Installation guide

Sun Java System Web Proxy Server  221
APPENDIX A
Stealth Mode
In some cases, it might be desirable to configure the Network Agent to inspect
all packets with a network interface card (NIC) that has been configured for
stealth mode. A NIC in stealth mode has no IP address and cannot be used for
communication. The advantages for this type of configuration are security and
network performance. Removing the IP address prevents connections to the
interface from outside and stops unwanted broadcasts.
Configuring for Stealth Mode
If the Network Agent is configured for a stealth mode NIC, the installation
machine must be multihomed. In remote installations of Network Agent, a
second, TCP/IP-capable interface must be configured to communicate with
the central Websense software for filtering and logging purposes.
Stealth mode NICs display normally during Network Agent installation. You
may test a stealth mode NIC for traffic visibility and select it for Network
Agent to use to monitor internet traffic. When installing on Windows, stealth
mode interfaces do not display as a choice for Websense communications.
Make sure you know the configuration of all the interfaces in the machine
before attempting an installation.
Important
In Solaris and Linux, stealth mode NICs appear together
with TCP/IP-capable interfaces and must not be selected
for communication.