Configuring firewalls or routers when integrating with Cisco Content Engine

Applies to

Web Filter v7.6

Web Security v7.6

Web Security Gateway v7.6

Configuring firewalls or routers when integrating with Cisco Content Engine

To prevent users from circumventing Websense filtering, your firewall or Internet router should be configured to allow outbound HTTP, HTTPS, and FTP requests only from the Cisco Content Engine.

The Content Engine and Websense software transparently handle Internet requests sent from routers using Web Cache Communication Protocol (WCCP).

Network Agent cannot perform protocol filtering on traffic encapsulated with WCCP.

 

Note  For Internet connectivity, Filtering Service may require authentication through a proxy server or firewall for HTTP traffic. To allow downloads of the Websense Master Database, configure the proxy or firewall to accept clear text or basic authentication. See the proxy or firewall documentation for configuration instructions. See the TRITON - Web Security Help for instructions on running the Websense Master Database download.