Microsoft ISA/TMG agent

Deployment and Installation Center | Data Security Solutions | Version 7.7.x

Applies to:

In this topic:

Data Security, v7.7.x

Operating system support

Required ports

Installing the ISA/TMG agent

The ISA/TMG agent receives all Web connections from a Microsoft ISA Server or Forefront TMG network and forwards them to the Data Security policy engine. It then receives the analyzed information back from the policy engine and forwards it to the recipients on the Web.

The ISA/TMG agent supports the permit and block actions, and it receives authentication information from the client on its way to the proxy to identify users. It supports both HTTPS and HTTP traffic.

The ISA/TMG agent requires 1 GB free disk space on the ISA Server machine. The installer will not allow you to install ISA/TMG agent if available space is less.

If you are using the ISA agent on an ISA array, be sure to install it on every member of the array; otherwise the configuration will be out of sync and ISA may become non-functional.

Operating system support

Microsoft ISA 2004 and 2006 are supported on the following operating system environments:

Windows Server 2003 (32-bit)

Standard or Enterprise

Standard or Enterprise R2

Standard or Enterprise R2 SP2

Windows Server 2003 (64-bit)

Standard or Enterprise R2

Forefront TMG is also supported on Windows Server 2008 R2 platforms (64-bit).

Required ports

The following ports must be kept open for the ISA/TMG agent:


Outbound
To	Port	Purpose
Data Security Management Server	443	Secure communications
Data Security Management Server	17500-17515*	Consecutive ports that allow communication with Websense agents and machines.
Data Security Server	17500-17515*	Consecutive ports that allow communication with Websense agents and machines.
Internet gateway	80	For HTTP connections
* This range is necessary for load balancing.
Inbound
None

Installing the ISA/TMG agent

For best practice, do not install the ISA agent on the same machine as a supplemental Data Security Server in a production environment.

If your ISA or TMG Server machine has a 32-bit operating system, download the Websense installer (WebsenseTRITON77Setup.exe) from mywebsense.com.

On 64-bit machines, download WebsenseDataSecurityAgents770-x64.msi instead.

Launch the installer.

Accept the license agreement.

Select Custom.

Click the Install link for Data Security.

On the Welcome screen, click Next to begin the installation.

In the Destination Folder screen, specify the folder into which to install the agent.

The default destination is C:\Program Files or Program Files (x86)\Websense\Data Security. If you have a larger drive, it is used instead. Large removable drives may be detected by the system as a local drive and used as the default. Do not install on removable media.


	Important The full installation path must use only ASCII characters. Do not use extended ASCII or double-byte characters.


	Note Regardless of what drive you specify, you must have a minimum of 0.5 GB of free disk space on the C: drive. This is because Data Security installs components into the Windows "inetpub" folder on C:.

On the Select Components screen, select ISA or TMG agent and then Entire feature will be installed on local hard drive.

In the Server Access screen, select the IP address to identify this machine to other Websense components.

10.

In the Register with the Data Security Server screen specify the path and log on credentials for the Data Security server to which this agent will connect. This could be the TRITON management server or a secondary Data Security server.

FQDN is the fully-qualified domain name of a machine.

11.

In the Installation Confirmation screen, if all the information entered is correct, click the Install button to begin installation.

Installation may seem to take a long time. Unless a specific error or failure message appears, allow the installer to proceed.

If the following message appears, click Yes to continue the installation:

Data Security needs port 80 free.
In order to proceed with this installation, DSS will free up this port.
Click Yes to proceed OR click No to preserve your settings.

Clicking No cancels the installation.

A similar message for port 443 may appear. Click Yes to continue or No to cancel the installation.

12.

Once installation is complete, the Installation Complete screen appears to inform you that your installation is complete. Click Finish.

13.

Once installation is complete, the Installation Successful screen appears to inform you that your installation is complete.

To ensure that the ISA/TMG agent is properly installed and enabled in ISA/TMG, navigate to Web Filters in the ISA/TMG Management Console.