Using the Filtering option to install Web Security components on Linux

Deployment and Installation Center | Web Security Solutions | Version 7.8.x

Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.8.x

It is assumed you have already downloaded and started the Web Security Linux installer. If not, see Starting the Web Security Linux installer for instructions.

If no Web Security components have been installed on this machine:

On the Introduction screen, click Next.

On the Subscription Agreement screen, choose to accept the terms of the agreement and then click Next.

On the Installation Type screen, select Filtering and then click Next.

If there are Web Security components already installed on this machine, the Add Components screen appears.

Select Install additional components on this machine and then click Next.

If there are already components on this machine, you can only perform a custom installation.

On the Integration Option screen, indicate whether this is a stand-alone or integrated installation, and then click Next.

See Understanding Web Security standalone and integrated modes for more information.

If you chose Integrated with another application or device (on the Integration Option screen), the Select Integration screen appears. Select your integration, then click Next.

If the Multiple Network Cards screen appears, select the IP address of the NIC that Web Security components should use for communication. This NIC will also be used to send block pages when a user requests blocked content.


	Important The installer cannot determine whether IP addresses are valid. It simply lists the currently configured address of each detected NIC. Be sure to verify that the IP address you select is valid in your network. An incorrect IP address will prevent Websense software on this machine from functioning properly.

On the Network Card Selection screen, select the NIC that Network Agent should use to communicate with other Web Security components, then click Next.

The list may include NICs that do not have an IP address are also listed. Do not choose a NIC without an IP address.

On the Filtering Feedback screen, select whether you want Websense software to send feedback to Websense, Inc. to improve accuracy. Then click Next.

On the Web Security Gateway Anywhere Components screen, select whether you want to install Websense Web Security Gateway Anywhere components on this machine. Then click Next.

Install Web Security Gateway Anywhere Components: Select this option to install these components and then check the box for the components (Sync Service and/or Directory Agent) you want to install.

Do not install Web Security Gateway Anywhere Components: Select this option if you do not have a Web Security Gateway Anywhere subscription, or if you want to install Sync Service and Directory Agent on another machine.

10.

On the Transparent User Identification screen, select whether to use Websense transparent identification agents to identify users and then click Next. This allows Websense software to apply user- or group-based policies without prompting users for logon information.

It is possible to run multiple instances of the same transparent identification agent, or certain combinations of different transparent identification agents, in a network. For information about multiple instances or combinations of transparent identification agents, see Combining transparent identification agents.

Use Logon Agent to identify users logging on to local machines: This option installs Websense Logon Agent on this machine. Logon Agent identifies users as they log onto Windows domains. Logon Agent is for use with Windows-based client machines on a network that uses Active Directory or Windows NT Directory.

To use Logon Agent, you must modify the Group Policy on domain controllers so it launches a logon application (LogonApp.exe) as part of the logon script. Client machines must use NTLM (v1 or v2) when authenticating users.

See the Using Logon Agent for Transparent User Identification technical paper.


	Note Do not use Logon Agent in a network that already includes eDirectory Agent.

Use eDirectory Agent to identify users logging on via Novell eDirectory Server: This option installs eDirectory Agent on this machine. Use this agent for a network using Novell eDirectory. eDirectory Agent queries the eDirectory Server at preset intervals to identify users currently logged on.


	Note Do not use eDirectory Agent in a network that already includes DC Agent or Logon Agent.

Do not install a transparent identification agent now: Select this option if

Websense software will be integrated with Content Gateway or a third-party product that provides user authentication.

You plan to install a transparent identification agent on another machine.

You do not want to apply policies to users or groups, and do not want user and group information to appear in reports.

You want users to be prompted for logon information when they open a browser to access the Internet.


	Note When integrated with Cisco products, Websense software cannot use Cisco Secure Access Control Server (ACS) for user authentication for more than 1 user domain. If there are multiple user domains, use a transparent identification agent instead.

11.

On the RADIUS Agent screen, select Install RADIUS Agent if you have remote users that are authenticated by a RADIUS server and then click Next. This allows Websense software to apply user- or group-based filtering policies on these remote users without prompting for logon information.

12.

On the Installation Directory screen, accept the default installation path (/opt/Websense), or click Choose to specify another path, and then click Next.

The installation path must be absolute (not relative).

The installer creates this directory if it does not exist.


	Important The full installation path must use only ASCII characters. Do not use extended ASCII or double-byte characters.

The installer compares the installation's system requirements with the machine's resources.

Insufficient disk space prompts an error message. The installer closes when you click OK.

Insufficient RAM prompts a warning message. The installation continues when you click OK. To ensure optimal performance, increase your memory to the recommended amount.

13.

On the Pre-Installation Summary screen, verify the information shown.

The summary shows the installation path and size, and the components to be installed.

14.

Click Next to start the installation. An Installing progress screen is displayed. Wait for the installation to complete.


	Note If you are using the command-line Linux installer, do not cancel (Ctrl-C) the installer after the Pre-Installation Summary screen, as it is installing components. In this case, allow the installation to complete and then uninstall the unwanted components.

15.

On the Installation Complete screen, click Done.