The Squid plug-in must be installed on the Squid Web Proxy Cache machine (Squid machine) to allow Websense Filtering Service and the Squid software to communicate.
You can install the Websense components on the Squid machine or on a different machine. If you install Filtering Service on the Squid machine, you must still install the Squid plug-in as well.
If you install Filtering Service on a separate machine from Squid Web Proxy Cache, you must subsequently install the Squid plug-in on every Squid machine that communicates with Filtering Service.
Websense Filtering Service must be installed on its machine before installing the Websense Squid plug-in on the Squid machine. Filtering Service must be installed as integrated with Squid Web Proxy Cache.
Install Websense Network Agent to filter non-HTTP(S)/FTP traffic (e.g., instant messaging, streaming media, peer-to-peer, and so forth) which is not handled by Squid Web Proxy Cache. If Network Agent is installed on a separate machine, it must be connected to a bi-directional span port on a network switch (see the
Deploying Network Agent for information about where to place Network Agent in your network). If Network Agent is installed on the Squid machine, connecting to a span port is not necessary.
If Filtering Service is installed on a separate machine from the Squid machine, it must be installed before you install the Squid plug-in. When it is installed, Filtering Service must be installed as integrated with Squid Web Proxy Cache. You must specify the location of Filtering Service when installing the Squid plug-in, otherwise the installer will not proceed.
When installing the Squid plug-in, the installer checks for Squid Web Proxy Cache on the installation machine. If Squid Web Proxy Cache is detected, the installer continues.
|
|
Make sure visible_hostname is set in the squid.conf file before installing the Squid plug-in. See your Squid documentation for instructions.
|
|
|
These instructions refer to GUI installer screens. There are GUI and command-line versions of the Web Security Linux installer. In the command-line version, prompts are displayed that correspond to each GUI screen. Instructions for a screen also apply to the corresponding command-line prompt. The main difference is how options are selected. Rather than clicking items in a screen, you will enter menu-item numbers or characters.
To cancel the command-line installer, press Ctrl-C. However, do not cancel the installer, after the Pre-Installation Summary screen, as it is installing components. In this case allow the installation to complete and then uninstall the components you did not want to install.
|
|
3.
|
On the Introduction screen, click Next.
|
|
4.
|
On the Subscription Agreement screen, choose to accept the terms of the agreement and then click Next.
|
|
5.
|
On the Installation Type screen, select Custom and then click Next.
|
|
6.
|
On the Custom Installation screen, select and then click Next.
|
|
7.
|
On the Filtering Service Communication screen, enter the IP address of the machine on which Filtering Service is installed and the port Filtering Service uses to communicate with integration products and Network Agent (default is 15868). Then click Next.
|
The port used by Filtering Service to communicate with integration products and Network Agent must be in the range 1024-65535. Filtering Service may have been automatically configured to use a port other than the default 15868. When Filtering Service was installed, if the installation program found the default port to be in use, it was automatically incremented until a free port is found. To determine what port is used by Filtering Service, check the
eimserver.ini file—located in
C:\Program Files or Program Files (x86)\Websense\Web Security\bin (Windows) or
/opt/Websense/bin (Linux)—on the Filtering Service machine. In this file, look for the
WebsenseServerPort value.
|
8.
|
On the Select Integration screen, select Squid Web Proxy Cache.
|
|
9.
|
On the Squid Configuration screen, enter paths to the squid.conf and squid executable files, and then click Next.
|
The installation program will verify the path to squid.conf. A default path is automatically entered. Enter a different path if necessary or click
Browse to navigate to the location. This path must be verified for the installation to continue. (Note: the path must include the file name.)
|
10.
|
On the Installation Directory screen, accept the default installation path, or click Choose to specify another path, and then click Next.
|
|
11.
|
On the Pre-Installation Summary screen, verify the information shown.
|
Filtering Plug-in should be listed as the only component to be installed.
|
12.
|
Click Next to start the installation. An Installing progress screen is displayed. Wait for the installation to complete.
|
|
13.
|
On the Installation Complete screen, click Done.
|
Follow the installation instructions in Filtering installation. The steps below provide specific options to select, or alternate instructions to be used, as you follow the instructions in the installation materials. Unless a specific option or alternative instruction is provided here, you should follow the steps as described in the installation materials.
|
|
Following this procedure installs Websense Network Agent on this machine. Network Agent can be used to filter non-HTTP(S)/FTP traffic (e.g., instant messaging, streaming media, peer-to-peer, and so forth) which is not handled by Squid Web Proxy Cache.
|
|
1.
|
On the Introduction screen, click Next.
|
|
2.
|
On the Subscription Agreement screen, choose to accept the terms of the agreement and then click Next.
|
|
3.
|
On the Installation Type screen, select Filtering and then click Next.
|
|
4.
|
At the Integration Option screen, select Integrated with another application or device.
|
|
5.
|
On the Select Integration screen, select Squid Web Proxy Cache.
|
See Filtering Plug-In Screen for more information about these options.
|
7.
|
On the Squid Configuration screen, enter paths to the squid.conf and squid executable files, and then click Next.
|
The installation program will verify the path to squid.conf. A default path is automatically entered. Enter a different path if necessary or click
Browse to navigate to the location. This path must be verified for the installation to continue. (Note: the path must include the file name.)
Web Security components may be distributed across multiple machines. Depending on the size of your deployment (i.e., number of users and amount of network traffic) there are best practices of grouping certain components together on the same machine and separating certain components onto their own machine (e.g. reporting components). See the
General Deployment Recommendations for Web Security for information about distributing components across machines.
|
|
Websense Filtering Service must be installed on its machine before installing the Websense Squid plug-in on the Squid machine. Additionally, Filtering Service must be installed as integrated with Squid Web Proxy Cache. If Filtering Service will be on the Squid machine, it can be installed at the same time as the Squid plug-in.
|
On the Select Components screen, be sure to select
Filtering Plug-In along with any other Websense components to be installed on the Squid machine.
To install the filtering plug-in (i.e., Squid plug-in), the installer stops Squid Web Proxy Cache. At the end of the installation process, the installer automatically starts Squid Web Proxy Cache. In some cases, the installer is unable to start Squid Web Proxy Cache and it must be manually started:
Deployment and Installation Center
