Security Server Network Configuration

  • Article

To integrate the Security Server into your network, you configure specific network address settings and connect the Security Server to your network hardware. The settings depend on whether you are replacing your existing gateway or firewall device or retaining it. In the Planning Wizard, you collect the network address settings that you need.

Procedures for configuring the network adapters on the Security Server and physically connecting the server to your network hardware are provided in the Windows EBS Installation Guide on the Microsoft Web site (https://go.microsoft.com/fwlink/?LinkId=108903).

Replacing the existing firewall

When you replace your existing gateway or firewall device, the Security Server uses the network address settings of the existing device. The internal network adapter on the Security Server is configured with the existing gateway IP address, and the external network adapter can be configured with the external address of the firewall device.

Note

If you currently use a DHCP server to assign the external IP address of the firewall device, you can assign the external IP address of the Security Server dynamically.

The diagram below illustrates the network topology before and after the Security Server is integrated.

Replace firewall with the Security Server

Retaining the existing firewall device

In this configuration, your existing gateway or firewall device is retained and continues to function as before, with the added capabilities of Windows EBS. To accommodate using both the existing firewall device and the Security Server, a new subnet is created between them.

The diagram below illustrates the network topology before and after the Security Server is integrated.

Security Server integration with existing gateway

To integrate the Security Server you need the following information:

  • Your existing gateway IP address - the internal network adapter on the Security Server will be configured with this address.

  • A new IP address for your existing gateway device - you will reconfigure your gateway device with this new address during integration of the Security Server. You will configure this IP address as the default gateway address on your Security Server external network adapter.

At this time, you may also find it helpful to review the manufacturer's instruction for reconfiguring your gateway device.