Users Guide

584 | External Services Interface Dell PowerConnect ArubaOS 5.0 | [User Guide
The ESI configuration process will redirect all HTTP user traffic to the Fortinet server for examination, and any
infected user will be blacklisted. The configuration process consists of these general tasks:
z Defining the ESI server.
z Defining the default ping health check method.
z Defining the ESI group.
z Defining the HTTP redirect filter for sending HTTP traffic to the ESI server.
z Applying the firewall policy to the guest role.
z Defining ESI parser domains and rules.
There are three configuration “phases” on the controller as a part of the solution.
z The first phase configures the ESI ping health-check method, servers, and server groups.The term server here
refers to external AVF server devices.
z In the second phase of the configuration task, the user roles are configured with the redirection policies
(session ACL definition) instructing the controller to redirect the different types of traffic to different server
groups.
z In the final phase, the ESI parser domains and rules are configured.
Health-Check Method, Groups, and Servers
To configure the ESI health-check method, servers, and server groups, navigate to the Configuration >
Advanced Services > External Services view on the WebUI.
Defining the Ping Health-Check Method
In the WebUI
To configure a health check profile:
1. Navigate to the Configuration > Advanced Services > External Services page on the WebUI.
2. Click Add in the Health Check Configuration section.
(To change an existing profile, click Edit.)
3. Provide the following details:
a. Enter enter the name default for the Profile Name.
b. Frequency (secs)—Enter 5.)
c. Timeout (secs)—Indicates the number of seconds the controller waits for a response to its health check
query before marking the health check as failed. Default: 2 seconds. (In this example, enter 3.)
d. Retry count—Is the number of failed health checks after which the controller marks the server as being
down. Default: 2. (In this example, enter 3.)
4. Click Done when you are finished.
5. To apply the configuration (changes), click Apply. (The configuration will not take effect until you click
Apply.)
In the CLI
Use these CLI commands to configure a health-check method:
esi ping profile_name
frequency seconds
Note: The procedures shown in the following sections are based on the requirements in the example routed ESI topology. Your
application might be broader or narrower than this example, but the same general operations apply.