McAfee: Web Gateway for Hyper-V – Part 1

McAfee Web Gateway (MWG) protects against web threats such as viruses, other malware, inappropriate content and data leaks. Its main functions include:

• Intercepting and transmitting web traffic as a proxy server.
• Authenticating users against Windows Active Directory with NTLM or Kerberos.
• Filtering web objects by URL, malware, media type and web application.
• Reporting on the filtering process through McAfee Reporter of Content Security add-on with ePO.

I am working on a migration from VMware ESXi to Hyper-V on Windows Server 2012 R2. Web Gateway supports Hyper-V from version 7.6.0.1. When I tried version 7.5, the installer did not allow installation on Hyper-V, so the 7.6 release arrived in time for this project.

I am using PowerShell to create the VM and keep the installation, configuration and migration consistent. My goal is to complete the process within an hour and migrate the configuration through backup and restore, with as little manual input as possible.

Create the Web Gateway appliance

The script uses the following settings:

• Stores VHDX files on E:. Adjust the path for your storage location.
• Allocates 16 GB of memory, the minimum production requirement.
• Connects to the vSwitch trunk, renames the first network adapter and assigns the internal VLAN.
• Adds an eth1 adapter and assigns the Internet VLAN.
• Attaches the ISO and starts the VM.

Using the script will save at least five minutes and keep the appliance configuration consistent across Hyper-V hosts.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13

$MWG = "MWG-01"
$PathOS = "E:\"+$MWG+"\"+$MWG+".vhdx"
New-VM -Name $MWG -Path "E:\" -NewVHDPath $PathOS -NewVHDSizeBytes 80GB -Generation 1 -BootDevice CD
Set-VM -Name $MWG -ProcessorCount 2
Set-VM -Name $MWG -MemoryStartupBytes 16GB
$MWG | Get-VMNetworkAdapter | Connect-VMNetworkAdapter -SwitchName "vSwitch"
Rename-VMNetworkAdapter -VMName $MWG -Name 'Network Adapter' -NewName 'eth0'
Set-VMNetworkAdapterVlan –VMName $MWG -VMNetworkAdapterName 'eth0' –Access –VlanId 1234
Add-VMNetworkAdapter –VMName $MWG -SwitchName "vSwitch"
Rename-VMNetworkAdapter -VMName $MWG -Name 'Network Adapter' -NewName 'eth1'
Set-VMNetworkAdapterVlan –VMName $MWG -VMNetworkAdapterName 'eth1' –Access –VlanId 4567
Set-VMDvdDrive -VMName $MWG -Path "E:\Software\mwgappl-7.6.0.1.0-20505.x86_64.iso"
Start-VM $MWG

Install Web Gateway

1. The VM boots from the ISO and starts the installation.

   

2. The installer partitions the virtual disk.

   

3. The Web Gateway packages are installed.

   

4. Select the primary network interface. I used eth0.

   

5. I selected Yes for DHCP because I planned to configure the network later.

   

6. Enter the MWG hostname.

   

7. Confirm the initial changes with Yes.

   

8. Enter the root password.

   

9. Enable remote login through SSH.

   

10. Select the volume scheme. I used Web Cache 1.

    

11. Web Gateway starts after installation.

    

Complete the initial web configuration

Find the appliance's IP address and open https://ip:4712 in a browser. Sign in with the username admin and password webgateway.

1. Accept the Java warning, select the license and set the time zone.

   

2. Configure the network settings. I enabled eth1 here.

   

3. Set the required new password.

   

4. Finish the wizard. Web Gateway is installed on Hyper-V and ready for configuration.

   

References

• How to set up Web Gateway on a Hyper-V virtual platform
• Web Gateway 7.6.0 Release Notes - Rev C

For deployment through SCCM, continue with Part 2.