Installing supplemental Data Security servers

Deployment and Installation Center | Data Security Solutions | Version 7.7.x

Applies to:

In this topic:

Data Security, v7.7.x

Operating system support

Hardware requirements

Software requirements

Required ports

Installation steps

Medium to large enterprises may require more than one Data Security server to perform content analysis efficiently. Having multiple Data Security servers allows your organization to grow, improves performance, and allows for custom load balancing.

Supplemental Data Security server installations include:

A policy engine

SMTP agent (Windows Server 2003 installations only)

Secondary fingerprint repository (the primary is on the management server)

Endpoint server

Optical Character Recognition (OCR) server

Crawler


	Notes: In production environments, do not install a Data Security server on a Microsoft Exchange, ISA, or print server. These systems require abundant resources.

Operating system support

Supplemental Data Security servers must be running on one of the following operating system environments:

Windows Server 2003 (32-bit) Standard or Enterprise R2 SP2

Windows Server 2008 (64-bit) Standard or Enterprise R2

Hardware requirements

Supplemental Data Security servers must meet the following hardware requirements.


Server hardware	Minimum requirements	Recommended
CPU	2 Dual-core Intel Xeon processors (2.0 GHz) or AMD equivalent	2 Quad-core Intel Xeon processors (2.0 GHz) or AMD equivalent
Memory	4 GB	8 GB
Hard drives	Four 72 GB	Four 146 GB
Disk space	72 GB	292 GB
Free space	70 GB	70 GB
Hardware RAID	1	1 + 0
NICs	1	2

Software requirements

The following requirements apply to all Data Security servers:

For optimized performance, verify that the operating system's file cluster is set to 4096B. For more information, see the Websense knowledge article: "File System Performance Optimization."

Windows installation requirements:

Set the partition to 1 NTFS Partition. For more information, see the Websense knowledge-base article: "File System Performance Optimization."

Regional Settings: should be set according to the primary location. If necessary, add supplemental language support and adjust the default language for non-Unicode programs.

Configure the network connection to have a static IP address.

The Data Security Management Server host name must not include an underscore sign. Internet Explorer does not support such URLs.

Short Directory Names and Short File Names must be enabled. (See http://support.microsoft.com/kb/121007.)

Create a local administrator to be used as a service account. If your deployment includes more than one Data Security Server, use a domain account (preferred), or the use same local user name and password on each machine.

Be sure to set the system time accurately on the TRITON management server.

Required ports

The following ports must be kept open for supplemental Data Security servers:


Outbound
To	Port	Purpose
Data Security Management Server	17443	Incidents
Data Security Management Server	17500-17515*	Consecutive ports that allow communication with Websense agents and machines.
* This range is necessary for load balancing.
Inbound
From	Port	Purpose
Data Security Management Server	8892	Syslog
Data Security Management Server	139	File sharing
Data Security Management Server	445	File sharing
Data Security Management Server	17500-17515*	Consecutive ports that allow communication with Websense agents and machines.
* This range is necessary for load balancing.

Installation steps

Download the Websense installer (WebsenseTRITON77Setup.exe) from mywebsense.com.

Launch the installer on the machine where you want to install the supplemental server.

Accept the license agreement.

Select Custom.

Click the Install link for Data Security.

On the Welcome screen, click Next to begin the installation.

In the Destination Folder screen, specify the folder into which to install the server software.

The default destination is C:\Program Files or Program Files (x86)\Websense\Data Security. If you have a larger drive, it is used instead. Large removable drives may be detected by the system as a local drive and used as the default. Do not install on removable media.


	Important The full installation path must use only ASCII characters. Do not use extended ASCII or double-byte characters.


	Note Regardless of what drive you specify, you must have a minimum of 0.5 GB of free disk space on the C: drive. This is because Data Security installs components into the Windows "inetpub" folder on C:.

On the Select Components screen, select Data Security Server.

The Fingerprinting Database screen appears. To choose a location other than the default shown, use the Browse button.

10.

The Virtual SMTP Server screen appears. This is because an SMTP agent is included with supplemental Data Security server installations.

In the Select Virtual Server list, select the IIS virtual SMTP server that should be bound to the SMTP agent. The SMTP agent will monitor traffic that goes through this virtual server. If there multiple SMTP servers listed, the SMTP agent should typically be bound to Inbound.

(See Preparing a machine for the SMTP agent for instructions on installing Microsoft IIS from Control Panel and configuring inbound and outbound SMTP Virtual Servers.)

11.

In the Server Access screen, select the IP address to identify this machine to other Websense components.

12.

In the Register with the Data Security Server screen specify the location and log on credentials for the TRITON management server.

FQDN is the fully-qualified domain name of a machine. The credentials should be for a TRITON - Data Security administrator with System Modules permissions.

13.

In the Local Administrator screen, supply a user name and password as instructed on-screen. The server/host name portion of the user name cannot exceed 15 characters. If you are installing Data Security v7.7.0, this password cannot exceed 19 characters. If you are installing version 7.7.2 or beyond, password length doesn't matter.

14.

If you installed a Lotus Notes client on this machine so you can perform fingerprinting and discovery on a Lotus Domino server, the Lotus Domino Connections screen appears.

If you plan to perform fingerprinting or discovery on your Domino server, complete the information on this page.

Important

Before you complete the information on this screen, make sure that you:

Create at least one user account with administrator privileges for the Domino environment. (Read permissions are not sufficient.)

Be sure that the Lotus Notes installation is done for "Anyone who uses this computer."

Connect to the Lotus Domino server from the Lotus Notes client.

On the Lotus Domino Connections page, select the check box labeled Use this machine to scan Lotus Domino servers.

In the User ID file field, browse to one of the authorized administrator users, then navigate to the user's user.id file.


	Note Select a user that has permission to access all folders and Notes Storage Format (NSF) files of interest, otherwise certain items may not be scanned.

In the Password field, enter the password for the authorized administrator user.

15.

In the Installation Confirmation screen, if all the information entered is correct, click the Install button to begin installation.

Installation may seem to take a long time. Unless a specific error or failure message appears, allow the installer to proceed.

If the following message appears, click Yes to continue the installation:

Data Security needs port 80 free.
In order to proceed with this installation, DSS will free up this port.
Click Yes to proceed OR click No to preserve your settings.

Clicking No cancels the installation.

A similar message for port 443 may appear. Click Yes to continue or No to cancel the installation.

16.

Once installation is complete, the Installation Complete screen appears to inform you that your installation is complete. Click Finish.

17.

Log onto TRITON - Data Security and click Deploy to fully connect the supplemental server with the management server.