Web Filter 3



Welcome to your Lightspeed Systems Rocket, the scalable, powerful appliance that runs your Lightspeed Systems software solutions.


Your new Rocket software is pre-installed and will be ready to use after you complete a few simple configuration steps. When your Rocket ships, you will get an email from a Lightspeed Sales Engineer, who will work with you on your network architecture, your Lightspeed Systems solution, and your needs.

Explore the Manual

  • Installation – get your Rocket installed on your network
  • Getting Started – a look at the basics, including logging in, and understanding the Dashboard
  • Administration – detailed information on administering all aspects of your Rocket hardware
  • Reporting with the Rocket – create, schedule, customize and export reports on system and module activities.



Here’s what you need to power your Rocket:

  • A Lightspeed Systems Rocket Appliance from Lightspeed Systems, preloaded with the Lightspeed Systems Rocket software. (Or a Lightspeed Systems Rocket Appliance with a previous software version installed, and a Lightspeed provided USB thumb drive.)
  • The appliance must be connected to power, keyboard, and monitor (LAN KVMs may work).
  • Management NIC must be connected and able to access the network/internet; leave others disconnected.
  • Fixed IP, Internal DNS IP, and your Gateway IP

Important: DHCP is not supported. You must assign static IP addresses to the Lightspeed Systems Rocket Appliance.

Outbound, Inbound, and Internal Ports

See the KB article Ports used by Lightspeed Systems Products for a list of required outbound, inbound, and internal ports for the Rocket.


All Windows workstations must use one of the following supported browsers:

  • Microsoft
  • Microsoft Internet Explorer (IE):
  • For end users: Version 8.0 or later
  • For management: Version 9.0 and later
  • Firefox 4.0 or later
  • Safari 4.0 or later
  • Google Chrome

Hardware Specifications

Lightspeed Systems Rocket Specifications

Rocket Chassis Storage Power Supply Input (AC) Heat Dissipation Operating Temperature Operating Relative Humidity Failover NIC
Lightspeed Systems Rocket, 1Gb 1U 500 GB Redundant 650W AC, hot swap 100-240 50/60Hz, 8/4A max 1269.3 Max BTU/Hour 10 to 35C (50 to 95F) 8% to 90% (non-condensing) Available with single- or dual-bridge copper or single-bridge fiber.
Lightspeed Systems Rocket, 1Gb-R 1U 500 GB RAID 10 Redundant 650W AC, hot swap 100-240 50/60Hz, 8/4A max 1269.3 Max BTU/Hour 10 to 35C (50 to 95F) 8% to 90% (non-condensing) Available with single- or dual-bridge copper or single-bridge fiber.
Lightspeed Systems Bottle Rocket, Web Filter 1U 500 Gb Single 260W AC 100-240 50/60Hz, 4A max 486 Max BTU/Hour 10 to 35C (50 to 95F) 8% to 90% (non-condensing) Single bridge copper
Lightspeed Systems Rocket, 10Gb 1U 500 GB RAID 10 Redundant 650W AC, hot swap 100-240 50/60Hz, 8/4A max 1269.3 Max BTU/Hour 10 to 35C (50 to 95F) 8% to 90% (non-condensing) Available in two versions: Short Range (850nm multi-mode fiber) and Long Range (1310nm single-mode fiber)
Policy Parent 1U 500 GB RAID 10 Redundant 650W AC, hot swap 100-240 50/60Hz, 8/4A max 1269.3 Max BTU/Hour 10 to 35C (50 to 95F) 8% to 90% (non-condensing) No failover
Traffic Bridge 1U 500 GB Single 260W AC 100-240 50/60Hz, 4A max 486 Max BTU/hour 10 to 35C (50 to 95F) 8% to 90% (non-condensing) No failover
Load Balancer 1U n/a Redundant hot swap 100-240 50/60Hz 0 to 40C (32 to 104F) 5% to 95% (non-condensing)

Note: All Rockets with fiber connections utilize LC connectors.

Implementation Guidelines


We have a variety of Rockets to meet your needs, from an entry-level Bottle Rocket to a set of high-capacity appliances serving multiple roles. Use these guidelines to help you plan your implementation and your Rocket installation. We will work with you to create the right solution for your network and your needs. Keep in mind networks grow, and because of that, a little extra capacity at the beginning can be a good thing.

Tip: Multiple Rocket appliances can be set up in “Clusters” to distribute your filtering needs.

Note: To prevent latency issues, ensure that all servers in a cluster configuration are located on a common network with fast and reliable transmission rates.

Web Filter Rocket

The three main things to consider when determining which Web Filter Rocket appliance is right for you are:

  • The number of “protected” workstations
  • The total amount of available bandwidth
  • The structure of your network

Multiple Rocket appliances can be combined in “clusters” to handle any size network.

Single-appliance Web Filter appliances, meaning a single box inline performing policy lookups and reporting, should be able to handle the following amount of traffic:


Rocket Traffic  Load
Bottle Rocket 150Mbs
Rocket, 1Gb 300Mbs


If you have more than 300Mbs of traffic you should use multiple Rocket appliances. Please note Bottle Rocket Web Filters should not be used as a parent if you have more than 300Mbs of traffic.

Inline Child Rocket appliances should be able to handle the following amount of traffic:


Rocket Traffic Load
Rocket, 1Gb 1Gbps (see note below)
Rocket, 10Gb 2Gbps (see note below)


If you are expecting to sustain more than 2Gbps of throughput a scalable load-balanced solution should be used. If you wish to add Advanced Reporting with full URL details an additional Advanced Reporting Rocket is required.

Prerequisite Checklist

To get your Rocket ready for your appointment with your Sales Engineer, gather the following information and complete these steps:

I. Open the following Firewall ports:

The following ports need to be opened in order for the Web Filter to function correctly.

Note: For security reasons, only the following ports should be open. Firewalls should not be configured with any port/any address rules inbound to the server as this will leave the server vulnerable to attacks from outside sources. If through troubleshooting procedures an any/any rule is put in place, it must be removed once testing has been completed.

Outbound Ports:

  • TCP-80 HTTP to ddb.lightspeedsystems.com and ddb.lsfilter.com (needed for filtering)
  • TCP-80 HTTP to keys.lightspeedsystems.com (needed for licensing)
  • TCP-1999 to bsdupdate01.lightspeedsystems.com (needed for monitoring)
  • TCP-80 HTTP to updates.lsfilter.com (needed for updates)
  • UDP-123 for date/time sync
  • UDP-1311 (needed for filtering)These must be stateful UDP connections in the firewall; otherwise, you will need an inbound rule to allow UDP with a source port of 1311.

Inbound Ports:

  • TCP-80 and TCP-443 HTTP from anywhere (needed for mobile filteringLaunch, and SIS Imports)
  • TCP-8080 Proxy (if you are planning to use the Rocket as a Proxy Server. We recommend choosing a different open port other than 8080 for additional security.)

Internal Ports:

  • TCP/UDP-1305 LTDP lookup (interrogation)
  • TCP/UDP-1306 Identification Server Service; UA reporting, and Identification Subscription
  • TCP/UDP-1307 Reporting (used between cluster servers and cluster master)
  • TCP/UDP-1310 Policy (used between parent and children appliances)

II. Obtain the following network information

(Write it down so it is handy for your appointment)

  • Fully-qualified hostname for the Rocket: ________________________________
  • Static IP Address for Rocket: _______________________________________

Important: DHCP is not supported. You must assign static IP addresses to the Lightspeed Systems Rocket Appliance.

  • Subnet Mask: _______________________________________
  • Gateway: _______________________________________
  • IP Address of Internal DNS server: _______________________________________
  • SMTP Mail Server and Port: _______________________________________

III. Physical setup

  • Rack the Rocket server. Refer to Hardware Specifications for power and temperature requirements.
  • Connect the Management NIC to your network. It must be connected and able to access the network and internet. Leave the other interfaces disconnected for now.
  • Connect the power cables, USB keyboard, and VGA monitor.
  • Power on the server.

IV. Configuring the Management NIC

Before you can manage the Rocket remotely from a web browser, you must configure the Management NIC (Network Interface Card).

  • 1. At the command prompt, login using the following credentials:

Username: admin
Password: admin

Rocket Config1

  • 2. Select Configure management interface, then enter the IP Address, Subnet Mask, and Gateway.

Rocket Config 2

  • 3. Select <Save>, then press [Enter] on your keyboard to save the Management NIC configuration.

Rocket Config 3

  • 4. Select <Exit>, then press [Enter] on your keyboard to complete the setup.

V. Prepare for deployment

  • 1. From a laptop or desktop computer, navigate to the Lightspeed Rocket Appliance web console at http://<IP Address>, using the IP address you assigned to the Management NIC. Use the following credentials to log into the Rocket.

Username: admin
Password: admin



  • 3. On the Start ignition sequence page, click Start.
  • 2. On the Lightspeed Rocket Login page, change the admin password.
  • 4. Interfaces: Specify the fully qualified hostname for the Rocket (optional) and at least one DNS server (required), using the information from II. Obtain the following network information

Important: If you enter a host name, you must also add a DNS A-Record on your DNS server. Without an A-Record, features such as the Access Page will not work properly.

  • Connectivity: Verify firewall ports are open
  • Updates: Allow updates to download and install (approx. 15-30 minutes)
  • Date and Time: Pick the closest major city in your time zone
  • Licensing: Enter your Customer ID (See “Welcome E-Mail”)
  • License Agreement: Please read and accept the License Agreement
  • Complete: Click Click here to continue and you will be redirected to the Rocket Dashboard.

Note: Click here for a detailed description of each page of the Setup Wizard.

VI. That’s it! Now please contact your Sales Engineer.

(Not sure who your SE is? Check the Region Map.)

Important: A Lightspeed USB drive is included with the paperwork provided with your Rocket appliance. Please keep this USB drive on hand for future software updates.

Configuring the Rocket

Set up your management NIC

To configure your management NIC, you need to connect directly to the Rocket Appliance. You will need a suitable power connection and the following:

a USB keyboard plugged into your Rocket
a VGA monitor plugged into your Rocket
a standard RJ-45 network cable connecting your management port on your Rocket to your network

Note: You must log into the appliance console directly from the local machine. Remote logins via SSH are not supported.

Power on your Rocket

On the front of your Rocket appliance locate the power button and turn the appliance on. You know you are powered on when the lights display. It may take the Rocket several minutes to boot up and display the login screen.

Log into the Rocket

Log in using the default username and password.

Username: admin

Password: admin

Configure management interface

Select configure management interface and press [Enter]

To navigate the console menus, use the arrow keys on the keyboard to highlight an option, save <Select>, or discard <Exit> your choice.

Enter your network information

Enter the Internal IP Address, Gateway, and Netmask (Subnet Mask) that you have selected for the Lightspeed Rocket Appliance. Click the Tab button to select <Save>, then press [Enter] on your keyboard to save the Management NIC configuration.

Note: DHCP is not supported. You must assign static IP addresses to the Lightspeed Systems Rocket Appliance.

Your Rocket will now update based on your settings. Select [Exit] to log out.

Preparing for Deployment

The next step is to prepare the Lightspeed Rocket Appliance for deployment. You can do this from a laptop or desktop computer connected to the local network.

  • 1. Open a web browser and navigate to http://LSS_Server_IP_Address/, where LSS_Server_IP_Address is the IP address you assigned to the Management NIC in the previous section. Log into the Lightspeed Rocket Appliance web console with the default user name “admin” and default password “admin”.
  • 2. The first time you log into the Web Console for the Lightspeed Rocket Appliance, the Setup Wizard will start automatically, and will prompt you for basic information.


Important: You will be prompted to choose a new Admin password during setup. Be sure to save the new Admin password in a secure location. This password can only be reset by Lightspeed staff.

NIC Connections

The Rocket Appliance’s external connection (copper RJ-45 connectors on 1g Rockets and Bottle Rockets, and fiber LC connectors on 10Gb Rockets) will connect in line with your outbound connection to the Internet. Typically, this would be connected to the internal interface on your firewall. The internal connection on the Rocket Appliance (copper RJ-45 connectors on 1g Rockets and Bottle Rockets and fiber LC connectors on 10Gb Rockets) will go to your core network — typically, where the internal interface on your firewall previously connected. The following network diagram shows a typical setup.


Rocket Role Support

See the table below to determine the features (Web Filter, Proxy Server, and Advanced Reporting) that are supported on your Rocket appliance

 Hardware Function
Rocket Appliance Model Number Web Filter Module Web Filter Module with Proxy Server Advanced Reporting Server
 check  check
Bottle Rocket (Web Filter)
 check  check
Advanced Reporting
Rocket (Web Filter)
 check  check

Understanding Release Numbers

On the Software Updates page, you can view the current version of software, install updates and upgrades, and enable automatic update installation. To access this page, click Administration on the dashboard, then click Software Updates

This section describes the differences between software updates and upgrades and what the numbers and letters in a release number mean.

Software releases for the Lightspeed Systems solutions can be one of the following:

New Maintenance Updates

These are software updates, which can be installed either automatically or manually through your Rocket appliance. For example, if you have Release 3.2.0 and you install Release 3.2.1, this is a software update.

New Version Upgrades

These are software upgrades, which can normally be installed manually. However, they cannot be installed automatically. In addition, depending on the current version of software you are running and the type of upgrade you may need to use a flash drive supplied by Lightspeed Systems to perform the upgrade. For example, if you have Release 2.2.17 and you install Release 2.3.0 or Release 3.2.0, these are upgrades.

Whether a version of software is an update or an upgrade, whether the change is major or minor, and if the version is a pre-release or latest official version can be determined by examining the position of digits and letters (if applicable) in the release number. The figure and table below show how to interpret the release number.

Digit / Letter Position Upgrade? Update? Description/Comments
a. First Digit  check  check The first digit indicates a major software upgrade, which may require installation with a Lightspeed Systems flash drive and a re-flash of the Rocket appliance.
b. Second Digit  check  check The second digit indicates a minor software upgrade, which can be installed manually on the Software Updates page. However, it cannot be installed automatically.
c. Third Digit  check  check The third digit indicates an update, which can be installed either manually or automatically. Please note that some updates may include new features, however most are maintenance releases to improve performance or correct issues.
d. Release Suffix  check  check The final characters in a release number will only be present if the release is a release candidate (rc) or a beta release (b). For example, if the release suffix consists of the letters “rc” this indicates a release candidate while a “b” indicates a beta release. For instance, Release “3.1.1.rc1″ is the first release candidate of Release 3.1.1. Release candidates and beta releases can only be installed manually, and you will prompted to confirm the installation when you start the upgrade or update.

Tip: Keep Your Software Up to Date. Lightspeed Systems strongly recommends that you keep up to date with the latest software updates. While you may not be experiencing any known issues, there may be beneficial performance improvements and security-related changes in the updates.