Microsoft ISA Server or Forefront TMG Integration > Converting to an integration with ISA Server or Forefront TMG

Converting to an integration with ISA Server or Forefront TMG

Applies to

Web Filter v7.6

Web Security v7.6

In this topic

Overview

Tasks

Converting to an integrated system on a separate machine

Converting to an integration on the same machine

Overview

You can convert an existing stand-alone deployment of Websense Web Filter or Web Security to one that is integrated with ISA/TMG, without losing any configuration settings. The conversion process preserves such settings as policies, port numbers, and IP addresses.

Tasks

The following are the main tasks to convert a stand-alone deployment to one integrated with ISA/TMG.

Task 1:

Upgrade to the current version of Websense software. Keep it as a stand-alone deployment. See Upgrading Web Security or Web Filter to 7.6.0 for instructions.

Task 2:

Restart the installation machine.

Task 3:

Uninstall and reinstall Filtering Service in integrated mode, selecting ISA Server or Forefront TMG as the integration product.

If Websense software, including Network Agent, is running on the machine on which ISA Server will be installed, then Network Agent must be moved to another machine.

See the Installation Guide for instructions on removing components and installing them separately.

Task 4:

Convert the stand-alone deployment to a system integrated with ISA/TMG.

The procedure varies based on where Websense software is installed:

If Websense software is running on a different machine than ISA/TMG, follow the procedures in Converting to an integrated system on a separate machine.

If Websense software is running on the same machine as ISA, follow the procedures in Converting to an integration on the same machine.

Task 5:

Complete the setup tasks, as described later in this supplement.

Task 6:

Enable authentication so that users can be properly identified and filtered. For instructions, see Authentication when integrated with ISA Server or Forefront TMG.

Converting to an integrated system on a separate machine

When ISA/TMG is running on a different machine than the Websense software, you must remove the existing Websense Filtering Service, reinstall it to be integrated with ISA/TMG, and then install the ISAPI Filter plug-in on the machine running ISA/TMG. These procedures are described below.

 

Note  If you are upgrading to a new version of Websense software, perform the upgrade before converting the deployment to be integrated with ISA/TMG.

See Upgrading Web Security or Web Filter to 7.6.0 for instructions on backing up files, removing components, and running the installer.

Upgrade Websense software and remove Filtering Service

1.	If you have not done so, upgrade your Websense software to the current version.

See Upgrading Web Security or Web Filter to 7.6.0 for instructions.

2.	Use the Websense Backup Utility to back up the Websense configuration and initialization files. See the TRITON - Web Security Help for instructions.

3.	Make sure Websense software is running. The uninstaller looks for Policy Server during the removal process.

 

Warning  Do not remove Websense components without the associated Policy Server running. Policy Server keeps track of Websense configuration and component locations. If Policy Server is not running, files for the selected components are still removed, but configuration information is not updated for those components. Problems could occur later if you attempt to reinstall these components.

4.	Remove Filtering Service on its machine.

See Removing Web Security components for instructions. Be sure to remove only Filtering Service.

Reinstall Filtering Service

After Filtering Service is removed, reinstall it as integrated with ISA/TMG.

See Adding Web Security components for instructions. As you follow those instructions do the following on the screens noted below:

On the Select Components screen, select Filtering Service.

On the Integration Option screen, select Integrated with another application or device.

On the Select Integration screen, select Microsoft Internet Security and Acceleration Server or Microsoft Forefront Threat Management Gateway.

Note  Select the particular integration product you are using (ISA Server or Forefront TMG).

(This applies only if ISA Server was selected) On the Filtering Plug-In screen, select only Install other selected components.

Install the Websense ISAPI Filter Plug-In

Next, install the ISAPI Filter plug-in on the ISA/TMG machine. This plug-in allows Websense software and ISA/TMG to communicate. For instructions, see:

Installing the ISAPI Filter plug-in for ISA Server or

Installing the ISAPI Filter plug-in for Forefront TMG

Converting to an integration on the same machine

After upgrading a stand-alone deployment of Websense software, you can convert it to be integrated with ISA installed on the same machine.

To convert Websense software to be integrated with ISA Server, Websense Filtering Service and Network Agent must be removed and then reinstalled after ISA Server is installed.

 

Note  Internet requests are not filtered until this process is completed. Installing Websense components on the same machine as Forefront TMG is not supported.

1.	If you have not done so, upgrade your Websense software.

See Upgrading Web Security or Web Filter to 7.6.0 for instructions.

2.	Use the Websense Backup Utility to back up the Websense configuration and initialization files. See the TRITON - Web Security Help for instructions

3.	Make sure Websense software is running. The installer looks for Policy Server during the installation process.

 

Warning  Do not remove Websense components without the associated Policy Server running. Policy Server keeps track of Websense configuration and component locations. If Policy Server is not running, files for the selected components are still removed, but configuration information is not updated for those components. Problems could occur later if you attempt to reinstall these components.

4.	Remove Filtering Service (and Network Agent if installed) on its machine.

See Removing Web Security components for instructions. Be sure to remove only Filtering Service (and Network Agent).

Note  Network Agent must be removed because it should not run on the same machine as ISA. After reinstalling Filtering Service (see below), you will install Network Agent on a separate machine. An exception to this case is if ISA firewall is not enabled. If ISA is running only as a proxy server, Network Agent may be installed on the same machine.

After Network Agent and Filtering Service are removed, you can install ISA. See Microsoft documentation for instructions.

After ISA is installed:

1.	Run the Websense installer to reinstall Filtering Service and install the Websense ISAPI Filter plug-in.

See Adding Web Security components for instructions. As you follow those instructions do the following on the screens noted below:

On the Select Components screen, select Filtering Service.

On the Integration Option screen, select Integrated with another application or device.

On the Select Integration screen, select Microsoft Internet Security and Acceleration Server.

Note  Select the particular integration product you are using (ISA Server or Forefront TMG).

On the Filtering Plug-In screen, select both Yes, install the plug-in on this machine and Install other selected components.

2.	On a separate machine, install Network Agent.

See Web Filter or Web Security (software-based) for instructions.

Microsoft ISA Server or Forefront TMG Integration > Converting to an integration with ISA Server or Forefront TMG