Integrating Web Security with Microsoft Products

Deployment and Installation Center | Web Security Solutions | Version 7.8.x

This section of the Deployment and Installation Center provides information specific to integrating Websense Web Security solutions with Microsoft® Forefront™ Threat Management Gateway (TMG).

Refer to Installation Instructions: Web Security or Web Filter as your primary source of installation instructions. Only additional or alternate steps required to enable TMG integration are provided here.

An integration with TMG affects the following Websense components:

Websense ISAPI Filter plug-in: This additional Websense component is installed on the machine running TMG. The ISAPI Filter plug-in configures TMG to communicate with Websense Filtering Service.

Websense Filtering Service: Interacts with TMG and Websense Network Agent to filter Internet requests. Filtering Service either permits the Internet request or sends an appropriate block message to the user.

After the Filtering Service is installed, the ISAPI Filter plug-in must be installed on every TMG machine in your network.

Websense Network Agent: Manages Internet protocols that are not handled by TMG. Network Agent also enables bandwidth-based filtering.

If your environment includes an array of TMG machines, install Websense Web Security components on a machine outside the array.

When TMG receives an Internet request from a user, it passes the request to Websense Filtering Service, which determines the category assigned to the URL and checks the policy assigned to the client.

If the site is assigned to a blocked category, the client receives a block page instead of the requested site.

If the site is assigned to a permitted category, Filtering Service notifies TMG that the site is not blocked, and the client is given access to the site.

The following topics discuss the various aspects of integrating with TMG:

Deployment considerations for integration with Forefront TMG

Installing Web Security to integrate with Forefront TMG

Upgrading Web Security when integrated with ISA Server or Forefront TMG

Removing the ISAPI Filter Plug-In

Converting to an integration with Forefront TMG

Forefront TMG initial setup

User identification and authentication with Forefront TMG