CacheGuard OS
User's Guide - Version 5.7.6

General Modes

CacheGuard is an integrated appliance that secures and optimises Web traffic by providing multiple features. But above all CacheGuard is a network appliance with a myriad of network characteristics.

All network and functionality modes can be activated or deactivated. That way, you can implement the appliance in your infrastructure to match your specific needs. The command "mode" allows you to activate or deactivate feature modes. For almost every feature, appropriate commands allow you to configure that feature while the feature activated.

Note that the command "apply" should be invoked after activating or deactivating feature modes.

Network Modes

IP router

The appliance may act as a secure IP forwarding gateway to access the Internet. To activate the router mode use the following command:

mode router on

Caching DNS

The appliance integrates a caching Domain Name Server for all Internet domains. To activate the dns mode use the following command:

mode dns on

DHCP server

The appliance integrates a DHCP server. To activate the dhcp mode use the following command:

mode dhcp on

See the command dhcp for further information.

Sharing Web access

The appliance may NAT all outgoing traffic with its own external network interface. To activate the snat mode use the following command:

mode snat on

Statefull Firewall

The appliance integrates a stateful configurable firewall to control all forwarded network traffic. To activate the firewall mode use the following command:

mode firewall on

See the command firewall for further information.

802.1q VLAN

The appliance supports 802.1q Virtual LAN to secure and isolate different traffic types. To activate the vlan mode use the following command:

mode vlan on

See the command "vlan" for further information.

High Availability

The appliance could be implemented in a High Availability infrastructure. It supports VRRP and link bonding. The command "vrrp" allows you to configure the VRRP while the command "link" is used to configure the link bonding). To activate the ha mode use the following command:

mode ha on

Feature Modes

Quality of Service (QoS)

The appliance can shape and schedule network traffic to offer a better Quality of Service. To activate the qos mode use the following command:

mode qos on

See the command qos for further information.

Forwarding proxy

The appliance may act as a forwarding Web proxy to secure and optimise Web surfer traffic. To activate this feature (web mode) use the following command:

mode web on

Anonymous browsing

The appliance may alter some HTTP headers to make anonymous HTTP requests. To activate the anonymous mode use the following command:

mode anonymous on

Reverse proxy

The appliance may act as a reverse Web proxy to secure and optimise Web servers. To activate this feature (rweb mode) use the following command:

mode rweb on

See the command rweb for further information.

Transparent implementation

The appliance can be implemented transparently for Web surfers. To activate the transparent mode use the following command:

mode transparent on

URL guarding

The appliance may act as a guarding system against unwanted URLs, restricting the Web usage. To activate the guard mode use the following command:

mode guard on

See the command guard for further information.

The Web Application Firewall

The appliance may filter unwanted Web requests like XSS or SQL Injection to protect Web servers. To activate the waf mode use the following command:

mode waf on

See the command waf for further information.

The antivirus

The appliance may filter all malware like viruses, trojans and worms to protect Web surfer workstations and/or Web servers. To activate the mode use the following command:

mode antivirus on

See the command antivirus for further information.

Web caching

The appliance may cache Web traffic to save the network bandwidth and in some environments accelerate Web traffic exchanges. To activate the cache mode use the following command:

mode cache on

HTML compression

The appliance may compress textual content to save the network bandwidth. To activate the compress mode use the following command:

mode compress on

Access logging

The appliance may log Web access for analysis with your favourite log analyser system. To activate the log mode use the following command:

mode log on

See the command log for further information.

Authentication

The appliance may authenticate end-users before granting them access to the Web (or Web servers in reverse mode). To activate the authenticate mode use the following command:

mode authenticate on

See the command authenticate for further information.