Integrating Web Security with Other Products > Integrating Web Security with Cisco

Integrating Web Security with Cisco

Applies to

Web Filter v7.6

Web Security v7.6

In this topic

u	Cisco PIX/ASA

u	Cisco Content Engine

u	Cisco IOS Routers

Cisco PIX/ASA

A simple and common network topology places Websense filtering components on a single machine, or group of dedicated machines, communicating with a Cisco PIX Firewall or Cisco Adaptive Security Appliance (ASA) via TCP/IP.

TRITON Unified Security Center and reporting components are installed on a separate machine.

If you install Network Agent, it must be positioned to see all traffic on the internal network.

See Cisco Integration for configuration instructions.

Other configurations are possible. See your Cisco PIX Firewall or ASA documentation and the information in this section to determine the best configuration for your network.

The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines. Logon Agent can be used instead of or in combination with DC Agent.

Cisco Content Engine

In this common configuration, Websense filtering components are installed on a single machine, communicating with the Cisco Content Engine through TCP/IP.

TRITON Unified Security Center and reporting components are installed on a separate machine.

If you install Network Agent, it must be positioned to see all traffic on the internal network.

Other configurations are possible. See your Content Engine documentation and the information in this chapter to determine the best configuration for your network.

The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines. Logon Agent can be used instead of or in combination with DC Agent.

Cisco IOS Routers

In this common configuration, Websense filtering components are installed on a single machine, communicating with the Cisco IOS Router.

TRITON Unified Security Center and reporting components are installed on a separate machine.

If you install Network Agent, it must be positioned to see all traffic on the internal network.

The router has firewall functionality and can be used with or without an accompanying firewall.

If the Cisco IOS Router is used with a separate firewall, ensure that all Internet traffic is configured to pass through the router and is not set to bypass the router and go directly to the firewall. Traffic filtered through the separate firewall cannot be filtered by the Websense software.

Other configurations are possible. See your Cisco Router documentation and the information in this chapter to determine the best configuration for your network.

The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines. Logon Agent can be used instead of or in combination with DC Agent.

Integrating Web Security with Other Products > Integrating Web Security with Cisco