McAfee 7.8 0 Web Gateway Interface Reference Guide
McAfee Web Gateway 7.8.0 is a powerful and versatile tool for controlling and securing web access for your organization. It can be used to enforce policies, filter content, and protect against malware.
Advertisement
Advertisement

McAfee Web Gateway 7.8.0

Copyright © 2017 McAfee, LLC
TRADEMARK ATTRIBUTIONS
McAfee and the McAfee logo, McAfee Active Protection, ePolicy Orchestrator, McAfee ePO, McAfee EMM, Foundstone, McAfee LiveSafe, McAfee QuickClean, Safe Eyes,
McAfee SECURE, SecureOS, McAfee Shredder, SiteAdvisor, McAfee Stinger, True Key, TrustedSource, VirusScan are trademarks or registered trademarks of McAfee,
LLC or its subsidiaries in the US and other countries. Other marks and brands may be claimed as the property of others.
LICENSE INFORMATION
License Agreement
NOTICE TO ALL USERS: CAREFULLY READ THE APPROPRIATE LEGAL AGREEMENT CORRESPONDING TO THE LICENSE YOU PURCHASED, WHICH SETS FORTH THE
GENERAL TERMS AND CONDITIONS FOR THE USE OF THE LICENSED SOFTWARE. IF YOU DO NOT KNOW WHICH TYPE OF LICENSE YOU HAVE ACQUIRED, PLEASE
CONSULT THE SALES AND OTHER RELATED LICENSE GRANT OR PURCHASE ORDER DOCUMENTS THAT ACCOMPANY YOUR SOFTWARE PACKAGING OR THAT YOU HAVE
RECEIVED SEPARATELY AS PART OF THE PURCHASE (AS A BOOKLET, A FILE ON THE PRODUCT CD, OR A FILE AVAILABLE ON THE WEBSITE FROM WHICH YOU
DOWNLOADED THE SOFTWARE PACKAGE). IF YOU DO NOT AGREE TO ALL OF THE TERMS SET FORTH IN THE AGREEMENT, DO NOT INSTALL THE SOFTWARE. IF
APPLICABLE, YOU MAY RETURN THE PRODUCT TO MCAFEE OR THE PLACE OF PURCHASE FOR A FULL REFUND.
2 McAfee Web Gateway 7.8.0 Interface Reference Guide

1 User interface 7
Main elements of the user interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Supporting configuration functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
2 Appliances tab 11
3 System settings for distribution in a cluster 13
License settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Tenant Info settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
4 System settings for general services 15
Telemetry settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Date and Time settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
File Server settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
User Interface settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
5 System settings for network functions 23
Network Interfaces settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Network Protection settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Port Forwarding settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Static Routes settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
6 File Editor tab 31
7 Proxies 33
Proxy HA settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Transparent Router settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Transparent Bridge settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Proxies settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Network Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
HTTP Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
FTP Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
ICAP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
IFP Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
SOCKS Proxy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Data Exchange Layer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Web Cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Timeouts for HTTP(S), FTP, ICAP, SOCKS, and UDP . . . . . . . . . . . . . . . . . . . . 43
DNS Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
XMPP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Periodic Rule Engine Trigger List . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Domain Name Service settings . . . . . . . . . . . . . . . . . . . . . . . . . . 49
McAfee Web Gateway 7.8.0 Interface Reference Guide 3

Central Management settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
9 Policy configuration 61
Rule Sets tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Rule set views . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Key elements view . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
10 Lists 67
Lists tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
External Lists module settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
External Lists system settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Settings for subscribed lists content . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
11 Settings 79
Settings tab . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
12 Authentication 83
Authentication settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Kerberos Administration settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Windows Domain Membership settings . . . . . . . . . . . . . . . . . . . . . . . . . . 94
NTLM Agent settings (NTLM Agent) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
NTLM Agent Specific Parameters (Web Gateway) . . . . . . . . . . . . . . . . . . . . . . . 96
Administrator account settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Administrator role settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
13 Quota management 101
Time Quota settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Volume Quota settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
Coaching settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Authorized Override settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Block Session settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Quota system settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
14 Web filtering 105
Key elements for anti-malware filtering . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Anti-Malware settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
Gateway Anti-Malware settings . . . . . . . . . . . . . . . . . . . . . . . . . . 106
TIE Filter settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
TIE Reputations settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Anti-Malware system settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Key elements for URL filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
URL Filter settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
IFP Proxy settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Key elements for media type filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Properties for media type filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Stream Detector settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
SSL Client Certificate Handling settings . . . . . . . . . . . . . . . . . . . . . . . . . . 117
SSL Scanner settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
SSL Client Context with CA settings . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
SSL Client Context without CA settings . . . . . . . . . . . . . . . . . . . . . . . . . . 122
Certificate Chain settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Hardware Security Module settings . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
Key elements for using Advanced Threat Defense . . . . . . . . . . . . . . . . . . . . . . 127
Gateway ATD settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
Data Loss Prevention (Classifications) settings . . . . . . . . . . . . . . . . . . . . . . . 130
Contents
4 McAfee Web Gateway 7.8.0 Interface Reference Guide
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
Download
Advertisement
Key features
Web filtering
Anti-malware filtering
Data Loss Prevention
Central management
Detailed monitoring and reporting
Easy to configure and manage
Frequently asked questions
The manual describes various web filtering options, including URL filtering, anti-malware filtering, and media type filtering. These options allow you to control access to websites and content based on specific criteria.
You can configure the system time manually or enable time synchronization with NTP servers. The settings allow you to set the date, time, and time zone for the appliance.
The main interface elements include a system information line, User Preferences, Logout, a Help icon, a top-level menu bar, Search, Save Changes, a tab bar, a toolbar, a navigation pane, and a configuration pane.
You can import a license file by browsing the local file system. The interface provides options for importing, reviewing license information, and accepting the license agreement.
The manual mentions charts and tables for detailed monitoring and reporting, but it does not provide specific details about the types of reports available. You can explore the interface and documentation for further information.