Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Configuring InterScan Web Security Virtual Appliance (IWSVA) as the reverse-proxy server for SafeSync for Enterprise

    • Updated:
    • 30 Jul 2014
    • Product/Version:
    • InterScan Web Security Virtual Appliance 5.5
    • InterScan Web Security Virtual Appliance 6.0
    • InterScan Web Security Virtual Appliance 6.5
    • SafeSync for Enterprise 2.0
    • SafeSync for Enterprise 2.1
    • Platform:
    • Ubuntu 10.04 64-bit
Summary
Configure IWSVA to serve as the reverse proxy of SafeSync for Enterprise (SSFE) to help protect the SSFE server from external attacks.
Details
Public
To configure IWSVA as the reverse-proxy server:
  1. Log in to the IWSVA administration console.
  2. Go to Administration > Deployment Wizard.
    Note: The Deployment Wizard launches automatically when an administrator logs in for the first time.
  3. Click Start on the Welcome page.
  4. On the Deployment Mode page, click the Reverse Proxy Mode radio button and then click Next.
  5. On the Proxy Settings page, type the internal/private IP address of the SSFE server in the Protected serverfield.
    IWSVA proxy settings
  6. Click Next.
  7. In the Network Interface page, select the appropriate Internet-facing NIC and then type the public IP address of the IWSVA server as shown below.
    IWSVA network interface settings
  8. Configure other settings as required and then click Next.
  9. Complete the remaining steps of the Deployment Wizard then save all the changes done.
  10. Log in to the IWSVA Linux shell.
  11. Edit the /etc/iscan/intscan.ini file using any text editor such vi.
  12. Look for the ProxyPreserveHost parameter and set it to "yes".
    This ensures successful login to the SSFE GUI because SSFE will not work well with requests that have the IP address in the hostname header. It will process only requests addressed to its FQDN, so requests proxied by IWSVA should always use FQDN on the request header.
  13. Restart the proxy daemon by running these commands:
    1. ./S99ISproxy stop
    2. ./S99ISproxy start
  14. Update the DNS records to make the FQDN of the SSFE server point to the IWSVA public IP address.
Premium
Internal
Rating:
Category:
Configure; Deploy
Solution Id:
1102286
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.