System requirements for this version

Deployment and Installation Center | Web, Data, and Email Protection | v8.0.x

Applies to:

In this topic

TRITON AP-WEB and Web Filter & Security, v8.0.x

TRITON AP-DATA, v8.0.x

TRITON AP-EMAIL, v8.0.x

TRITON management server requirements

See V-Series appliances supported with version 8.0 for information specific to version 8.0.x.

Requirements for web protection solutions

Requirements for email protection solutions

TRITON AP-DATA requirements

Websense endpoint solutions requirements

TRITON management server requirements

The TRITON management server must be one of the following 64-bit machines:

Windows Server 2008 Standard or Enterprise R2

Windows Server 2008 Standard or Enterprise R2 SP1

Windows Server 2012 Standard Edition

Windows Server 2012 Standard Edition R2

It hosts the TRITON Manager (TRITON console), which includes:

The infrastructure uniting all management components

A settings database for administrator account information and other shared data

One or more management modules (Web, Data, or Email), used to configure and report on a Websense advanced protection solution.

Additional components may also reside on the TRITON management server.

Hardware requirements

Notes:

TRITON AP-DATA allows for either local or remote installation of the forensics repository. If the repository is hosted remotely, deduct 90 GB from the TRITON AP-DATA disk space requirements.

It is strongly recommended that you allocate more than the minimum listed disk space to allow for scaling with use. The "recommended" option allows for scaling as reporting data accumulates.

If you install the Websense product on a drive other than the main Windows drive (typically C), it must have at least 4 GB free on the Windows partition to accommodate the TRITON installer.

With remote (standard or enterprise) reporting database


Management modules	Recommended	Minimum
Web module	4 CPU cores (2.5 GHz), 8 GB RAM, 150 GB Disk Space	4 CPU cores (2.5 GHz), 4 GB RAM, 70 GB Disk Space
Data module	8 CPU cores (2.5 GHz), 12 GB RAM, 400 GB Disk space	4 CPU cores (2.5 GHz), 8 GB RAM, 140 GB Disk Space
Web and Data modules	8 CPU cores (2.5 GHz), 12 GB RAM, 300 GB Disk Space	4 CPU cores (2.5 GHz), 8 GB RAM, 146 GB Disk Space
Email and Data modules	8 CPU cores (2.5 GHz), 12 GB RAM, 300 GB Disk Space	4 CPU cores (2.5 GHz), 8 GB RAM, 146 GB Disk Space
Web, Data, and Email modules	8 CPU cores (2.5 GHz), 16 GB RAM, 500 GB Disk Space	8 CPU cores (2.5 GHz), 16 GB RAM, 146 GB Disk Space

With local (express) reporting database


Management modules	Recommended	Minimum
Web module	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space	4 CPU cores (2.5 GHz), 4 GB RAM, 100 GB Disk Space
Data module	8 CPU cores (2.5 GHz), 12 GB RAM, 400 GB Disk space	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
Web and Data modules	8 CPU cores (2.5 GHz), 12 GB RAM, 400 GB Disk Space	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
Email and Data modules	8 CPU cores (2.5 GHz), 12 GB RAM, 400 GB Disk Space	4 CPU cores (2.5 GHz), 8 GB RAM, 240 GB Disk Space
Web, Data, and Email modules	8 CPU cores (2.5 GHz), 16 GB RAM, 600 GB Disk Space	8 CPU cores (2.5 GHz), 16 GB RAM, 240 GB Disk Space

TRITON console browser support

Use any of the following browsers to access the TRITON Manager.


Browser	Versions
Microsoft Internet Explorer*	8, 9, 10, and 11
Mozilla Firefox	4.4 through 32
Google Chrome	13 through 38
* Do not use Compatibility View.

Virtualization systems

All TRITON Manager components are supported on these virtualization systems:

Windows Server 2008 R2 over Hyper-V 2008 R2

Windows Server 2008 R2 and Windows Server 2012 over Hyper-V 2012

Windows Server 2008 R2, Windows Server 2012 and Windows Server 2012 R2 over Hyper-V 2012 R2

Windows Server 2008 R2 over VMware ESXi v5.x

Windows Server 2008 R2, Windows Server 2012 and Windows Server 2012 R2 over VMware ESXi 6.x

Note that this support is for the TRITON console only. Other components (used for enforcement, analysis, or reporting) may have additional requirements that are not supported by these virtualization environments.

Directory services for administrator authentication

If you allow users to log on to the TRITON console using their network accounts, the following directory services can be used to authenticate administrator logons:

Microsoft Active Directory

Novell eDirectory

Lotus Notes

Oracle Directory Services

Generic LDAP directories

Supported V-Series appliance models and modes

See the V-Series Certified Matrix for comprehensive information regarding supported appliance models and modes.

See V-Series appliances supported with version 8.0 for information specific to version 8.0.x.

Reporting database requirements

For all Websense TRITON solutions, Microsoft SQL Server is used to host the reporting database.

For evaluations and small deployments, the TRITON Unified Installer can be used to install Microsoft SQL Server 2008 R2 Express on the TRITON management server machine.

Use only the version of SQL Server 2008 R2 Express included in the TRITON Unified Installer.

Larger organizations are advised to use Microsoft SQL Server Standard, Business Intelligence, or Enterprise. These SQL Server editions cannot reside on the TRITON management server.

SQL Server clustering may be used with all supported standard and enterprise versions of Microsoft SQL Server for failover or high availability.

The supported database engines are:

SQL Server 2008 SP3 (or the latest service pack from Microsoft)

All editions except Web, Express, and Compact; all service packs, 32- and 64-bit, but not IA64

SQL Server 2008 R2 Express SP2 (installed by the TRITON Unified Installer)

SQL Server 2008 R2 SP2 (or the latest service pack from Microsoft)

All editions except Web and Compact; all service packs; not IA64

SQL Server 2012 SP1 (or the latest service pack from Microsoft)

Standard, Business Intelligence, and Enterprise editions

Requirements for web protection solutions

Software components

Do not install web protection components on a domain controller machine.

The following components are Windows-only, running on Windows Server 2008 R2, Windows Server 2008 R2 SP1, Windows Server 2012, or Windows Server 2012 R2:

TRITON Manager (including the Web module)

Websense Content Gateway is Linux only, supported on:

Red Hat Enterprise Linux 6.3, 6.4, and 6.5 (64-bit)

See Content Gateway for a list of supported Red Hat and CentOS versions, and additional information.

All other web protection components can run on any of the following 64-bit operating systems:

Windows Server 2008 R2 or Windows Server 2008 R2 SP1 Standard or Enterprise Edition

Windows Server 2012 or Windows Server 2012 R2 Standard Edition

Red Hat Enterprise Linux 6.x

Components not available on Websense appliances

The following web protection components do not run on Websense appliances. If used, they must be installed off-appliance.

TRITON Manager (including the Web module)

Remote Filtering Server & Client (Web Filter & Security only)

To support transparent proxy deployments

Software

Required libraries in Red Hat Enterprise Linux 6

Integration with Websense TRITON AP-DATA

Web browsers


	Important Websense core policy components must be installed prior to Content Gateway. When Filtering Service is installed, Content Gateway must be specified as the integration product. See Installation Instructions: TRITON AP-WEB.

Hardware

CPU

Quad-core running at 2.8 GHz or faster

Memory:

Red Hat Enterprise Linux 6 series, 64-bit

100 GB for the operating system, Content Gateway, and temporary data.

147 GB for caching
If caching will not be used, this disk is not required.
The caching disk:

Should be at least 2 GB and no more than 147 GB

Must be a raw disk, not a mounted file system

Must be dedicated

Must not be part of a software RAID

Should be, for best performance, a 10K RPM SAS disk on a controller that has at least 64 MB of write-through cache

Network Interfaces

To support transparent proxy deployments


Router	Must support WCCP v2. A Cisco router must run IOS 12.2 or later. The latest version is recommended. To support IPv6, WCCP v2.01 and Cisco router version 15.4(1)T or later are required. Client machines, the destination Web server, and Content Gateway must reside on different subnets.
—or— Layer 4 switch	You may use a Layer 4 switch rather than a router. To support WCCP, a Cisco switch requires the EMI or IP services image of the 12.2SE IOS release (or later). Websense Content Gateway must be Layer 2 adjacent to the switch. The switch must be able to rewrite the destination MAC address of frames traversing the switch. The switch must be able to match traffic based on the layer 4 protocol port (i.e., TCP port 80).

Software

Content Gateway is certified on:

Red Hat Enterprise Linux 6 series, 64-bit, Basic Server

Kernel version for 6.5: 2.6.32-431


	Note Websense testing encountered a kernel bug in version 2.6.32-431 that can impact performance. However, Content Gateway features were tested on this version of the OS and passed the certification tests.

Kernel version for 6.4: 2.6.32-358

Kernel version for 6.3: 2.6.32-279

V-Series appliances

Content Gateway is supported on:

The corresponding CentOS version (CentOS version numbers have a one-to-one correspondence with Red Hat Enterprise Linux version numbers)

Although not certified, Websense, Inc. provides "best effort" support for newer versions of Red Hat Enterprise Linux. Under "best effort" support, Websense Technical Support makes a best effort to troubleshoot cases in standard fashion unless the issue is deemed a Red Hat Enterprise Linux-specific issue, at which point you must contact Red Hat directly for assistance.

Only kernels shipped with the above Linux versions are supported by Websense Content Gateway. Visit www.redhat.com for kernel information. To display the kernel version installed on your system, enter the command:

/bin/uname -r

Required libraries in Red Hat Enterprise Linux 6

Required libraries:


apr.i686 apr-util.i686 audit-libs.i686 bzip2-libs.i686 compat-db43.i686 compat-expat1.i686 compat-openldap.i686 compat-readline5.i686 cracklib.i686 cyrus-sasl-lib.i686 db4.i686 expat.i686 ftp.x86_64 gdbm.i686 glibc.i686 keyutils-libs.i686 krb5-libs.i686 libattr.i686 libcap.i686 libcom_err.i686 libcurl.i686 libgcc.i686 libicu.i686 libidn.i686 libselinux.i686 libssh2.i686	libstdc++.i686 libtalloc.i686 libtdb.i686 libuuid.i686 libxml2.i686 nc.x86_64 ncurses-devel.i686 ncurses-libs.i686 nspr.i686 nss.i686 nss-softokn.i686 nss-softokn-freebl.i686 nss-util.i686 openldap.i686 openssl.i686 openssl098e.i686 pam.i686 popt.i686 readline.i686 readline-devel.i686 samba-winbind-clients.i686 sqlite.i686 tcl.x86_64 tcp_wrappers-libs.i686 zlib.i686

During Content Gateway installation, the installer will list missing packages and then exit the installer.

To install the missing packages, the operating system must have a repository of available libraries. The Media repository on the Red Hat Enterprise Linux install DVD is an acceptable source of packages.

After the repository is setup, all of the required dependencies can be automatically resolved by running:

yum install wcg_deps-1-0.noarch.rpm

The above RPM is included in the Content Gateway install tree, at the same level as wcg_install.sh.

Integration with Websense TRITON AP-DATA

Version 7.8 is required.

Any version can be used via the ICAP interface. However, use of the integrated, on-box components is strongly recommended. See Content Gateway Manager Help for configuration instructions.

Web browsers

Content Gateway is configured and maintained with a web-based user interface called the Content Gateway manager. The Content Gateway manager supports the following web browsers:

Internet Explorer 8, 9, 10 and 11

Mozilla Firefox 5 and later

Google Chrome 13 and later


	Note The browser restrictions mentioned above apply only to the Content Gateway Manager and not to client browsers proxied by Content Gateway.

Client OS

The logon application (LogonApp.exe) is supported on the following operating systems:

Windows XP with Service Pack 2 or higher (32-bit and 64-bit)

Windows Vista with Service Pack 1 or higher (32-bit and 64-bit)

Windows 7 with Service Pack 1 (32-bit and 64-bit)

Windows 8

Windows 8.1 (v7.8.2 and later)

Windows 8.1, Update 1 (v7.8.3 and later)

Windows Server 2003

Windows Server 2008 and 2008 R2

Mac OSX 10.8, 10.9.2, 10.9.5, and 10.10 (64-bit)

Integrations

Websense Web Filter & Security may be integrated with the following third-party products.


Product	Versions
Microsoft Forefront TMG	2010
Cisco ASA	v8.0 or later
Cisco Router	IOS v15 or later
Citrix Presentation Server	4.5
Citrix XenApp	6.0 or 6.5

In addition, products that can be configured to use ICAP can be integrated via the Websense ICAP Service.

Directory services for user identification

Websense web protection solutions can use the following directory services for user identification and authentication:


Directory	Versions
Microsoft Active Directory (native or mixed mode)	2012, 2008 R2, 2008
Novell eDirectory	v8.5.1 or later
Oracle Directory Services Enterprise Edition	11g

RADIUS

Most standard RADIUS servers are supported. The following have been tested:

Cistron RADIUS Server

Livingston (Lucent) 2.x

Merit AAA

Microsoft IAS

NMAS authentication

Virtualization systems

Windows-based web protection components can run on the following virtualization systems:

Hyper-V over Windows Server 2008 R2 or Windows Server 2012

VMware over Windows Server 2008 R2 or Windows Server 2012

Requirements for email protection solutions

The TRITON AP-EMAIL on-premises solution is exclusively appliance-based (V-Series or X-Series), except for the following components:

Email module of the TRITON Manager, which runs on the TRITON management server (see TRITON management server requirements).

Log Server, which runs on a Windows Server 2008 R2 or 2012 machine.

You can also deploy TRITON AP-EMAIL on a virtual appliance. Obtain the image file from the MyWebsense Downloads page. You must have an ESXi VMware platform version 4.0 or later. The Windows components listed above are required along with a virtual appliance deployment.

TRITON AP-DATA requirements

Operating system


TRITON AP-DATA Component	Supported Operating Systems	64-bit
Management server	Windows Server 2008 Standard or Enterprise, R2
	Windows Server 2008 Standard or Enterprise, R2 SP1
	Windows Server 2012 Standard Edition
	Windows Server 2012 Standard Edition R2
Supplemental servers	Windows Server 2008 Standard or Enterprise, R2
	Windows Server 2008 Standard or Enterprise, R2 SP1
	Windows Server 2012 Standard Edition
	Windows Server 2012 Standard Edition
Crawler agent	Windows Server 2008 Standard or Enterprise, R2
	Windows Server 2008 Standard or Enterprise, R2 SP1
	Windows Server 2012 Standard Edition
TMG agent (Forefront TMG) 2008	Windows Server 2008 Standard or Enterprise, R2
	Windows Server 2008 Standard or Enterprise, R2 SP1
FCI agent	Windows Server 2012 Standard Edition
Protector*	CentOS 5.9
Mobile agent	CentOS 5.9
Endpoint agent	See the Websense endpoint solutions Installation and Deployment Guide.
Note: by default, Windows Server 2003 or XP support only 3 agents per client. If your endpoint clients will be running multiple agents—for example the endpoint agent, an antivirus agent, and an antispam agent—their minimum operating system requirement is Windows XP SP3 or Windows Server 2003 SP2. In addition, you must modify their registry entries. Requires .NET 2.0 installed on system. *This operating system is installed as part of the Protector "soft appliance" installation. Protector is supported on virtualization systems in the Mail Transport Agent (MTA) mode and/or as an ICAP server with remote analysis (no local analysis). Other modes of deployment are not certified.

TRITON AP-DATA Server hardware requirements


Server hardware	Minimum requirements	Recommended
CPU	2 Dual-core Intel Xeon processors (2.0 GHz) or AMD equivalent	2 Quad-core Intel Xeon processors (2.0 GHz) or AMD equivalent
Memory	4 GB	8 GB
Hard drives	Four 72 GB	Four 146 GB
Disk space	72 GB	292 GB
Free space	70 GB	70 GB
Hardware RAID	1	1 + 0
NICs	1	2

TRITON AP-DATA Server software requirements

The following requirements apply to all TRITON AP-DATA servers:

For optimized performance, verify that the operating system's file cluster is set to 4096B. For more information, see the Websense knowledge article: "File System Performance Optimization."

Windows installation requirements:

Set the partition to 1 NTFS Partition. For more information, see the Websense knowledge-base article: "File System Performance Optimization."

Regional Settings: should be set according to the primary location. If necessary, add supplemental language support and adjust the default language for non-Unicode programs.

Configure the network connection to have a static IP address.

The TRITON management server hostname must not include an underscore sign. Internet Explorer does not support such URLs.

Short Directory Names and Short File Names must be enabled. (See http://support.microsoft.com/kb/121007.)

Create a local administrator to be used as a service account. If your deployment includes more than one TRITON AP-DATA Server, use a domain account (preferred), or the use same local user name and password on each machine.

Be sure to set the system time accurately on the TRITON management server.

Protector hardware requirements


Protector	Minimum requirements	Recommended
CPU	2 Dual-core Intel Xeon processors (2.0 GHz) or AMD equivalent	2 Quad-core Intel Xeon processors (2.0 GHz) or AMD equivalent
Memory	2 GB	4 GB
Hard drives	2 - 72 GB	4 - 146 GB
Disk space	70 GB	292 GB
Hardware RAID	none	1 + 0
NICs	2 (monitoring), 3 (inline)	2 (monitoring), 3 (inline)

The following Silicom network cards are supported by the TRITON AP-DATA appliance. You can purchase them from a number of computer retailers.

NICs SKUs are:

PEG4BPi - Intel-based Quad-Port Copper Gigabit Ethernet PCI-Express Bypass Server Adapter

PEG2BPi - Intel-based Dual-Port Copper Gigabit Ethernet PCI-Express Bypass Server Adapter

PXG4BPi - Intel-based Quad-Port Copper Gigabit Ethernet PCI-X Bypass Server Adapter

PXG2BPi - Intel-based Dual-Port Copper Gigabit Ethernet PCI-X Bypass Server Adapter

PEG2Fi - Intel-based Dual-Port Fiber (SX) Gigabit Ethernet PCI-Express Server Adapter

PXG2Fi - Intel-based Dual-Port Fiber (SX) Gigabit Ethernet PCI-X Server Adapter


	Note Websense does not support bypass products with -SD drivers. If you are ordering a NIC based on Intel chips 82546 or 82571, be sure to order them in non-SD mode.

Mobile Agent hardware requirements


Mobile Agent	Minimum requirements	Recommended
CPU	4 core processors (for example, Single quad or two dual core processors), 2.0 GHz Intel Xeon or AMD equivalents	4 core processors (for example, Single quad or two dual core processors), 2.0 GHz Intel Xeon or AMD equivalents
Memory	8 GB	8 GB
Hard drives	2 - 72 GB	4 - 146 GB
Disk space	70 GB	292 GB
Hardware RAID	none	1 + 0
NICs	2	2

Websense endpoint solutions requirements

For information on hardware and operating system requirements for TRITON AP-ENDPOINT Web and TRITON AP-ENDPOINT DLP, see the Websense endpoint solutions Installation and Deployment Guide.