Squid Web Proxy Cache Integration > Squid Web Proxy Cache integration initial setup

Squid Web Proxy Cache integration initial setup

Applies to

Web Filter v7.6

Web Security v7.6

In this topic

Overview

Identifying the Proxy Cache and the HTTP port for Network Agent

Client computer configuration

Configuring firewalls or routers

Overview

Be sure to install the Squid plug-in on each Squid Web Proxy Cache machine so that Filtering Service and Squid Web Proxy Cache can communicate.

Network Agent deployment:

Network Agent can be installed with other Websense components on the Squid machine, or on a separate machine.

Network Agent must be installed to use protocol management.

If Network Agent is installed, the IP addresses of all proxy servers through which computers route their Internet requests must be defined. See Identifying the Proxy Cache and the HTTP port for Network Agent for instructions.

Identify the port used for HTTP traffic by the Squid integration. See Identifying the Proxy Cache and the HTTP port for Network Agent for instructions.

Configure authentication of users. See Authentication when integrated with Squid Web Proxy Cache for more information.

To block HTTPS traffic, you must configure Squid appropriately. See HTTPS blocking when integrated with Squid for instructions.

Configure browsers on client computers. See Client computer configuration for instructions.

Identifying the Proxy Cache and the HTTP port for Network Agent

If you have installed Network Agent, you must provide the IP addresses of all Squid Web Proxy Cache machines through which filtered Internet requests are routed. You also must provide the port that Squid uses for HTTP traffic. Without this data, Network Agent cannot filter or log requests properly.

1.	Open TRITON - Web Security.

2.	In the Settings tab, expand Network Agent.

3.	Select the appropriate IP address in the left navigation pane to open the Local Settings page.

4.	Add the IP addresses for all proxy servers under Proxies and Caches.

5.	Click Advanced Network Agent Settings.

6.	For Ports used for HTTP traffic, enter the port used by Squid Web Proxy Cache for HTTP traffic (default: 3128).

7.	Click OK to cache changes on the Local Settings page. Changes are not implemented until you click Save All.

See the Network Configuration topic in the TRITON - Web Security Help for more information.

Client computer configuration

Client computers must have a Web browser that supports proxy-based connections and Java technology.

Internet browsers on client computers must be configured to use the Squid Web Proxy Cache to handle HTTP, HTTPS, FTP, and Gopher requests. Browsers must point to the same port (default: 3128) that Squid Web Proxy Cache uses for each protocol.

See your browser online help for instructions on configuring the browser to send all Internet requests to the proxy server, Squid Web Proxy Cache.

Configuring firewalls or routers

To prevent users from circumventing Websense filtering, your firewall or Internet router should be configured to allow outbound HTTP, HTTPS, FTP, and Gopher requests only from Squid Web Proxy Cache. See your router or firewall documentation for information about configuring access lists on the router or firewall.

Squid Web Proxy Cache Integration > Squid Web Proxy Cache integration initial setup