Adding Novell BorderManager to a Site That Already Has a Firewall

In this scenario, Acme Company already has a third-party firewall in place and wants to add Novell BorderManager 3.7 as a proxy server. Acme would like to be able to just add the server onto the existing network. Acme has the following requirements:

• Use only one network interface card (NIC)
• Use Transparent proxy to speed up Web access
• Use the IPX/IP gateway because client workstations have only IPX addresses and Acme Company does not want to configure TCP/IP

The following Novell BorderManager 3.7 components are used to implement this scenario, as shown in the following figure.

• Proxy Services Transparent proxy application
• IPX/IP gateway
• Access control (optional with the existing firewall)

Figure 28

To add a Novell BorderManager 3.7 proxy server to an existing firewall, Acme Company must perform the following general sequence of steps:

1. Install Novell BorderManager 3.7. Because there is only one NIC, make sure it is selected as both Private and Public during the installation.

   For more information and Novell BorderManager 3.7 installation procedures, refer to the Novell Novell BorderManager 3.7 installation documentation.

2. Using NetWare Administrator, Novell BorderManager 3.7 Services page, enable and configure the Transparent proxy application on the Novell BorderManager 3.7 server.

   For more information and configuration procedures, refer Advanced Configuration of Proxy Services.

3. Using NetWare Administrator, enable and configure the IPX/IP gateway.

   For more information and configuration procedures, refer to Setting Up NAT .

4. (Optional) Using NetWare Administrator, enable and configure access control rules.

   For more information and configuration procedures, refer to the Managing Access Control.

5. Ensure that users who will use the IPX/IP gateway install and configure the gateway component of the Novell Client^TM software.

   For more information and configuration procedures, refer to the Novell IP Gateway and NAT Overview and Planning.