v7.6.4 Release Notes for
X10G Appliance

Topic 40301/ Updated: 13-January-2012

Applies To:

Websense X10G appliance v7.6.4

Version 7.6.4 is the first release for the Websense X-Series X10G appliance. These release notes describe key features, link to X10G guides and checklists, discuss software included with the release, provide setup tips, and link to known issues.

Overview and setup times

Where to find answers during setup

Software provided on the security blades

Software that runs off-chassis

Known Issues

Overview and setup times

The Websense X10G appliance is a modular chassis that promotes high-performance network security solutions.

The energy-efficient chassis is a blade enclosure. It holds up to 16 security blades optimized for Web Security Gateway / Anywhere.

The X10G security blade servers are equipped with a hardened operating system and Websense Web Security Gateway software. Blades are optimized for analyzing and filtering Web traffic and content in real time.

Web Security software running on the X10G blades is at version 7.6.2 plus small changes made for the blade enclosure. It is compatible with off-chassis components at that version.

The Content Gateway module on the blade servers has been re-numbered to v7.6.4 and consists of Content Gateway v7.6.2 plus several changes made for the blade enclosure.

Use the v7.6.3 TRITON Unified Installer for Windows to install all off-chassis components. This installer is available on the Downloads page at MyWebsense.com.

One blade component must be updated by your Websense Support professional. The Policy Engine for Web DLP that runs on each blade server must be updated to Policy Engine v7.6.3. Your Websense professional will provide the file and apply it to each blade server after firstboot.

Setup times

The following estimates assume that you have planned your deployment in advance. They also assume that the X10G chassis hardware has been racked, blades have been inserted into the chassis slots, cables have been connected, power is on, and network connections have been established:

Booting all 16 blades and configuring software options for each blade server (should be done one-by-one) requires approximately 3 hours for a full chassis.

Off-chassis installation of required Windows components requires approximately1 hour.

Off-chassis configuration of Windows components requires approximately 1 to 3 hours (includes identifying client machines, setting up custom security policies, and assigning them to client machines or groups).

Initial database loading (Master URL Database and analytics databases) can require up to 30 - 40 minutes per blade server.

Appliance features

The Websense X10G appliance adds:

Single enclosure with expansion up to 16 blades, for up to 100,000-user capacity

Optimized blade servers for analyzing and filtering Web traffic

Compatibility with V-series appliances

User-friendly appliance management interface

Simplified cabling and wiring to facilitate setup and maintenance

Where to find answers during setup

Additional sources of information about the X10G appliance are available at MyWebsense.com. These include:

X10G Deployment Planner and Checklist – emailed to your site in advance of shipment, the X10G Deployment Planner provides checklists and worksheets to guide you through IP address assignments and the essential setup steps.

X10G appliance Quick Start – In the shipping box with the X10G appliance, this two-page poster shows how to set up, connect, and rack-mount the hardware.

X10G appliance Getting Started guide – Included on a disk in the shipping box, this booklet explains step-by-step how to configure the software for basic operation, including the components running on a Windows server.

X10G appliance Security Blade Manager Help – This searchable, printable PDF file contains all of the Help topics embedded in the X10G appliance Help system.

Websense Solution Center – Searchable articles and tips pertaining to the X10G appliance software and hardware are available online.

Software provided on the security blades

On each security blade, the following components have been pre-loaded, but not all components need to be run on every blade.

Policy Database (recommend that you install and run this off-chassis)

Policy Broker (recommend that you install and run this off-chassis)

Policy Server (recommend primary instance off-chassis)

Filtering Service

User Service

Usage Monitor

Control Service

Directory Agent (for sites using hybrid Web security)

Demo version of TRITON - Web Security console (not for production use)

Content Gateway (proxy) with Web DLP Policy Engine

Network Agent (optional and used only on security blade in slot 16)

Software that runs off-chassis

In addition to the Websense components mentioned below in this section, Microsoft SQL Server 2005 or 2008 should be installed off-chassis on its own Windows server.

To install any of the components mentioned here, use the Web Security TRITON installer for Windows from the Downloads page at MyWebsense.com). Use version 7.6.3. See the online Websense Technical Library for more information about components and installation details.

Web components

The following Web components should be installed and run off-chassis:

TRITON Unified Security Center

Policy Broker and primary Policy Server

Web Security Log Server (recommend using a separate Windows server)

Real-Time Monitor

Sync Service (for sites using hybrid Web security)

Linking Service (for sites using any integrated Data Security features)

Transparent identification agents (to apply user, group, or domain [OU] policies without prompting users for credentials). Choose from the list.

DC Agent

Logon Agent

eDirectory Agent

RADIUS Agent

TRITON Unified Security Center

Windows Server 2008 R2 (64-bit) is required for sites using Data Security or Email Security Gateway as well as Web Security Gateway. TRITON Unified Security Center must be able to reach each X10G blade's C interface.

For more information about the TRITON Unified Security Center and its components, see the online Websense Technical Library.

TRITON Infrastructure

TRITON Infrastructure is comprised of common user interface, logging, and reporting components required by the TRITON modules.

TRITON Infrastructure services include:

Websense TRITON Unified Security Center

Websense TRITON Web Server

Websense TRITON Settings Database

TRITON - Web Security

TRITON - Web Security is the console used to perform general configuration tasks, set up filtering policies, assign policies to users and groups, run reports, and other management tasks.

TRITON - Web Security services include:

Websense TRITON - Web Security

Websense Web Reporting Tools

Websense Explorer Report Scheduler

Websense Information Service for Explorer

The TRITON console with the Web Security module (only) is pre-installed on blade servers as a convenience for evaluations and demonstrations, but on-blade use is not recommended for production.

Database management software

Websense Web security products (and optional Email security products on V-Series appliances) require Microsoft SQL Server to host the reporting database, called the Log Database. The Web Security Log Database and the Email Security Log Database can be hosted by the same database engine instance.

Known Issues

A list of known issues for the X10G and related components is available to customers with a current MyWebsense account.

If you are not currently logged in to MyWebsense, the link above takes you to a login prompt. Log in to view the list.