System requirements for this version

Deployment and Installation Center | Web, Data, and Email Security Solutions | Version 7.8.x

Applies to:

In this topic

Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.8.x

Data Security, v7.8.x

Email Security Gateway and Email Security Gateway Anywhere, v7.8.x

TRITON management server requirements

Reporting database requirements

Requirements for Web Security solutions

Email Security Gateway requirements

Data Security requirements

TRITON management server requirements

The TRITON management server must be one of the following 64-bit machines:

Windows Server 2008 Standard or Enterprise R2

Windows Server 2012 Standard Edition

Windows Server 2012 Standard or Enterprise R2

It hosts the TRITON Unified Security Center (TRITON console), which includes:

The infrastructure uniting all management components

A settings database for administrator account information and other shared data

One or more management modules (Web Security manager, Data Security manager, Email Security manager), used to configure and report on a Websense security solution.

Additional components may also reside on the TRITON management server.

Hardware requirements

Notes:

Data Security allows for either local or remote installation of the forensics repository. If the repository is hosted remotely, deduct 90GB from the Data Security disk space requirements.

It is strongly recommended that you allocate more than the minimum listed disk space to allow for scaling with use. The "recommended" option allows for scaling as reporting data accumulates.

If you install the Websense product on a drive other than the main Windows drive (typically C), it must have at least 3 GB free to accommodate the TRITON installer.

With remote (standard or enterprise) reporting database


Management modules	Recommended	Minimum
Web Security	4 CPU cores (2.5 GHz), 8 GB RAM, 150 GB Disk Space	4 CPU cores (2.5 GHz), 4 GB RAM, 70 GB Disk Space
Data Security	--	4 CPU cores (2.5 GHz), 8 GB RAM, 140 GB Disk Space
Web Security and Data Security	8 CPU cores (2.5 GHz), 12 GB RAM, 300 GB Disk Space	4 CPU cores (2.5 GHz), 8 GB RAM, 146 GB Disk Space
Email Security and Data Security	8 CPU cores (2.5 GHz), 12 GB RAM, 300 GB Disk Space	4 CPU cores (2.5 GHz), 8 GB RAM, 146 GB Disk Space
Web Security, Data Security, and Email Security	8 CPU cores (2.5 GHz), 16 GB RAM, 500 GB Disk Space	8 CPU cores (2.5 GHz), 16 GB RAM, 146 GB Disk Space

With local (express) reporting database


Management modules	Recommended	Minimum
Web Security	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space	4 CPU cores (2.5 GHz), 4 GB RAM, 100 GB Disk Space
Data Security	--	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
Web Security and Data Security	8 CPU cores (2.5 GHz), 12 GB RAM, 400 GB Disk Space	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
Email Security and Data Security	8 CPU cores (2.5 GHz), 12 GB RAM, 400 GB Disk Space	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
Web Security, Data Security, and Email Security	8 CPU cores (2.5 GHz), 16 GB RAM, 600 GB Disk Space	8 CPU cores (2.5 GHz), 16 GB RAM, 240 GB Disk Space

TRITON console browser support

Use any of the following browsers to access the TRITON Unified Security Center.


Browser	Versions
Microsoft Internet Explorer*	8, 9, 10, and 11
Mozilla Firefox	4.4 through 30
Google Chrome	13 through 35
* Do not use Compatibility View.

Virtualization systems

All TRITON Unified Security Center components are supported on these virtualization systems:

Hyper-V over Windows Server 2008 R2 or Windows Server 2012

VMware over Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012 R2

Note that this support is for the TRITON console only. Other components (used for enforcement, analysis, or reporting) may have additional requirements that are not supported by these virtualization environments.

Directory services for administrator authentication

If you allow users to log on to the TRITON console using their network accounts, the following directory services can be used to authenticate administrator logons:

Microsoft Active Directory

Novell eDirectory

Lotus Notes

Oracle Directory Services

Generic LDAP directories

Reporting database requirements

For all Websense TRITON solutions, Microsoft SQL Server is used to host the reporting database.

For evaluations and small deployments, the TRITON Unified Installer can be used to install Microsoft SQL Server 2008 R2 Express on the TRITON management server machine.

Use only the version of SQL Server 2008 R2 Express included in the TRITON Unified Installer.

Larger organizations are advised to use Microsoft SQL Server Standard, Business Intelligence, or Enterprise. These SQL Server editions cannot reside on the TRITON management server.

SQL Server clustering may be used with all supported standard and enterprise versions of Microsoft SQL Server for failover or high availability.

The supported database engines for Websense Web Security, Data Security, and Email Security solutions are:

SQL Server 2008 SP3 (or the latest service pack from Microsoft)

All editions except Web, Express, and Compact; all service packs, 32- and 64-bit, but not IA64

SQL Server 2008 R2 Express SP2 (installed by the TRITON Unified Installer)

SQL Server 2008 R2 SP2 (or the latest service pack from Microsoft)

All editions except Web and Compact; all service packs; not IA64

SQL Server 2012 SP1 (or the latest service pack from Microsoft)

Standard, Business Intelligence, and Enterprise editions

Requirements for Web Security solutions

Software components

Do not install Web Security components on a domain controller machine.

The following components are Windows-only, running on Windows Server 2008 R2 or R2 SP1, or Windows Server 2012 or 2012 R2 Standard Edition:

TRITON Unified Security Center (including the Web Security manager)

Websense Content Gateway is Linux only, certified on:

Red Hat Enterprise Linux 6.3, 6.4 and 6.5 (64-bit)

See System requirements for Websense Content Gateway for a list of supported Red Hat and CentOS versions, and additional information.

All other Web Security components can run on any of the following 64-bit operating systems:

Windows Server 2008 R2 or R2 SP1

Windows Server 2012 or 2012 R2 Standard Edition

Red Hat Enterprise Linux 6

Components not available on Websense appliances

The following Web Security components do not run on Websense appliances. If used, they must be installed off-appliance.

TRITON Unified Security Center (incl. Web Security manager)

Remote Filtering Server

The logon application (LogonApp.exe), Remote Filtering Client, and Web Endpoint are supported on the following operating systems:

Windows XP with Service Pack 2 or higher (32-bit and 64-bit)

Windows Vista with Service Pack 1 or higher (32-bit and 64-bit)

Windows 7 with Service Pack 1 (32-bit and 64-bit)

Windows 8

Windows 8.1 (v7.8.2 and beyond) and Windows 8.1, Update 1 (v7.8.4 and beyond), (LogonApp.exe only, 7.8.3 and later)

Windows Server 2003

Windows Server 2008 and 2008 R2

Mac OSX 10.8 (64-bit)

Mac OSX 10.9.2 (64-bit) (7.8.3 and later)

In addition, for Web Endpoint, the following web browsers support the endpoint client on both 32-bit and 64-bit Windows operating systems and the 64-bit Mac operating system:

Internet Explorer 7 to 11 on Windows

Firefox 3.x to 30 on Windows and Mac

Safari 5.x on Windows

Safari 5.x, 6.x, 7.x on Mac

Google Chrome from 15 to 36 on Windows and Mac

Opera 11 to 21 on Windows and Opera 11 to 20 on Mac

Full support means that the browser supports all installation methods, and both policy enforcement and proxy manipulation.

Integrations

Websense Web Security may be integrated with the following third-party products.


Product	Versions
Microsoft Forefront TMG	2008 or later
Cisco ASA	v8.0 or later
Cisco Router	IOS v15 or later
Citrix Presentation Server	4.5
Citrix XenApp	5.0, 6.0, or 6.5

In addition, products that can be configured to use ICAP can be integrated via the Websense ICAP Service.

Directory services for user identification

Websense Web Security solutions can use the following directory services for user identification and authentication:


Directory	Versions
Microsoft Active Directory (native or mixed mode)	2012, 2008 R2, 2008
Novell eDirectory	v8.5.1 or later
Oracle Directory Services Enterprise Edition	11g
Sun Java System Directory	7, 6.2

RADIUS

Most standard RADIUS servers are supported. The following have been tested:

Cistron RADIUS Server

Livingston (Lucent) 2.x

Merit AAA

Microsoft IAS

NMAS authentication

Virtualization systems

Windows-based Web Security components that can run on the following virtualization systems:

Hyper-V over Windows Server 2008 R2 or Windows Server 2012

VMware over Windows Server 2008 R2 or Windows Server 2012

Email Security Gateway requirements

Email Security Gateway is exclusively appliance-based (V10000 G2/G3, V5000 G2, or X10G), except for the following components:

Email Security manager, which runs on the TRITON management server (see TRITON management server requirements).

Email Security Log Server, which runs on a Windows Server 2008 R2 or 2012 machine.

You can also deploy Email Security Gateway on a virtual appliance. Obtain the image file from the MyWebsense Downloads page. You must have an ESXi VMware platform version 4.0 or later. The Windows components listed above are required along with a virtual appliance deployment.

Data Security requirements

Operating system


Data Security Component	Supported Operating Systems	32-bit	64-bit
Management server	Windows Server 2008 Standard or Enterprise, R2 or R2 SP1
	Windows Server 2012 Standard Edition
	Windows Server 2012 Standard or Enterprise R2
Supplemental servers	Windows Server 2003 Standard or Enterprise, R2 SP2 (v7.8.1 only)
	Windows Server 2008 Standard or Enterprise, R2 or R2 SP1
	Windows Server 2012 Standard Edition
Crawler agent	Windows Server 2003 Standard or Enterprise, R2 SP2 (v7.8.1 only)
Crawler agent	Windows Server 2008 Standard or Enterprise, R2 or R2 SP1
SMTP Agent (v7.8.1 and 7.8.2 only)	Windows Server 2003 Standard or Enterprise, R2
SMTP Agent (v7.8.1 and 7.8.2 only)	Windows Server 2003 Standard or Enterprise, R2 SP2
ISA Agent (ISA Server 2004/2006) (v7.8.1 and 7.8.2 only)	Windows Server 2003 Standard or Enterprise
	Windows Server 2003 Standard or Enterprise, R2
	Windows Server 2003 Standard or Enterprise, R2 SP2
TMG Agent (Forefront TMG) 2008	Windows Server 2008 R2 or R2 SP1
Printer agent (v7.8.1 and 7.8.2 only)	Windows Server 2003 Standard or Enterprise
	Windows Server 2003 Standard or Enterprise, R2
	Windows Server 2003 Standard or Enterprise, R2 SP2
Protector**	CentOS 5.9
Mobile Agent	CentOS 5.9
Data Endpoint client	Windows 7 with Service Pack 1
	Citrix XenDesktop VDI v5.6 and v7.1 running Windows 7 (v7.8.2 and beyond)
	VMware View Horizon VDI v5.2 running Windows 7 (v7.8.3 and beyond)
	Windows 8 Windows 8.1 (v7.8.2 and beyond) and Windows 8.1, Update 1 (v7.8.4 and beyond)
	Windows Vista with Service Pack 1 or higher
	Windows XP with Service Pack 2 or higher
	Citrix XenDesktop VDI v5.6 and v7.1 running Windows XP (v7.8.2 and beyond)
	Windows Server 2003 with Service Pack 2
	Windows Server 2008 with Service Pack 2
	Windows Server 2008 R2 with Service Pack 1
	Citrix XenDesktop VDI v7.1 running Windows Server 2008 R2 (v7.8.2 and beyond)
	VMware View Horizon VDI v5.2 running Windows Server 2008 (v7.8.3 and beyond)
	Windows Server 2012 R2
	Mac OS X 10.7, 10.8 Mac OS X 10.9 (v7.8.2 and beyond)
	Red Hat Enterprise Linux/CentOS 5.5 with stock kernel 2.6.18-194***
Note: by default, Windows Server 2003 or XP support only 3 agents per client. If your endpoint clients will be running multiple agents—for example the endpoint agent, an antivirus agent, and an antispam agent—they should be updated to Windows XP SP3 or Windows Server 2003 SP2. In addition, you must modify their registry entries. Requires .NET 2.0 installed on system. This operating system is installed as part of the Protector "soft appliance" installation. Protector is supported on virtualization systems in the Mail Transport Agent (MTA) mode and/or as an ICAP server with remote analysis (no local analysis). Other modes of deployment are not certified. **The Linux endpoint requires FUSE support to enable USB detection. If you are running CentOS 5.1, FUSE support is configured upon installation. If you are running CentOS 5.5, FUSE support is built into the kernel. If you have upgraded from CentOS 5.1 to CentOS 5.5, you may not have FUSE support in your running kernel. If this is the case, please install the relevant FUSE packages before running the endpoint installer.

Data Security Server hardware requirements


Server hardware	Minimum requirements	Recommended
CPU	2 Dual-core Intel Xeon processors (2.0 GHz) or AMD equivalent	2 Quad-core Intel Xeon processors (2.0 GHz) or AMD equivalent
Memory	4 GB	8 GB
Hard drives	Four 72 GB	Four 146 GB
Disk space	72 GB	292 GB
Free space	70 GB	70 GB
Hardware RAID	1	1 + 0
NICs	1	2

Data Security Server software requirements

The following requirements apply to all Data Security servers:

For optimized performance, verify that the operating system's file cluster is set to 4096B. For more information, see the Websense knowledge article: "File System Performance Optimization."

Windows installation requirements:

Set the partition to 1 NTFS Partition. For more information, see the Websense knowledge-base article: "File System Performance Optimization."

Regional Settings: should be set according to the primary location. If necessary, add supplemental language support and adjust the default language for non-Unicode programs.

Configure the network connection to have a static IP address.

The Data Security Management Server hostname must not include an underscore sign. Internet Explorer does not support such URLs.

Short Directory Names and Short File Names must be enabled. (See http://support.microsoft.com/kb/121007.)

Create a local administrator to be used as a service account. If your deployment includes more than one Data Security Server, use a domain account (preferred), or the use same local user name and password on each machine.

Be sure to set the system time accurately on the TRITON management server.

Protector hardware requirements


Protector	Minimum requirements	Recommended
CPU	2 Dual-core Intel Xeon processors (2.0 GHz) or AMD equivalent	2 Quad-core Intel Xeon processors (2.0 GHz) or AMD equivalent
Memory	2 GB	4 GB
Hard drives	2 - 72 GB	4 - 146 GB
Disk space	70 GB	292 GB
Hardware RAID	none	1 + 0
NICs	2 (monitoring), 3 (inline)	2 (monitoring), 3 (inline)

The following Silicom network cards are supported by the Data Security appliance. You can purchase them from a number of computer retailers.

NICs SKUs are:

PEG4BPi - Intel-based Quad-Port Copper Gigabit Ethernet PCI-Express Bypass Server Adapter

PEG2BPi - Intel-based Dual-Port Copper Gigabit Ethernet PCI-Express Bypass Server Adapter

PXG4BPi - Intel-based Quad-Port Copper Gigabit Ethernet PCI-X Bypass Server Adapter

PXG2BPi - Intel-based Dual-Port Copper Gigabit Ethernet PCI-X Bypass Server Adapter

PEG2Fi - Intel-based Dual-Port Fiber (SX) Gigabit Ethernet PCI-Express Server Adapter

PXG2Fi - Intel-based Dual-Port Fiber (SX) Gigabit Ethernet PCI-X Server Adapter


	Note Websense does not support bypass products with -SD drivers. If you are ordering a NIC based on Intel chips 82546 or 82571, be sure to order them in non-SD mode.

Mobile Agent hardware requirements


Mobile Agent	Minimum requirements	Recommended
CPU	4 core processors (for example, Single quad or two dual core processors), 2.0 GHz Intel Xeon or AMD equivalents	4 core processors (for example, Single quad or two dual core processors), 2.0 GHz Intel Xeon or AMD equivalents
Memory	8 GB	8 GB
Hard drives	2 - 72 GB	4 - 146 GB
Disk space	70 GB	292 GB
Hardware RAID	none	1 + 0
NICs	2	2

Data Endpoint hardware requirements

Windows

Pentium 4 (1.8 GHz or above)

At least 850 MB free hard disk space (250 MB for installation, 600 MB for operation)

At least 512 MB RAM on Windows XP

At least 1GB RAM on Windows Vista, Windows 7, Windows 8, Windows Server 2003, Windows Server 2008, Windows Server 2012 Standard Edition

Linux

At least 1 GB RAM

1 GB free hard disk space (not including contained files and temporary buffers; see the TRITON - Data Security Help for information about contained files and allocating enough disk storage for them)

Mac

At least 1 GB RAM

At least 500 MB free hard disk space (375 MB for installation, 125 MB for operation)