Installing and Deploying Websense Endpoint Clients

Deployment and Installation Center | Web and Data Security Solutions | Version 7.7.x

Applies to:

In this topic

Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.7.x

Data Security, v7.7.x

When to use Web Endpoint

When to use the Remote Filtering Client

When to use Data Endpoint

Endpoint solution system requirements

Websense, Inc., offers solutions for securing client workstations, laptops, and other endpoint devices from data loss and inbound Web threats when the devices are outside the corporate network.

The solutions are endpoint client software applications that run on the endpoint devices to block, monitor, and log transactions (like Internet requests) according to the organization's security and acceptable use policies. Administrators can create policies that provide full visibility into inbound and outbound traffic, but that don't restrict use of the device.

For Web security, the endpoint clients are:

Remote Filtering Client (see When to use the Remote Filtering Client)

Websense Web Endpoint (see When to use Web Endpoint)

And for data loss prevention (DLP):

Websense Data Endpoint (see When to use Data Endpoint)

Websense endpoint solutions include both server and client components. See System requirements for this version for information about the hardware requirements and supported operating systems for endpoint components.

When to use the Remote Filtering Client

Remote filtering software can be used with any Web Security solution to manage Internet activity for endpoint devices (client machines) outside the network.

Remote filtering software has 2 components: Remote Filtering Client and Remote Filtering Server.

Remote Filtering Client is installed on each endpoint device (client machine).


	Warning Remote Filtering Client cannot be installed on machines running Remote Filtering Server. That combination eventually causes filtering to fail.


	Important In Web Security Gateway Anywhere deployments, Remote Filtering Client cannot be used on machines filtered by the hybrid service.

Remote Filtering Server resides inside the network, and acts as a proxy to Websense Filtering Service.

Internet requests from clients using remote filtering software are processed as follows:

Remote Filtering Client routes Internet requests to Remote Filtering Server.

Remote Filtering Server forward the requests to Websense Filtering Service.

Filtering Service determines whether to block or permit the request.

Filtering Service sends the block or permit response to Remote Filtering Server.

Remote Filtering Server responds to Remote Filtering Client.

All communication between the client and server is authenticated and encrypted.

By default, the remote filtering software manages all HTTP, HTTPS, and FTP requests from machines where Remote Filtering Client is installed.

Remote filtering software can apply a user, group, or OU policy to a request, or the Default policy. (IP-address-based policies, applied to the computer or network, cannot be applied to machines when they are outside the network.)

When to use Web Endpoint

In Websense Web Security Gateway Anywhere deployments, Websense Web Endpoint can be used to secure client machines whose Internet activity is managed by the hybrid service. Web Endpoint provides transparent authentication and enforces the use of hybrid Web security policies.

Web Endpoint routes Internet requests to the hybrid service so that the appropriate Web security policy can be applied.

Web Endpoint has 2 operation modes:

In Web scanning and filtering mode, the endpoint client redirects HTTP and HTTPS traffic to the hybrid service with an encrypted token that identifies the user, enabling the correct policy to be applied and reporting data to be correctly logged. No password or other security information is included.

The endpoint client can be used with both full-tunnel and split-tunnel VPNs, ensuring that all Web traffic is scanned and filtered.

In proxy manipulation mode, for supported browsers, the endpoint client manipulates proxy settings in real time. For example, if the endpoint detects it is at a hotspot, but the user has not finished registration, it removes its proxy settings until the gateway has successfully opened.

You can enable Web Endpoint for some or all machines filtered by the hybrid service.

When to use Data Endpoint

Data Endpoint is designed for organizations concerned about data loss originated at the endpoint, whether malicious or inadvertent. For example, if you want to prevent employees from taking sensitive data home on their laptops and printing it, posting to the Web, copy and pasting it, etc., you would benefit from this endpoint solution.

Websense Data Endpoint is a comprehensive, secure and easy-to-use endpoint data loss prevention (DLP) solution. It monitors real-time traffic and applies customized DLP policies over application and storage interfaces. You can also apply discovery policies to endpoints to determine what sensitive data they hold.

You can monitor user activity inside endpoint applications, such as the cut, copy, paste, print, and print screen operations. You can also monitor endpoint Web activities and know when users are copying data to external drives and endpoint devices.

Endpoint solution system requirements

System requirements for this version provides the operating system requirements for endpoint server and client components.

Find Web security requirements under "Web Security and Web Security Gateway," in the "Software deployments," "Client OS," and "Web endpoint" sections.

Find data security requirements under "Data Security," in the "Operating system" and "Data Endpoint hardware requirements" sections.