Installing Web Security Components on Linux > Installing all Web security filtering components on Linux

Installing all Web security filtering components on Linux

Applies to

Web Filter v7.6

Web Security v7.6

Web Security Gateway v7.6

Web Security Gateway Anywhere v7.6

Installing all Web security filtering components on Linux

1.	It is assumed you have already downloaded and started the Web Security Linux installer. If not, see Starting the Web Security Linux installer for instructions.

2.	If no Web security components have been installed on this machine:

a.	On the Introduction screen, click Next.

b.	On the Subscription Agreement screen, choose to accept the terms of the agreement and then click Next.

c.	On the Installation Type screen, select Filtering and then click Next.

3.	If there are Web security components already installed on this machine, the Add Components screen appears.

Select Install additional components on this machine and then click Next.

If there are already components on this machine, you can only perform a custom installation. See Custom installation

4.	On the Integration Option screen, indicate whether this is a stand-alone or integrated installation, and then click Next.

See Integration Option Screen for instructions.

5.	If you chose Integrated with another application or device (on the Integration Option screen), the Select Integration screen appears.

See Select Integration Screen for instructions.

6.	If the Filtering Plug-in screen appears, see Filtering Plug-In Screen for instructions.

7.	If the Squid Configuration screen appears, see Squid Configuration Screen for instructions.

8.	If the Network Card Selection screen appears, see Network Card Selection Screen for instructions.

9.	If the Multiple Network Cards screen appears, see Multiple Network Cards Screen for instructions.

10.	On the Filtering Feedback screen, select whether you want Websense software to send feedback to Websense, Inc. to improve accuracy. Then click Next.

See Filtering Feedback Screen for instructions.

11.	On the Web Security Gateway Anywhere Components screen, select whether you want to install Websense Web Security Gateway Anywhere components on this machine. Then click Next.

Install Web Security Gateway Anywhere Components: Select this option to install these components and then check the box for the components (Sync Service and/or Directory Agent) you want to install.

Do not install Web Security Gateway Anywhere Components: Select this option to not install these components.

12.	On the Transparent User Identification screen, select whether to use Websense transparent identification agents to identify users and then click Next. This allows Websense software to apply user- or group-based filtering policies without prompting users for logon information.

If Websense software is integrated with a third-party product (firewall, proxy server, cache, or network appliance) providing user authentication, a transparent identification agent may not be necessary.

To transparently identify remote users accessing the network via VPN, use Websense RADIUS Agent. Later in this installation process, you will be given the option to install RADIUS Agent.

It is possible to run multiple instances of the same transparent identification agent, or certain combinations of different transparent identification agents, in a network. (Note, however, you cannot run both DC Agent and eDirectory Agent, or Logon Agent and eDirectory Agent, in the same network.) To install another instance of a transparent identification agent or a different transparent identification agent, run this installation program on the other machine and use the Custom installation type. For information about multiple instances or combinations of transparent identification agents, see the Transparent Identification of Users technical paper in the Websense Technical Library (www.websense.com/library).

Use Logon Agent to identify users logging on to local machines: This option installs Websense Logon Agent on this machine. Logon Agent identifies users as they log onto Windows domains. Logon Agent is for use with Windows-based client machines on a network that uses Active Directory or Windows NT Directory.

To use Logon Agent, you must modify the Group Policy on domain controllers so it launches a logon application (LogonApp.exe) as part of the logon script. Client machines must use NTLM (v1 or v2) when authenticating users (NTLMv1 only, in the case of Windows Server 2008; see note below).

For instructions on configuring domain controllers and client machines to use Logon Agent, see Creating and running the script for Logon Agent.

 

Note  Do not use Logon Agent in a network that already includes eDirectory Agent.

 

Note  If using Logon Agent with a Windows Server 2008 domain controller, client machines must be configured to use NTLMv1 when authenticating a user. To do this, modify the security policy so Network security: LAN Manager authentication level is set to Send NTLM response only. This can be done on each individual client machine by modifying the local security policy, or on all machines in a domain by modifying the security policy of a Group Policy Object. For instructions, see Creating and running the script for Logon Agent.

Use eDirectory Agent to identify users logging on via Novell eDirectory Server: This option installs eDirectory Agent on this machine. Use this agent for a network using Novell eDirectory. eDirectory Agent queries the eDirectory Server at preset intervals to identify users currently logged on.

 

Note  Do not use eDirectory Agent in a network that already includes DC Agent or Logon Agent.

Do not install a transparent identification agent now: Select this option if

Websense software will be integrated with a third-party product that provides user authentication.

You plan to install a transparent identification agent on another machine.

You do not want different filtering policies applied to users or groups.

You want users to be prompted for logon information when they open a browser to access the Internet.

 

Note  When integrated with Cisco products, Websense software cannot use Cisco Secure Access Control Server (ACS) for user authentication for more than 1 user domain. If there are multiple user domains, use a transparent identification agent instead.

13.	On the RADIUS Agent screen, select Install RADIUS Agent if you have remote users that are authenticated by a RADIUS server and then click Next. This allows Websense software to apply user- or group-based filtering policies on these remote users without prompting for logon information.

14.	On the Installation Directory screen, accept the default installation path, or click Choose to specify another path, and then click Next.

The installation path must be absolute (not relative). The default installation path is:

Linux: /opt/Websense/

The installer creates this directory if it does not exist.

 

Important  The full installation path must use only ASCII characters. Do not use extended ASCII or double-byte characters.

The installer compares the installation's system requirements with the machine's resources.

Insufficient disk space prompts an error message. The installer closes when you click OK.

Insufficient RAM prompts a warning message. The installation continues when you click OK. To ensure optimal performance, increase your memory to the recommended amount.

15.	On the Pre-Installation Summary screen, verify the information shown.

The summary shows the installation path and size, and the components to be installed.

16.	Click Next to start the installation. An Installing progress screen is displayed. Wait for the installation to complete.

 

Note  If you are using the command-line Linux installer, do not cancel (Ctrl-C) the installer after the Pre-Installation Summary screen, as it is installing components. In this case, allow the installation to complete and then uninstall the unwanted components.

17.	On the Installation Complete screen, click Done.

Installing Web Security Components on Linux > Installing all Web security filtering components on Linux