LiveStream 5 Installation Guide

Network Requirements

The LiveStream 5 is designed to reside on your Local Area Network, behind your network firewall. While LiveStream 5 does act as a gateway/router to facilitate intercepting proxying, the system should not be used as the gateway between your organisation’s private network and the Internet.

Client devices access the Internet by setting their proxy configuration to point at your LiveStream server. Alternatively, to enforce LiveStream 5’s transparent proxy without a client configuration you may as it as the default gateway via DHCP.

Outbound Firewall Rules

To prevent users from bypassing the LiveStream 5 system and gaining direct access to the Internet, you should configure your firewall to block all outgoing traffic on the following ports:

  • Port 80 — HTTP
  • Port 443 — HTTPS

If you wish to filter traffic for applications such as Skype — which are designed to bypass most content filters by using random ports and ignoring proxy settings — you should also block all outgoing traffic on the following ports:

  • Port range 1024 to 65535 — This will generally block all internet applications that rely on non-standardised ports.

In order to aid in troubleshooting Internet access problems, you should also allow these ports for a designated client. You may then use that client to bypass the LiveStream 5 system for troubleshooting.

Finally, configure your firewall to allow only your LiveStream 5 server outgoing internet access on the following ports:

  • Port 80 – HTTP
  • Port 443 – HTTPS
  • Port 22 – SSH (When using a DNS server outside of your LAN)
  • Port 25 – SMTP (Email Notifications)
  • Port 53 – DNS (When using a DNS server outside of your LAN)
  • Port 123 – NTP (System time synchronisation)
  • Port 3436 – CNS (Required for instant website categorisation and filtering)

NOTE: If departmental network restrictions prevent you from opening any of these ports, please contact support as there work-arounds that can be employed, depending on your network.

LAN Settings

Since LiveStream 5 is designed to be a server on your Local Area Network, it is strongly recommended that you allocate a fixed IP address to it. The LiveStream 5 setup and installation does not support IP allocation via DHCP.

You should also ensure that there is an entry in your DNS server for the system prior to installing the software, particularly if you plan to integrate the system with a directory service.

Pre-installation Checklist

To expedite installation complete the following pre-installation checklist, for each ethernet interface you wish to configure, prior to installing the LiveStream 5 software. You may wish to print this page so that you have the necessary information on hand.

  1. Server IP Address:
  2. Subnet Mask:
  3. Default gateway (router):
  4. Hostname (fully-qualified):
  5. Primary DNS server:
  6. Secondary DNS server:
  7. Tertiary DNS server (optional):