Websense filters Internet content according to policy settings. When protocol filtering is active and a protocol request is made, Websense performs queries to:
- Determine the protocol (or Internet application) name.
- Identify the protocol based on the request destination address.
- Search for related port numbers in custom protocol definitions.
- Search for related port numbers (or signatures) in Websense protocol definitions.
Websense software uses these queries to filter the protocol appropriately.
When filtering some protocols, Websense software previously used the User-Agent field of the HTTP header and the packet signature to determine whether a request was a URL request or a tunneled protocol request (a request that bypasses a firewall via a port normally used by HTTP traffic).
As of Websense database 92938, the User-Agent issue has been corrected. Packet signatures with User-Agents are now removed. All customers have been updated with the nightly protocol database upload. No additional software or patch is needed for customers, because the update happened automatically.
Verify, validate, confirm, requests, tunnel, protocol, Network Agent, Filtering Service, Websense Enterprise