Adding Novell BorderManager to a Site That Already Has a Firewall

In this scenario, Acme Company already has a third-party firewall in place and wants to add Novell® BorderManager^TM as a proxy server. Acme would like to be able to just add the server onto the existing network. Acme has the following requirements:

• Use only one network interface card (NIC)
• Use Transparent proxy to speed up Web access
• Use the IPX^TM/IP gateway because client workstations have only IPX addresses and Acme Company does not want to configure TCP/IP

The following BorderManager components are used to implement this scenario, as shown in Figure 33:

• Proxy Services Transparent proxy application
• IPX/IP gateway
• Access control (optional with the existing firewall)

Figure 33
Adding BorderManager to a Site with a Firewall

To add a BorderManager proxy server to an existing firewall, Acme Company must perform the following general sequence of steps:

1. Install BorderManager. Because there is only one NIC, make sure it is selected as both Private and Public during the installation.

   For more information and BorderManager installation procedures, refer to the Novell BorderManager installation documentation.

2. Using NetWare® Administrator, BorderManager Services page, enable and configure the Transparent proxy application on the BorderManager server.

   For more information and configuration procedures, refer to the Proxy Services online documentation.

3. Using NetWare Administrator, enable and configure the IPX/IP gateway.

   For more information and configuration procedures, refer to the Novell IP Gateway and NAT online documentation.

4. (Optional) Using NetWare Administrator, enable and configure access control rules.

   For more information and configuration procedures, refer to the access control online documentation.

5. Ensure that users who will use the IPX/IP gateway install and configure the gateway component of the Novell Client^TM software.

   For more information and configuration procedures, refer to the Novell IP Gateway and NAT online documentation.