Skip to main content

Essential Details & Install Checklist

Essential Details

The DrawBridge is a web content filter running on the ClearOS Linux distribution.

In addition to the content filter service, the ClearOS operating system can also perform the following functions:

  • DHCP (enabled by default)
  • DNS (enabled by default)
  • Firewall + Intrusion Prevention (when Gateway)
  • Port Forwarding (when Gateway)
  • OpenVPN Server

The DrawBridge has two web interfaces that load in a browser:

Note: The https://draw.bridge web address is only valid inside your network (it is not reachable from other computers on the internet). If this does not work, you can also use the IP address of the unit (however you should configure your DNS properly so that it does work).

Installation Checklist

This is a high-level overview/checklist of essential tasks that need performed to install the DrawBridge on your network.

  1. Install the DrawBridge CA Certificate on all devices: visit the Certificates panel on one of our cloud servers: (eg. whitespire or sweetspire) and follow the correct steps to install the DrawBridge CA Certificate for your device.
  2. Decide on Installation Type
    • Gateway (recommended)
    • Alternate Gateway
    • Proxy
  3. Collect IP addresses and credentials for existing network infrastructure equipment (modems, routers, managed switches, wireless routers/access points, and servers) as applicable.
  4. Reconfigure the network to accomodate your installation type (For example, if Gateway, replace primary router with the DrawBridge in gateway situations; disable DHCP on wireless router if continuing to use as wireless access point)
  5. Enable remote-device access (where applicable) by configuring Port Forwarding or DMZ on your modem (if not Bridged) or Firewall.
  6. Ensure DNS is properly configured:
    • Gateway setups: In most situations the DrawBridge is also the DHCP and DNS server for the network, so no additional configuration is required.
    • Alternate Gateway/Proxy setups: ensure https://draw.bridge and the system DNS names are configured on your local DNS server to resolve to the local network IP of the DrawBridge. See #5, below.
  7. Test your installation: Navigate to popular websites to ensure they work as expected. Getting security errors in device browsers? Ensure the DrawBridge CA Certificate is installed as detailed in #1, above. Alternatively, you can visit your local DrawBridge web console SSL Certificates dashboard when on your DrawBridge LAN and follow the certificate installation steps.
  8. "Harden"/Secure configuration: (make bypassing filtering difficult; optional)
    • Gateway setups: disable WiFi and DHCP on the (upstream) modem
    • Alternate Gateway/Proxy setups: block 80/443 TCP and UDP in your gateway firewall to enforce proxy settings on clients
Back to top