CacheGuard Help

Hi Douglas, Yes of course you can directly modify the textual configuration file and then import (load) it into your CG appliance. A CG configuration file is a textual human readable file containing a set of CG commands. The main reason to have a clear text file is to be able to modify it using the ...

No, there is no need to authenticate CG by the Windows Server DC in this configuration. If your router forwards TCP 80 and 443 to 192.168.155.1, in turn your CG shoud forward those ports (NAT the destination IP) to 10.0.10.11. Did you implement your firewall rules by NATing the destination IP to 10....

If your Internet router has firewall capabilities, it's always better to use it as a first security layer and connect the external interface of CG to its internal zone (LAN) and not to its DMZ zone (especially if your router uses a technology other than Linux). In so doing you get two security layer...

With the option 1 it's normal to do not have the 80 and 443 ports open on CG's external interface because when the rweb mode is not activated (as with the option 2) CacheGuard is not listening on those ports. But if you scan your Windows Server (10.0.10.11) from a machine placed in front of CG's ext...

Hi, To reboot/shutdown the appliance you can use the commands reboot and halt from the CLI or the menu option [GENERAL] > [System Operations] > [Reboot | Halt | HA State] from the Web GUI. Actually CG uses journalized filesystems and is by design fault tolerant against sudden stop so in theory a pow...

I think that without having additional tools (such as VMware tools) installed in your VM, the copy/paste would not work with the CG console. But we don't allow the installation of those tools. As a workaround I suggest that you activate the SSH administration service and connect to your CG appliance...

Hi, If my understanding is correct you want to modify default ports used by CacheGuard using the port command. In this case only a single port can be affected to a given CG internal service (such as the forwarding proxy or the Web administration port). And yes, according to the RFC7605 ( https://too...

Hi,

No, this option is not available in the current version of CacheGuard (EH-1.3.5 at the time of writing).

Best Regards,

Hi, If your Windows Server is placed behind your CG (and probably on the same LAN as CG's Internal LAN) you have two possibilities to allow an access to your Windows Server from the Internet: 1- Using CG as a network firewall only and allow TCP on ports 80 and 443 with the following rules: firewall ...

Hi, Sorry for the delayed response. If you have just installed your CacheGuard appliance the Web GUI is then accessible at https://<internal-ip>:8090 where internal-ip is the internal interface IP address of your CacheGuard appliance. However if you have modified the IP configuration, the administra...