System requirements for this version

Deployment and Installation Center | Web, Data, and Email Security Solutions | Version 7.7.x

Applies to:

In this topic

Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.7.x

Data Security, v7.7.x

Email Security Gateway and Gateway Anywhere, v7.7.x

TRITON management server requirements

Reporting database requirements

Requirements for Web Security solutions

Email Security Gateway requirements

Data Security requirements

TRITON management server requirements

The machine that hosts core management components for all Websense security solutions is referred to as the TRITON management server. This machine hosts the TRITON Unified Security Center (TRITON console), which includes:

The infrastructure uniting all management components

A settings database, holding administrator account information and other data shared by all management components

One or more management modules, used to access configuration, policy management, and reporting tools for a Websense security solution. Available modules include:

TRITON - Web Security

TRITON - Data Security

TRITON - Email Security

Additional components may also reside on the TRITON management server.

Typically, the TRITON management server is a Windows Server 2008 R2 machine. If only the Web Security management module (TRITON - Web Security) is used, the TRITON management server can also be hosted on:

Windows Server 2008 32-bit

A V-Series appliance (recommended for evaluations only)


	Windows Server 2008 R2 (Standard and Enterprise)	Windows Server 2008 (Standard and Enterprise) 32-bit	V-Series Appliance
Data Security
Web Security
Email Security

Hardware requirements

The following are minimum hardware recommendations for a TRITON management server. The requirements are different depending on whether Microsoft SQL Server 2008 R2 Express is installed on the management server or a remote installation of SQL Server is used.

With local reporting database


TRITON console modules	Minimum requirements
TRITON - Web Security	4 CPU cores (2.5 GHz), 4 GB RAM, 100 GB Disk Space
TRITON - Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
TRITON - Web Security and Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
TRITON - Email Security and Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
All TRITON modules (Web Security, Data Security, and Email Security)	8 CPU cores (2.5 GHz), 16 GB RAM, 240 GB Disk Space

Notes:

Data Security allows for either local or remote installation of the forensics repository. If the repository is hosted remotely, deduct 90GB from the Data Security disk space requirements.

It is strongly recommended you allocate more than the minimum listed disk space to allow for scaling with use.

If you choose to install the Websense product on a drive other than the main Windows drive (typically C drive), then you must have at least 2GB free on the main Windows drive to accommodate for files to be extracted to this drive.

With remote reporting database


TRITON console modules	Minimum requirements
TRITON - Web Security	4 CPU cores (2.5 GHz), 4 GB RAM, 7 GB Disk Space
TRITON - Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 140 GB Disk Space
TRITON - Web Security and Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 146 GB Disk Space
TRITON - Email Security and Data Security	4 CPU cores (2.5 GHz), 8 GB RAM, 146 GB Disk Space
TRITON - Web Security, Data Security, and Email Security	8 CPU cores (2.5 GHz), 16 GB RAM, 146 GB Disk Space

Note:

It is strongly recommended you have more disk space than the minimum specified above to allow for scaling with use.

TRITON console browser support

Use any of the following Web browsers to access the TRITON Unified Security Center.


Browser	Versions
Microsoft Internet Explorer	8* and 9
Mozilla Firefox	4.x through 13.x
Google Chrome	13 and later
* For Internet Explorer 8 only, do not use compatibility mode.

Virtualization systems

All TRITON Unified Security Center components are supported on these virtualization systems:

Hyper-V over Windows Server 2008 R2

VMware over Windows Server 2008 R2

Note that this support is for the TRITON console only. Other components (used for filtering, analysis, reporting, or enforcement) may have additional requirements that are not supported by these virtualization environments.

Directory services for administrator authentication

If you allow users to log on to the TRITON console using their network accounts, the following directory services can be used to authenticate administrator logons:

Microsoft Active Directory

Novell eDirectory

Lotus Notes

Oracle Directory Server

Generic LDAP directories

Reporting database requirements

For all Websense security solutions, Microsoft SQL Server is used to host the reporting database.

The TRITON Unified Installer can be used to install Microsoft SQL Server 2008 R2 Express on the TRITON management server machine.

This configuration is best for evaluations and small deployments.

Only use the version of SQL Server 2008 R2 Express included in the Websense software installer.

Larger organizations are advised to use a Standard or Enterprise version of Microsoft SQL Server. Note that these SQL Server versions cannot reside on the TRITON management server.


Supported Database Engines	Data Security	Web Security	Email Security
SQL Server 2005 SP4*
SQL Server 2008**
SQL Server 2008 R2 Express
SQL Server 2008 R2***
All editions except Web, Express, and Compact; 32- and 64-bit, but not IA64. All editions except Web, Express, and Compact; all service packs, 32- and 64-bit, but not IA64. **All editions except Web and Compact; all service packs, 32- and 64-bit, but not IA64. Note: SQL Server clustering may be used with all supported standard and enterprise versions of Microsoft SQL Server for failover or high availability.

Requirements for Web Security solutions

Software components

Do not install Web Security components on a domain controller machine.

Most Web Security components can run on any of the following operating systems:

Windows Server 2008 (32-bit) and 2008 R2

Red Hat Enterprise Linux 5 and 6

The following components are Windows-only (not supported on Linux):

Websense Content Gateway is Linux only, supported on:

Red Hat Enterprise Linux 5 and 6

The corresponding CentOS version (CentOS version numbers have a one-to-one correspondence with Red Hat Enterprise Linux version numbers)

See System requirements for Websense Content Gateway for more information.

Components not available on Websense appliances

The following Web Security components do not run on Websense appliances. If used, they must be installed off-appliance.

Remote Filtering Server

All transparent identification agents:

The logon application (LogonApp.exe), Remote Filtering Client, and Web Endpoint are supported on the following operating systems:

Windows XP with Service Pack 2 or higher (32-bit and 64-bit)

Windows Vista with Service Pack 1 or higher (32-bit and 64-bit)

Windows 7 (32-bit and 64-bit)

Windows Server 2003

Windows Server 2008 and 2008 R2

In addition, for Web Endpoint, the following Web browsers fully support the endpoint client on both 32-bit and 64-bit operating systems:

Internet Explorer 7, 8, and 9

Firefox 3.x, 4.x, 5, 6, and 7

Full support means that the browser supports all installation methods, and both Web scanning and filtering and proxy manipulation. All Web browsers support GPO deployment, and Web scanning and filtering with the endpoint.

Integrations

Websense Web Security may be integrated with the following products.


Product	Versions
Microsoft Forefront TMG	2008 or later
Cisco PIX Firewall	v5.3 or later
Cisco ASA	PIX v7.0 or later
Cisco Content Engine	ACNS v5.5 or 5.6
Cisco Router	IOS v12.3 or later
Check Point	Firewall-1 NGX, NGX 65, UTM-1 (VPN-1) Edge
Citrix XenApp	5.0 or 6.0

Directory Services


Directory	Versions
Microsoft Active Directory (native or mixed mode)	2008 R2, 2008, 2003
Novell eDirectory	v8.5.1 or later
Oracle Directory Services Enterprise Edition	11g
Sun Java System Directory	7, 6.2

RADIUS

Most standard RADIUS servers are supported. The following have been tested:

Microsoft IAS

Merit AAA

Livingston (Lucent) 2.x

Cistron RADIUS server

NMAS authentication

Email Security Gateway requirements

Email Security Gateway is exclusively appliance-based (V10000 G2 or V5000 G2), except for the following components:

TRITON - Email Security, which runs on the TRITON management server (see TRITON management server requirements).

Email Security Log Server, which runs on a Windows Server 2008 or 2008 R2 machine.

Data Security requirements

Operating system


Data Security Component	Supported Operating Systems	32-bit	64-bit
Management server	Windows Server 2008 Standard or Enterprise, R2
Supplemental servers	Windows Server 2003 Standard or Enterprise, R2 SP2
Supplemental servers	Windows Server 2008 Standard or Enterprise, R2
Crawler agent	Windows Server 2003 Standard or Enterprise, R2 SP2
Crawler agent	Windows Server 2008 Standard or Enterprise, R2
SMTP Agent	Windows Server 2003 Standard or Enterprise, R2
SMTP Agent	Windows Server 2003 Standard or Enterprise, R2 SP2
ISA Agent (ISA Server 2004/2006)	Windows Server 2003 Standard or Enterprise
	Windows Server 2003 Standard or Enterprise, R2
	Windows Server 2003 Standard or Enterprise, R2 SP2
TMG Agent (Forefront TMG) 2008	Windows Server 2008 R2
Printer agent	Windows Server 2003 Standard or Enterprise
	Windows Server 2003 Standard or Enterprise, R2
	Windows Server 2003 Standard or Enterprise, R2 SP2
Protector***	CentOS 5.5, CentOS 5.7**
Mobile Agent	CentOS 5.5, CentOS 5.7**
Data Endpoint client	Windows 7
	Windows 8. Excluding Windows Store apps (v7.7.3). Including Windows Store apps (v7.7.3.1629 and beyond).
	Windows Vista
	Windows XP
	Windows Server 2003
	Windows Server 2008
	Windows Server 2012. Excluding Windows Store apps (v7.7.3). Including Windows Store apps (v7.7.3.1629 and beyond).
	Mac OS X 10.6.7 - 10.7.4 (v7.7.2). To v10.8 (v7.7.3 and beyond).
	Red Hat Enterprise Linux/CentOS 4.8 with stock kernel 2.6.9-89
	Red Hat Enterprise Linux/CentOS 5.1 with stock kernel 2.6.18-53****
	Red Hat Enterprise Linux/CentOS 5.5 with stock kernel 2.6.18-194****
Note: by default, Windows Server 2003 or XP support only 3 agents per client. If your endpoint clients will be running multiple agents—for example the endpoint agent, an antivirus agent, and an antispam agent—they should be updated to Windows XP SP3 or Windows Server 2003 SP2. In addition, you must modify their registry entries. Requires .NET 2.0 installed on system. This operating system is installed as part of the Protector "soft appliance" installation. Protector is supported on virtualization systems in the Mail Transport Agent (MTA) mode and/or as an ICAP server with remote analysis (no local analysis). Other modes of deployment are not certified. **The Linux endpoint requires FUSE support to enable USB detection. If you are running CentOS 5.1, FUSE support is configured upon installation. If you are running CentOS 5.5, FUSE support is built into the kernel. If you have upgraded from CentOS 5.1 to CentOS 5.5, you may not have FUSE support in your running kernel. If this is the case, please install the relevant FUSE packages before running the endpoint installer.

Data Security Server hardware requirements


Server hardware	Minimum requirements	Recommended
CPU	2 Dual-core Intel Xeon processors (2.0 GHz) or AMD equivalent	2 Quad-core Intel Xeon processors (2.0 GHz) or AMD equivalent
Memory	4 GB	8 GB
Hard drives	Four 72 GB	Four 146 GB
Disk space	72 GB	292 GB
Free space	70 GB	70 GB
Hardware RAID	1	1 + 0
NICs	1	2

Data Security Server software requirements

The following requirements apply to all Data Security servers:

For optimized performance, verify that the operating system's file cluster is set to 4096B. For more information, see the Websense knowledge article: "File System Performance Optimization."

Windows installation requirements:

Set the partition to 1 NTFS Partition. For more information, see the Websense knowledge-base article: "File System Performance Optimization."

Regional Settings: should be set according to the primary location. If necessary, add supplemental language support and adjust the default language for non-Unicode programs.

Configure the network connection to have a static IP address.

The Data Security Management Server host name must not include an underscore sign. Internet Explorer does not support such URLs.

Short Directory Names and Short File Names must be enabled. (See http://support.microsoft.com/kb/121007.)

Create a local administrator to be used as a service account. If your deployment includes more than one Data Security Server, use a domain account (preferred), or the use same local user name and password on each machine.

Be sure to set the system time accurately on the TRITON management server.

Protector hardware requirements


Protector	Minimum requirements	Recommended
CPU	2 Dual-core Intel Xeon processors (2.0 GHz) or AMD equivalent	2 Quad-core Intel Xeon processors (2.0 GHz) or AMD equivalent
Memory	2 GB	4 GB
Hard drives	2 - 72 GB	4 - 146 GB
Disk space	70 GB	292 GB
Hardware RAID	none	1 + 0
NICs	2 (monitoring), 3 (inline)	2 (monitoring), 3 (inline)

The following Silicom network cards are supported by the Data Security appliance. NICs SKUs are:

PEG4BPi - Intel-based Quad-Port Copper Gigabit Ethernet PCI-Express Bypass Server Adapter

PEG2BPi - Intel-based Dual-Port Copper Gigabit Ethernet PCI-Express Bypass Server Adapter

PXG4BPi - Intel-based Quad-Port Copper Gigabit Ethernet PCI-X Bypass Server Adapter

PXG2BPi - Intel-based Dual-Port Copper Gigabit Ethernet PCI-X Bypass Server Adapter

PEG2Fi - Intel-based Dual-Port Fiber (SX) Gigabit Ethernet PCI-Express Server Adapter

PXG2Fi - Intel-based Dual-Port Fiber (SX) Gigabit Ethernet PCI-X Server Adapter


	Note Websense does not support bypass products with -SD drivers. If you are ordering a NIC based on Intel chips 82546 or 82571, be sure to order them in non-SD mode.

Mobile Agent hardware requirements


Mobile Agent	Minimum requirements	Recommended
CPU	4 core processors (for example, Single quad or two dual core processors), 2.0 GHz Intel Xeon or AMD equivalents	4 core processors (for example, Single quad or two dual core processors), 2.0 GHz Intel Xeon or AMD equivalents
Memory	8 GB	8 GB
Hard drives	2 - 72 GB	4 - 146 GB
Disk space	70 GB	292 GB
Hardware RAID	none	1 + 0
NICs	2	2

Data Endpoint hardware requirements

Windows

Pentium 4 (1.8 GHz or above)

At least 512 MB RAM on Windows XP or 1GB RAM on Windows Vista, Windows 7, Windows Server 2003, or Windows Server 2008

At least 200 MB free hard disk space

Linux

At least 1 GB RAM

1 GB free hard disk space (not including contained files and temporary buffers; see the TRITON - Data Security Help for information about contained files and allocating enough disk storage for them)