch and the INTERNAL iPrism interface, and turn
on power. Web filtering will not occur except for those clients that proxy to iPrism. This allows
you to evaluate and test with one or two clients (more if you wish).
tep 2. Install "Appliance Manager" oftware
Install Appliance Manager on a workstation in the same subnet as the iPrism. This allows
discovery of the appliance (using a broadcast), when you launch Appliance Manager.
Tip: If you are going to install Appliance Manager on an XP/SP2 workstation, be aware t at t e software
firewall built into XP/SP2 may prevent discovery of your iPrism. You can prevent t is by turning t e firewall
off a ead of time, or by clicking "Unblock" during t e initial launc of Appliance Manager. For furt er elp,
see: http://ip5kb.stbernard.com/webhelp/iPrism/Troubleshooting/Symptoms/Discovery/IP0159.htm .
iPrism Quick Setup Guide

Internet
Boundry Router
Hub / Switch
Workstation Workstation Server
iPrism

tep 3. Gather etup Data
iPrism IP address and subnet mask
The iPrism IP address and subnet mask for the network or subnet iPrism will join. This is
required for appliance discovery, and later, web-based iPrism administration.
Example: 192.168.45.92 and 255.255.255.0
Your Values: ___________________________ ____________________________
DN server
The IP address of your Primary D S (Domain ame Services) Server, or a D S server
located at your Internet Services Provider (ISP) location. You may identify additional D S
servers with Appliance Manager. D S is required for name-resolution and email services.
Example: 192.168.45.30
Your Value: ___________________________________________________________
iPrism default route
The default route identifies the internet facing routing device, or the next hop toward the
internet facing routing device (i.e., interior router). A default route is required to support
outbound web requests.
Example: 192.168.45.1
Your Value: ___________________________________________________________
tep 4. Run the “ etup Wizard”
Launch Appliance Manager to discover (with a broadcast) the "Not Configured" iPrism.
Right-Click on the "Not Configured" iPrism and select “ ystem Configuration”. See the
“etup Wizard teps” on page 4 for step by step instructions to complete the Setup Wizard.
tep 5. Redirect URL Traffic to iPrism
Redirect Web requests to iPrism by configuring one or more browser clients to proxy to iPrism,
using port 3128 and the iPrism IP address. All HTTP/HTTPs requests originating from
workstations that proxy to iPrism will be filtered. When finished evaluating in Proxy-Mode,
refer to the “iPrism v5.x Evaluation Guide” for further information on transitioning to
Bridge-Mode for continued evaluation and eventual production use.


etup Wizard teps
IP Assignment Wizard Click “Next”
pecify IP ettings Enter iPrism IP Address and ubnet Mask.
(Use slider for subnet Mask) using your setup data.
Completed uccessfully! Click “Finish”... Setup will continue by displaying a login prompt.
Login Username= iprism, Password= setup
(Username and password are case-sensitive.)
Notice “Ok”
iPrism License Agreement After reading the license agreement, click “Accept”
Welcome to iPrism Select “ tart a new configuration” (the default), then click “Next”.
Registration Information Click “Upload” to load the license key from a file on your workstation
(recommended), or enter the license key manually. Click “Next”.
Time ettings Timezone defaults to the current workstation setting.
Select an appropriate timezone, click “Next”.
Maintenance Password
It is strongly recommended that you enter a new password for the
“iprism” administrative account. This will replace the well known
default value of “setup”.
iPrism Hostname
Enter a hostname for iPrism, for example:
“iprism_serialnumber.domainname.com”
In this example, serialnumber would be the hardware serial number
from the appliance, uniquely identifying it.
Network Topology IMPORTANT: To enable Proxy-Mode, please select: “iPrism uses
a single interface (single IP address)”, then click “Next”.
iPrism IP Address Defaults should be good unless you wish to change the initial
IP assignment. Click “Next”.
Management Interface Click “Next”.
DN erver
Enter the IP address of your primary D S server, using your setup
data. ote that later you may identify additional D S servers with
Appliance Manager, if applicable to your network. Click “Next”.
Default Route Enter the IP address of the routing device (next hop relative to
iPrism) providing outbound internet access for iPrism, using your setup
data. Click “Next”.
Internal Addresses Take the default address range, which potentially allows all users
to be filtered by iPrism, click “Next”.
iPrism Filtering Take the default filtering options. Click “Next”.
IM/P2P Filtering Take the default filtering options. Click “Next”.
Configuration Review Take the default filtering options. Click “Finish”.
Notice You are Done! Click “OK”.
See the “iPrism v5.x Evaluation Guide” for configuration guidance.
