Custom Deployment > Installing Web Security components

Installing Web Security components

Applies to

Web Filter v7.6

Web Security v7.6

Web Security Gateway v7.6

Web Security Gateway Anywhere v7.6

Installing Web Security components

Complete these steps to install Web security components on a machine. If you are installing components on multiple machines, run the Websense installer and complete these steps on each machine, selecting the particular components you want.

To install Web Security components on a Linux machine, see Installing Web Security components on Linux.

1.	It is assumed you have already launched the Websense installer and chosen the Custom installation type. If not, see Deployment.

If you are adding components, skip to Step 3 now.

2.	On the Custom Installation dashboard, click the Install link for Web Security.

The Web Security component installer is launched.

3.	On the Select Components screen, select the components you want to install on this machine.

Note  TRITON - Web Security is available in the Select Components screen only if TRITON Infrastructure is already installed on this machine. See Installing TRITON Infrastructure for instructions.

Important  In any Web security deployment, the following three components must be installed in this order (and before any other Web security components): Policy Broker Policy Server Filtering Service If you select all three to be installed at the same time on a machine, they are installed in the correct order. After these three components, all other Web security components can be installed in any order.

Important  There must be only one instance of Policy Broker in an entire deployment. Note that in an appliance-based deployment a Web Security mode appliance running in full policy source mode has Policy Broker already installed and running.

See the following for more information about each component:

Policy Broker	eDirectory Agent
Policy Server	RADIUS Agent
Filtering Service	Logon Agent
Network Agent	Filtering Plug-in
Usage Monitor	Remote Filtering Client
TRITON - Web Security	Remote Filtering Server
Real-Time Monitor	Linking Service
Web Security Log Server	Sync Service
User Service	Directory Agent
DC Agent

4.	Depending on the components you have selected, some or all of the following installer screens appear. (In the following list, after a screen name, is the component-selection or machine condition that causes the screen to appear.) Click the screen name for instructions.

Policy Server Connection Screen (Filtering Service, Network Agent, Usage Monitor, TRITON - Web Security, Real-Time Monitor, Web Security Log Server, User Service, DC Agent, eDirectory Agent, RADIUS Agent, Logon Agent, Remote Filtering Client Pack, Remote Filtering Server, Linking Service, Sync Service, or Directory Agent)

Policy Broker Connection Screen (Policy Server, Sync Service, or Directory Agent)

Multiple Network Cards Screen (if multiple NICs detected)

Active Directory Screen (if installing User Service, DC Agent, or Logon Agent on Windows Server 2008)

Computer Browser Screen (if installing User Service, DC Agent, or Logon Agent on Windows Server 2008 and the Computer Browser service is not running)

Integration Option Screen (Filtering Service)

Select Integration Screen (Filtering Service, to be integrated with a third-party product, or Filtering Plug-In)

Network Agent and Firewall Screen (Filtering Service and Network Agent; Filtering Service to be integrated with a Check Point product)

Filtering Plug-In Screen (Filtering Service, to be integrated with Citrix, Microsoft ISA Server, or Squid Web Proxy Cache)

Squid Configuration Screen (Filtering Service, to be integrated with Squid Web Proxy Cache, or Filtering Plug-In)

Network Card Selection Screen (Network Agent)

Database Information Screen (Web Security Log Server)

Log Database Location Screen (Web Security Log Server)

Optimize Log Database Size Screen (Web Security Log Server)

Filtering Feedback Screen (Filtering Service or Network Agent)

Directory Service Access Screen (User Service, DC Agent, or Logon Agent)

Remote Filtering Communication Screen (Remote Filtering Server)

Remote Filtering Pass Phrase Screen (Remote Filtering Server)

Filtering Service Information for Remote Filtering Screen (Remote Filtering Server)

Filtering Service Communication Screen (Network Agent, a filtering plug-in, or Linking Service)

5.	On the Installation Directory screen, accept the default installation path, or click Choose to specify another path, and then click Next.

The installation path must be absolute (not relative). The default installation path is:

C:\Program Files or Program Files (x86)\Websense\Web Security

The installer creates this directory if it does not exist.

Important  The full installation path must use only ASCII characters. Do not use extended ASCII or double-byte characters.

The installer compares the installation's system requirements with the machine's resources.

Insufficient disk space prompts an error message. The installer closes when you click OK.

Insufficient RAM prompts a warning message. The installation continues when you click OK. To ensure optimal performance, increase your memory to the recommended amount.

6.	On the Pre-Installation Summary screen, verify the information shown.

The summary shows the installation path and size, and the components to be installed.

7.	Click Next to start the installation. An Installing progress screen is displayed. Wait for the installation to complete.

8.	If you chose to install the ISA Server filtering plug-in, the Stop Microsoft Firewall Service screen appears. Do the following:

a.	Stop the Microsoft Firewall service and then click Next.

 

Note  Leave the Websense installer running as you stop the Microsoft Firewall service. Then return to the installer and click Next to continue installation.

 

Important  In order to correctly install the ISA Server filtering plug-in, the Microsoft Firewall Service must be stopped. Installation of the plug-in files and registration of the plug-in the system registry cannot occur while the Microsoft Firewall Service has certain files locked. Stopping the Microsoft Firewall Service unlocks these files.

To stop the Firewall service, go to the Windows Services console (Administrative Tools > Services). Right-click Microsoft Firewall, and then select Stop. When the service has stopped, return to the Websense installer and continue the installation process. The Firewall Service may also be stopped from the ISA Server Management console or Command Prompt (using the command net stop fwsrv). See Microsoft's documentation for more information.

Important  When the Microsoft Firewall service is stopped, ISA Server goes into lockdown mode. Depending on your network configuration, network traffic may be stopped. Typically, the Firewall service needs to be stopped for only a few minutes as the ISA Server filtering plug-in is installed and configured.

b.	When the following message appears, start the Microsoft Firewall service and then click OK:

The Websense ISAPI Filter has been configured, you can now start the Microsoft Firewall Service.

To start the Firewall service, go to the Windows Services management console (Administrative Tools > Services). Right-click Microsoft Firewall, and then select Start.The Firewall Service may also be started from the ISA Server Management console or Command Prompt (using the command net start fwsrv). See Microsoft's documentation for more information.

9.	On the Installation Complete screen, click Done.

Additional configuration may be necessary if integrating Web Filter or Web Security with another product. See:

Check Point Integration

Cisco Integration

Citrix Integration

Microsoft ISA Server or Forefront TMG Integration

Squid Web Proxy Cache Integration

Universal Integrations

Custom Deployment > Installing Web Security components