This scenario requires an extra interface in the firewall since Web Security Manager is deployed in a DMZ-segment separated from the segment in which the web servers are placed. A caveat with this setup is that all Web Security Manager traffic (both inbound from clients and outbound to web systems) is using a single ethernet interface.

A separate network segment (subnet 2) is configured between Web Security Manager and the firewall.

HTTP/HTTPS traffic designated to the web systems (192.168.0.3 and 192.168.0.4) is redirected (either by forwarding IP packets via the router or by altering web systems' DNS settings) to Web Security Manager's IP address 192.168.1.10.

Outbound traffic from Web Security Manager to web systems is again inspected by the firewall and sent to the web systems on subnet 3.

The web systems' default gateway is the firewall with IP address 192.168.0.1.