Deployment and Installation CenterWebsense TRITON Enterprise v7.6.x
Deployment and Installation Center
|
|
|
|
Web Security Distributed Enterprise Deployments > Web Security basic distributed enterprise topology
|
To reduce network infrastructure costs, each remote-site firewall in a decentralized network is connected directly to the Internet, rather than to a corporate WAN.A small office/home office (SOHO) firewall is connected to an ISDN, DSL/cable, or T1 connection. Except for corporate application data that may use a virtual private network (VPN) connection, each outbound Internet request from a remote site is sent through a local Internet service provider (ISP) to the Internet.The illustration below shows a sample network topology of this type of remote site for Websense Web Security.Websense Web Security Gateway adds Websense Content Gateway to the deployment, as shown below.Off-site users (remote users outside the corporate or remote-site network) can be filtered using Websense Remote Filtering. Note that the Remote Filtering Server must be deployed in the main site network (Remote Filtering Server not depicted in the above illustrations) and Remote Filtering Client must be installed on each off-site machine. See Remote Filtering Software technical paper.The above two illustrations show a high-level scheme only. Details about how distributing across separate machines, Content Gateway deployment, Network Agent placement, use of an integration product, and so forth are not included. Do not install any Websense components on a domain controller.In a basic Web Security Gateway Anywhere deployment, the remote site and off-site users can be filtered through the hybrid service rather than by the filtering software at the main site..A V-Series-appliance-based or software-based deployment of Web Security Gateway Anywhere is installed at the main site. A V-Series-appliance-based deployment consists of a Websense V-Series appliance running core filtering components, plus additional servers running reporting and interoperability components (allowing communication between Web and data security components and also between on-premises components and the hybrid service). A software-based deployment consists of all the same components, distributed across a number of servers.No additional software is required at remote sites or on off-site machines to be filtered through the hybrid service (some configuration at the main site and deployment of a PAC file to client machines is required; see the TRITON - Web Security Help for more information).
|
|
|
|
|
Web Security Distributed Enterprise Deployments > Web Security basic distributed enterprise topology
|
