Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page
Deploying Web Security for a distributed enterprise > Web Security filtering remote sites
Web Security filtering remote sites
Deployment and Installation Center | Web Security Solutions | Version 7.7.x
 
Applies to:                                         
In this topic                                       
*
Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.7.x
*
Websense Web Security or Web Security Gateway
*
Websense Web Security Gateway Anywhere
Websense Web Security or Web Security Gateway
In centralized organizations that route all outbound Internet requests through a single large Internet connection, the servers running Websense software are normally placed physically close to the firewall, proxy server, or network appliance.
Remote sites in a distributed enterprise have a direct local connection to the Internet, and no centralized point of control.
Rather than deploying Websense software at each remote-site firewall, you can deploy Websense components in a geographically central location. Since Websense software is accessible from the Internet, the Websense components should be protected by a firewall that allows URL lookup requests to pass through.
Filtering is performed by the Websense components at the main site. Remote sites must be equipped with a firewall that can be integrated with Websense software (configured to check with Websense software to permit or block Web requests), or an instance of Websense Network Agent must be deployed at the remote site.
Websense, Inc., has tested this configuration in cooperation with several of its integration partners. A full list of supported integration products can be found at:
www.websense.com/global/en/Partners/TAPartners/SecurityEcosystem/
Centralized filtering Provides distributed enterprises with Websense filtering for each remote site. It also:
*
Eliminates the need for a separate Websense software installation at each location.
*
Provides uniform filtering policies at each remote site.
*
Eliminates the cost of additional hardware to provide filtering servers at each remote site.
*
Allows the enterprise to centrally configure, administer, and maintain a limited number of Websense filtering machines.
The following illustration shows the basic sequence of events involved in filtering a client machine at a remote site.
1.
A user requests a Web page.
2.
The request is directed through the local firewall to Web Security software at the main site via the Internet.
3.
Web Security software responds via the Internet, either permitting or blocking the request.
4.
The user is given access to the site or sees a block page.
In the case of multiple remote sites, each remote site communicates with Websense components at the main site in the same manner shown above.
Off-site user machines (like laptops used by travelers) may be filtered using Websense remote filtering software. See Deploying Remote Filtering Server and Client.
Websense Web Security Gateway Anywhere
In a Web Security Gateway Anywhere deployment, remote sites can be filtered either by the hybrid service or by Websense security solutions installed at the main site.
Using the hybrid service may address network latency issues, because remote sites and off-site users are filtered by the nearest Websense hybrid service cluster.
The following illustration shows how remote-site filtering works via the hybrid service. A user's request for a Web page is directed to the hybrid service, which permits or blocks the request based on the applicable policy.
Policy settings are defined at the main site and uploaded automatically to the hybrid service at preset intervals. User information, for user- or group-based filtering, is also uploaded.
Log data for reporting is downloaded from the hybrid service to the main site automatically and is incorporated into the Websense Log Database (at the main site). Thus, reports can cover users at all offices.
Off-site users may be filtered by the hybrid service, or using Websense remove filtering software. See Deploying Remote Filtering Server and Client.

Go to the table of contents Go to the previous page Go to the next page
Deploying Web Security for a distributed enterprise > Web Security filtering remote sites
Copyright 2016 Forcepoint LLC. All rights reserved.