Deployment scenarios

The method of deployment depends on the network infrastructure and the network role of the machine where GFI WebMonitor is to be installed. GFI WebMonitor can be deployed in the following modes:

Mode Description
Simple Proxy mode Routes client HTTPHypertext Transfer Protocol. traffic through GFI WebMonitor and non-HTTP traffic through a separate router. This setup requires an Internet facing router with port blocking and traffic forwarding capabilities.
Gateway mode Choose this mode if installing GFI WebMonitor on a server that is configured as an Internet gateway. All outbound and inbound client traffic (HTTP and non-HTTP) is routed through GFI WebMonitor. When GFI WebMonitor is deployed in this mode, you can enable Transparent Proxy, eliminating the need to set client browser settings to point to a specific proxy. For more information refer to Configuring Transparent Proxy.
In parallel with Microsoft Forefront TMG

When installing GFI WebMonitor it can be configured to operate in parallel to Microsoft Forefront TMGMicrosoft Forefront Threat Management Gateway. A Microsoft product that provides firewall and web proxy services. It also enables administrators to manage Internet access through policies. It is the successor of the Microsoft ISA Server and is part of the Microsoft Forefront line of business security software.. ]

Use this setup to keep Microsoft Forefront TMG as a firewall and use the same machine to perform web filtering by GFI WebMonitor. This setup also provides an alternative when it is not possible to add another dedicated machine in the network just for GFI WebMonitor.

As Plug-in for Microsoft Forefront TMG GFI WebMonitor 10 SR1 and later editions can be installed as a plug-in for Microsoft Forefront TMG. Use this setup when you want to keep the Microsoft Forefront TMG Server as the primary proxy server and use only the filtering capabilities of GFI WebMonitor. GFI WebMonitor features are not available when installing in this mode.