EdgeWave: Flexible Deployment Options

Installing iPrism in its typical Transparent Bridge Mode combines the accuracy and security of pass-through filters with the speed of a pass-by or sniffer-type solution, giving you the best of both worlds:

iPrism is deployed in-line between the firewall and the switch
Pass-thru traffic is securely monitored defeating any attempts to circumvent the Web filter
Pass-by traffic is picked up and pages are blocked according to your organization's policies
Filtering occurs at the kernel level, which means latency is less likely to occur
Single Point of Failure issues are eliminated with the Bypass Module on the NIC because any problems with the Web filter will not affect normal network operations or performance

In explicit proxy mode, the iPrism appliance is not inline and you must configure client browsers to send their Web requests directly to the iPrism. Proxy deployment provides tighter control of user desktops than transparent bridge.

In proxy mode, the iprism is installed right off the switch and workstations are pointed to the iPrism via a proxy statement.
When a user sends a request for a web page, it goes unimpeded through the switch to the iPrism, The URL is copied and forwarded to the internet through the Switch and request returns from the internet through the firewall and switch and back to the iPrism
The webpage requested is analyzed by the iPrism and will be monitored or blocked according to your organization�s policies
In Proxy mode users can be required to login to each session explicitly which may be preferable for classrooms other settings where computers are shared

Flexible transparent deployment means the iPrism appliance can still function as a direct proxy when deployed in Transparent Bridge Mode. The iPrism is installed between the Switch and the router and all Internet requests are handled via the iPrism. Mixed mode configuration can be used to support mixed protocol, mixed user, mixed machine or mixed authentication environments where greater deployment flexibility is required.

This deployment allows one group of users to be proxied to the iPrism while the other is connected via transparent bridge.
Functioning in both modes simultaneously allows greater flexibility in deployment.
Proxy functionality is available for multi-user workstations or as an alternative to our Remote Filtering solution for remote users who may not use the same gateway to the Internet as on-site users

Citrix and other Terminal Server Environments

iPrism supports VLANs and can be installed on a trunked port. If your network includes VLANS, you can easily set up iPrism to filter VLAN tagged traffic. You can also configure your iPrism to enforce policy on a per VLAN basis by creating separate network entries for each VLAN on the network list. This will allow you to manage non-authenticated traffic and admin privileges such as overrides.