Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page
Integrating Web Security with Cisco > Deployment considerations for integration with Cisco products
Deployment considerations for integration with Cisco products
Deployment and Installation Center | Web Security Solutions | Version 7.8.x
Applies to:                                         
In this topic                                       
*
Web Filter and Web Security, v7.8.x
*
Cisco ASA
*
Cisco IOS Routers
Related topics:
*
Getting started with a Cisco integration
*
Configuring a Cisco Security Appliance
*
Configuring a Cisco IOS Router
Cisco ASA
A simple and common network topology places Websense policy enforcement components on a single machine, or group of dedicated machines, communicating with a Cisco Adaptive Security Appliance (ASA) via TCP/IP.
*
TRITON Unified Security Center and reporting components are installed on a separate machine.
*
If you install Network Agent, it must be positioned to see all traffic on the internal network.
See Integrating Web Security with Cisco for configuration instructions.
Other configurations are possible. See your Cisco ASA documentation and the information in this section to determine the best configuration for your network.
The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines.
Cisco IOS Routers
In this common configuration, Websense policy enforcement components are installed on a single machine, communicating with the Cisco IOS Router.
*
TRITON Unified Security Center and reporting components are installed on a separate machine.
*
If you install Network Agent, it must be positioned to see all traffic on the internal network.
The router has firewall functionality and can be used with or without an accompanying firewall.
If the Cisco IOS Router is used with a separate firewall, ensure that all Internet traffic is configured to pass through the router and is not set to bypass the router and go directly to the firewall. Traffic that bypasses the router cannot be managed by the Websense software.
Other configurations are possible. See your Cisco Router documentation and the information in this chapter to determine the best configuration for your network.
The diagram provides a general overview and best practice location for your integration product, but does not show all Websense components. Larger networks require Websense components to be distributed across several dedicated machines.

Go to the table of contents Go to the previous page Go to the next page
Integrating Web Security with Cisco > Deployment considerations for integration with Cisco products
Copyright 2016 Forcepoint LLC. All rights reserved.