Installation Checklist

This is a high-level overview/checklist of essential tasks that need performed to install the DrawBridge on your network.

1. Decide on Installation Type A.
   • Gateway (recommended)
   B.
   • Alternate Gateway
   C.
   • Proxy
   Proxy
2. Collect IP addresses and credentials for existing network infrastructure equipment (modems, routers, managed switches, wireless routers/access points, and servers) as applicable.
3. Reconfigure the network to accomodate your installation type (For example, if Gateway, replace primary router with the DrawBridge in gateway situations; disable DHCP on wireless router if continuing to use as wireless access point)
4. Enable remote-device access (where applicable) by configuring Port Forwarding or DMZ on your modem (if not Bridged) or Firewall.
5. Ensure DNS is properly configured:
   • Gateway setups: In most situations the DrawBridge is also the DHCP and DNS server for the network, so no additional configuration is required.
   • Alternate Gateway/Proxy setups: ensure https://draw.bridge and the system DNS names are configured on your local DNS server to resolve to the local network IP of the DrawBridge. See #5, below.
6. Install SSL Certificates on all devices: visit http://draw.bridge/sslcerts/dashboard/ on your LAN post-install and follow the correct steps for your platform. Alternatively, if the local DrawBridge is not reachable yet, visit the Certificates panel on one of our cloud servers: http://whitespire.compassfoundation.io/sslcerts/dashboard/
7. "Harden"/Secure configuration: (make bypassing filtering difficult; optional)
   • Gateway setups: disable WiFi and DHCP on the (upstream) modem
   • Alternate Gateway/Proxy setups: block 80/443 TCP and UDP in your gateway firewall to enforce proxy settings on clients