Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page
Installation Overview: TRITON Enterprise
Installation Overview: TRITON Enterprise
Deployment and Installation Center | Web, Data, and Email Security Solutions | Version 7.7.x
 
Applies to:                                         
In this topic                                       
*
Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.7.x
*
Data Security, v7.7.x
*
Email Security Gateway and Email Security Gateway Anywhere, v7.7.x
*
Deployment
*
Installation
*
Initial configuration
This section provides an overview of TRITON Enterprise deployment and installation activities.
Deployment
Websense TRITON Enterprise includes Web Security Gateway Anywhere, Data Security, and Email Security Gateway Anywhere.
*
Core Email Security Gateway Anywhere components can reside only on Websense appliances.
*
Web Security Gateway Anywhere may be deployed on Websense appliances, dedicated Windows and Linux servers, or a combination of both.
*
Data Security is located on Windows servers and elsewhere in the network.
*
The TRITON management interface for Web, Email, and Data Security, resides on a separate Windows server.
The following illustration is a high-level diagram of a basic V10000 G2-based deployment of TRITON Enterprise.
Remote office and off-site users
You can use the hybrid Web service to provide Web security for small remote offices. This is accomplished by designating a remote office as a hybrid filtered location. See Initial configuration for more information.
Either the hybrid service or Websense remote filtering software can provide Web filtering for off-site users (e.g., telecommuters or traveling personnel).
*
To use the hybrid service, a PAC file or Websense Web Endpoint is installed on the user's machine. This directs Web browsing to be filtered through the hybrid service according to policies in place.
*
To use remote filtering software, Remote Filtering Server is installed in your network and Remote Filtering Client is installed on user machines. See Deploying Remote Filtering Server and Client.
Hybrid services
If your subscription includes Web Security Gateway Anywhere and Email Security Gateway Anywhere:
*
The cloud-based (SaaS) hybrid Web service can be used to provide Internet security for remote offices and off-site users.
*
The cloud-based email hybrid service provides an extra layer of email scanning, stopping spam, virus, phishing, and other malware attacks before they reach your network and possibly reducing email bandwidth and storage requirements. You can also use the hybrid service to encrypt outbound email before delivery to its recipient.
Websense Appliances
Websense V-Series appliances may be used to deploy core Web and Email Security Gateway functionality.
*
The Content Gateway proxy on the appliance manages Web traffic.
*
Incoming email flows from the email hybrid service (if enabled) to the Websense appliance and to your mail server. The Websense appliance also provides the Personal Email Manager facility for end users to manage quarantined email.
Data Security Protector
The protector is a Linux-based soft-appliance, providing monitoring and blocking capabilities, preventing data loss and leaks of sensitive information. Using PreciseID technology, the protector can be configured to accurately monitor sensitive information-in-transit on any port.
Components that may not be installed on Websense appliances
TRITON management server
The TRITON management server is the Windows machine on which TRITON Unified Security Center (TRITON Console) is installed. The TRITON Console is the management and reporting interface for Websense Web, Data, and Email Security solutions.
Data Security Management Server and, typically, Crawler also reside on the TRITON management server machine to providing key Data Security functions, including Web and email DLP (data loss prevention) features.
Linking Service also usually resides on the management server.
Web Security and Email Security Log Server
A separate Windows machine hosts Web Security Log Server and Email Security Log Server. These services receive information about Web Security and Email Security activity and process it into their respective Log Database.
Optional Web Security components
Sync Service and transparent identification agents (DC Agent, Logon Agent, eDirectory Agent, and RADIUS Agent) may not reside on V-Series appliances.
Also, you can install additional instances of several Web Security filtering components on Windows or Linux servers, if needed.
Data Security Agents
Microsoft ISA/TMG agent, Printer agent, SMTP agent, Crawler, and Data Endpoint are installed on appropriate machines.
See Installing Data Security Solutions for installation instructions.
Data Endpoint (User Machine)
The Data Endpoint can be installed on any machine.
Third-party components
Microsoft SQL Server
Microsoft SQL Server, running on a Windows server in your network, is used to store Websense logging and reporting data. Quarantined email messages are also stored here.
When Websense components are installed, SQL Server must be installed and running, typically on its own machine as shown in the diagram above. SQL Server Express (installed using the TRITON Unified Installer) may be used in small deployments or evaluation environments.
Mail server
Your internal mail server.
Deployment details by TRITON Enterprise module
Web Security Gateway Anywhere
*
Web Security Deployment Recommendations
*
Deploying Web Security for a distributed enterprise
Data Security
*
Planning Data Security Deployment
*
Installing TRITON - Data Security
*
Installing Data Security Components
*
Integrating Data Security with Existing Infrastructure
*
Scaling Data Security
Email Security Gateway
*
Email Security Gateway Deployment
Installation
To install Websense TRITON Enterprise components:
1.
Make sure that Microsoft SQL Server is installed and running in your network. See Obtaining Microsoft SQL Server.
2.
Install and run the firstboot script on your V-Series appliances. See Installation steps for appliance-based solutions.
3.
Install Web and Email Security Log Server. See:
*
Installing Web Security components
If you plan to enable hybrid Web Security, note that Sync Service is typically installed with Web Security Log Server.
*
Installing Email Security components
4.
Install TRITON management and core Data Security components on a Windows Server 2008 R2 machine. See Creating a TRITON Management Server.
On the Installation Type screen, select all three modules (Web Security, Data Security, and Email Security) under TRITON Unified Security Center.
5.
Install additional components (such as Web Security transparent identification agents or Data Security agents) as needed. See:
*
Installing Web Security components
*
Installing Data Security components
*
Installing Email Security components
Initial configuration
General
*
Websense TRITON Enterprise default ports
*
Excluding Websense files from antivirus scans
*
Initial Configuration for All Websense Modules
Web Security Gateway Anywhere
*
Web Security initial configuration
*
Additional configuration for Web Security Gateway Anywhere
*
Content Gateway initial configuration
Data Security
*
Data Security initial configuration
Email Security
*
Email Security Gateway Deployment

Go to the table of contents Go to the previous page Go to the next page
Installation Overview: TRITON Enterprise
Copyright 2016 Forcepoint LLC. All rights reserved.