Squid Web Proxy Cache Integration > Converting Web Filter or Web Security to be integrated with Squid Web Proxy Cache

Converting Web Filter or Web Security to be integrated with Squid Web Proxy Cache

Applies to

Web Filter v7.6

Web Security v7.6

In this topic

Overview

Tasks

Converting to an integrated system on separate machines

Converting to an integration on the same machine

Overview

You can convert an existing stand-alone deployment of Websense Web Filter or Web Security to an integrated system without losing any configuration settings. The conversion process preserves settings such as policies, port numbers, and IP addresses.

Websense and Squid software can be installed on the same machine or a separate machines.

Tasks

Task 1:

Upgrade to the current version of stand-alone Web Filter or Web Security. Keep it as a stand-alone deployment.

Task 2:

Restart the installation machine.

Task 3:

Uninstall and reinstall Filtering Service and Network Agent.

See Removing Components and Installing Web Security components for instructions.

Task 4:

Convert the stand-alone deployment to a system integrated with Squid Web Proxy Cache.

The procedure depends on where Websense software is installed:

If Websense software is running on a different machine than Squid Web Proxy Cache, follow the procedures in Converting to an integrated system on separate machines.

If Websense software is running on the same machine as Squid Web Proxy Cache, follow the procedures in Converting to an integration on the same machine.

Task 5:

Complete the Initial Setup tasks (see Squid Web Proxy Cache integration initial setup).

Task 6:

Enable authentication so that users can be properly identified and filtered. See Authentication when integrated with Squid Web Proxy Cache for instructions

Converting to an integrated system on separate machines

When Squid Web Proxy Cache is running on a different machine than Websense software, you must remove the existing Filtering Service, reinstall it as integrated with Squid Web Proxy Cache, and then install the Squid plug-in on the machine running Squid Web Proxy Cache. Network Agent also must be removed and reinstalled.

Upgrade Websense and remove Filtering Service

1.	Log on to the machine running Filtering Service:

Linux: Log in as the root user.

Windows: Log in with administrative privileges.

2.	If you have not done so, upgrade your Websense software to the current version.

3.	Use the Websense Backup Utility to back up the Websense configuration and initialization files. See the TRITON - Web Security Help for instructions.

4.	Ensure that Websense software is running. The uninstaller looks for Policy Server during the removal process.

5.	Close all applications and stop any antivirus software.

6.	Run the uninstaller.

Linux: Go to the Websense installation directory (by default, /opt/Websense) and enter the following command:

./uninstall.sh

A GUI version is available on English versions of Linux:

./uninstall.sh -g

Windows: see Removing Web Security components.

The uninstaller detects the installed Websense components and lists them.

 

7.	Select Filtering Service and Network Agent for removal, and then click Next.

 

Note  If there are multiple Network Agents for the same Filtering Service, uninstall all those Network Agents before you uninstall the associated Filtering Service. Trying to uninstall Network Agent after its associated Filtering Service has been removed causes an error message.

8.	Follow the prompts to complete the removal process.

If Policy Server is not running, a message tells you that removing Websense components may require communication with Policy Server. You must exit the uninstaller, start the Policy Server service, and then run the uninstaller again.

 

Warning  Do not remove Websense components without the associated Policy Server running. Policy Server keeps track of Websense configuration and component locations. If Policy Server is not running, files for the selected components are still removed, but configuration information is not updated for removed components. Problems could occur later if you attempt to reinstall these components.

Reinstall Filtering Service

After Filtering Service is removed, reinstall it as integrated with Squid Web Proxy Cache. Network Agent also must be reinstalled.

1.	Stop any antivirus program and firewall on the machine.

2.	Reinstall Filtering Service and Network Agent.

See Installing Web Security components for instructions.

3.	When installing Filtering Service:

a.	On the Integration Option screen, select Integrated with another application or device and then click Next.

b.	On the Select Integration screen, select Squid Web Proxy Cache.

c.	On the Filtering Plug-In screen, select only Install other selected components (do not select Yes, install the plug-in on this machine).

4.	Follow the remaining installer prompts to complete the installation.

5.	If you stopped your antivirus software, start it.

6.	If you stopped a firewall, start it.

7.	Make sure that all Websense components are running.

Linux: Go to the Websense installation directory (/opt/Websense, by default) and enter the following command:

./WebsenseAdmin status

If some services are not running, stop and then start them again by entering:

./WebsenseAdmin restart.

 

Warning  Do NOT use the kill -9 command to stop Websense services. This procedure may corrupt the services.

Windows: Use the Windows Services dialog box.

8.	Provide Network Agent with the IP address and port (default 3128) of all Squid Proxy Cache machines. See Identifying the Proxy Cache and the HTTP port for Network Agent.

Install the Squid plug-in

Next, the Squid plug-in must be installed on the machine running Squid Web Proxy Cache to enable communication between Websense software and Squid Web Proxy Cache.

See Installing the Squid plug-in.

Converting to an integration on the same machine

After upgrading Web Filter or Web Security, you can convert it to be integrated with Squid Web Proxy Cache that is installed on the same machine.

 

Important  If you are installing Websense software on a machine running an SELinux-enabled Red Hat Enterprise Linux ES 4 operating system with the version of Squid that is prepackaged with the Red Hat installation, Squid cannot launch the Websense Squid plug-in (WsRedtor). If the plug-in does not launch, Websense filtering cannot occur. Configure SELinux permissions so that WsRedtor can launch. See your Red Hat Enterprise Linux documentation for details. For more information, and a discussion of other options for addressing this issue, see the troubleshooting topic Internet requests are not being filtered.

To convert to an integrated system, Websense Filtering Service and Network Agent must be removed and then reinstalled after Squid Web Proxy Cache is installed.

 

Note  Internet requests are not filtered until this process is completed.

1.	Log on to the installation machine as root.

2.	Install Squid Web Proxy Cache, following the instructions provided with that product.

 

Important  Be sure to install and configure Squid Web Proxy Cache so it is functional before integrating Websense software with it. See Squid documentation and support resources for instructions.

3.	If you have not done so, upgrade your Websense software to the current version.

4.	Use the Websense Backup Utility to back up the Websense configuration and initialization files. See the TRITON - Web Security Help for instructions.

5.	Close all non-Websense applications, including any firewall and antivirus software.

6.	Ensure that Websense software is running. The uninstaller looks for Policy Server during the removal process.

7.	Run the Web Security Linux uninstaller:

a.	Navigate to the Websense installation directory (/opt/Websense, by default).

b.	Run the following command:

./uninstall.sh

A GUI version is available on English versions of Linux:

./uninstall.sh -g

The installer detects the installed Websense components and lists them.

8.	Select Filtering Service and Network Agent (if installed), and then click Next.

9.	Follow the prompts to remove the components.

10.	Restart the machine, if prompted.

11.	Start the Web Security Linux installer again.

12.	On the Add Components screen, select Install additional components on this machine, and then click Next.

13.	On the Custom Installation screen, select the following components and then click Next:

Filtering Service

Network Agent

Filtering Plug-in

14.	On the Integration Option screen, select Integrated with another application or device.

15.	On the Select Integration screen, select Squid Web Proxy Cache.

16.	On the Squid Configuration screen, enter paths to the squid.conf and squid executable files, and then click Next.

The installation program will verify the path to squid.conf. A default path is automatically entered. Enter a different path if necessary or click Browse to navigate to the location. This path must be verified for the installation to continue. (Note: the path must include the file name.)

Additionally, you must provide the path to the Squid executable so the installation program can shut it down to continue the installation.

 

Note  The installer will automatically start Squid Web Proxy Cache once installation is complete. Verify it is running after installation is complete (Step 18 below).

17.	Follow the remaining installer prompts to complete the installation.

18.	Start Squid Web Proxy Cache if necessary.

To install the filtering plug-in (i.e., Squid plug-in), the installer stops Squid Web Proxy Cache. At the end of the installation process, the installer automatically starts Squid Web Proxy Cache. In some cases, the installer is unable to start Squid Web Proxy Cache and it must be manually started:

a.	Verify Squid Web Proxy Cache is running, for example, by using the command ps -ef | grep squid.

b.	If it is not running, start it.

See Squid documentation or support resources for the start command appropriate to your installation of Squid Web Proxy Cache.

19.	If you stopped a firewall, start it again.

20.	To make sure that all Websense components are running, navigate to the Websense installation directory (/opt/Websense, by default) and enter the following command:

./WebsenseAdmin status

 

Warning  Do NOT use the kill -9 command to stop Websense services. This procedure may corrupt the services.

21.	If you stopped your antivirus software, start it again.

22.	Provide Network Agent with the IP address for all Squid Proxy Cache machines. See Identifying the Proxy Cache and the HTTP port for Network Agent.

Squid Web Proxy Cache Integration > Converting Web Filter or Web Security to be integrated with Squid Web Proxy Cache