Configure McAfee Web Gateway

Configure the McAfee Web Gateway RESTful API interface so that Nevelex Labs Security Flow is allowed to send instructions to automate operations:

1. 1. Install and configure McAfee Web Gateway (MWG).
   2. Enable REST API on your device by:
      1. Creating a user with the REST API accessibility role.
      2. Configuring a NL-MWG node to add or delete entries from a list.
   3. Set up Nevelex Labs Security Flow to use the MWG Plugin nodes.

Creating and Enabling a REST User

Note: This is a critical step!

1. From McAfee Web Gateway, select Configuration | Appliances.
2. On the appliances tree, select the appliance you want to administer using the REST interface and click User Interface.
3. Under UI Access, select Enable REST interface over HTTP or Enable REST interface over HTTPS as needed.
4. Click Save Changes in the upper right.

Setup the User Access to the MWG REST Interface

1. Add permission to an Administrator ‘role’ to access the REST interface (for users who will manage the interface).
2. Select Accounts | Administrator Accounts.
3. In the Roles window, select an administrator role and click Edit. The Edit Role window opens.
   
4. Add a User - this is the user name/password that will be used later, when setting up a a Security Flow plugin instance.
   
5. Select REST-Interface accessible.
6. Ensure that Policy- Rules accessible and Policy – Lists accessible are also selected. Other items can be selected if required by your company’s security policies.
7. Click OK to close the window.
8. Click Save Changes. You can now assign this administrator role to appropriate users. Instead of adding access permission to an existing role, you can also create a new role with this permission and name it, for example, REST Admin.