Installing with SQL Server

Deployment and Installation Center | Web Security Solutions | Version 7.8.x

Applies to:

Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere, v7.8.x

See System requirements for this version for which versions of SQL Server are supported.

Install SQL Server according to Microsoft instructions, if needed.

Make sure SQL Server is running.

Make sure SQL Server Agent is running.


	Note If you are using SQL Server 2008 Express R2, SQL Service Broker is used instead of SQL Server Agent.

Obtain the SQL Server logon ID and password for a SQL Server Administrator, or for an account that has db_creator server role, SQLAgent role, and db_datareader in msdb. For Email Security Gateway/Anywhere, Web Security Gateway Anywhere, and Data Security, the account must have a sysadmin role.

You need this logon ID and password when you install Websense components.

Restart the SQL Server machine after installation.


	Note You must restart the machine after installing Microsoft SQL Server and before installing Websense Web Security Log Server or Email Security Log Server.

Make sure the TRITON Unified Security Center machine can recognize and communicate with SQL Server.

If Web Security Log Server or Email Security Log Server are installed on another machine, make sure it can communicate with SQL Server as well.

Install the SQL Server client tools on the TRITON Unified Security Center machine. Run the SQL Server installation program, and select Connectivity Only when asked what components to install.

If Web Security Log Server or Email Security Log Server is installed on another machine, install the SQL Server client tools on that machine instead.

Restart the machine after installing the connectivity option. See Microsoft SQL Server documentation for details.

Configuring Microsoft SQL Server user roles

Microsoft SQL Server defines SQL Server Agent roles that govern accessibility of the job framework. The SQL Server Agent jobs are stored in the SQL Server msdb database.

To install Websense Log Server successfully, the user account that owns the Websense database must have one of the following membership roles in the msdb database and db_datareader :

SQLAgentUserRole

SQLAgentReader Role

SQLAgentOperator Role

The SQL user account must also have dbcreator fixed server role privilege. The Email Security Gateway/Anywhere user account must have sysadmin fixed server role privilege.

Use Microsoft SQL Server Management Studio to grant the database user account the necessary permissions to successfully install Log Server.

On the SQL Server machine, go to Start > Programs > Microsoft SQL Server 2008 or 2012 > Microsoft SQL Server Management Studio.

Log into SQL Server as a user with SQL sysadmin right.

Select the Object Explorer tree, and then go to select Security > Logins.

Select the login account to be used during the installation.

Right-click the login account and select Properties for this user.

Select Server Roles, and then select dbcreator. For Email Security Gateway/Anywhere, Web Security Gateway Anywhere, and Data Security, also select sysadmin.

Select User Mapping and do the following:

Select msdb in database mapping.

Grant membership to one of these roles:

SQLAgentUserRole

SQLAgentReader Role

SQLAgentOperator Role

and also to:

db_datareader

Select wbsn-data-security in database mapping and mark it as "db_owner".

Select wbsn-data-security-temp-archive in database mapping and mark it as "db_owner".

Click OK to save your changes.