Integrating Web Security with Cisco

Deployment and Installation Center | Web Security Solutions | Version 7.7.x

Websense Web Filter and Web Security can be integrated with Cisco® Adaptive Security Appliance (ASA), Cisco PIX® Firewall, Cisco IOS routers, and Cisco Content Engine.

See System requirements for this version for a list of Cisco products supported for integration with Websense Web Filter or Web Security.

Integrating with a Cisco product involves the following components:

Websense Filtering Service works with the Cisco product and Network Agent to respond to Internet requests.

For redundancy, two or more instances of Filtering Service may be used. Only one instance (the primary server) is active at any given time. URL look-up requests are be sent only to the primary server.

Websense Network Agent manages Internet protocols that are not managed by your integrated Cisco product. Network Agent can also provide information for reports on bandwidth and block Internet requests based on bandwidth consumption.

If Network Agent is installed, you must define the IP addresses of all proxy servers through which computers route their Internet requests. See Network Configuration in the TRITON - Web Security Help for instructions.

If HTTP(S) or FTP authentication is enabled in the Cisco product, Websense User Service must be installed in the same domain or root context as authenticated users to get correct user information and provide it to Filtering Service for accurate user-based filtering.

If you are using a Websense transparent identification agent or manual authentication, this configuration is not necessary.

To enable the integration, direct Internet requests through your Cisco product, and configure it for use with Websense software.

Getting started with a Cisco integration provides general introductory information.

Configuring a Cisco Security Appliance discusses Cisco PIX Firewall and Adaptive Security Appliance (ASA).

Configuring a Cisco IOS Router discusses Cisco IOS router.

Configuring a Cisco Content Engine discusses Cisco Content Engine.

Cisco configuration command conventions

The following conventions are used for commands in this document:

Angle brackets (< >) indicate variables that must be replaced by a value in the command.

Square brackets ([ ]) indicate an optional element or value.

Braces ({ }) indicate a required choice.

A forward slash (/) separates each value within curly braces.

Vertical bars ( | ) separate alternative, mutually exclusive elements