Installing with SQL Server

Deployment and Installation Center | TRITON AP-WEB or Web Filter & Security | v8.0.x

See System requirements for this version for which versions of SQL Server are supported.

Install SQL Server according to Microsoft instructions, if needed.


	Note If you are using SQL Server 2008 Express R2, SQL Service Broker is used instead of SQL Server Agent.

Obtain the SQL Server logon ID and password for a SQL Server Administrator, or for an account that has the following permissions:

db_creator server role

SQLAgent role

db_datareader in msdb

For TRITON AP-DATA, TRITON AP-EMAIL, or TRITON AP-WEB with the Web DLP module, the account must have a sysadmin role.

You need this logon ID and password when you install Websense components.

Restart the SQL Server machine after installation.


	Note You must restart the machine after installing Microsoft SQL Server and before installing Log Server.

Make sure the TRITON Manager machine and, if applicable, Log Server machine or machines can recognize and communicate with SQL Server.

Install the SQL Server client tools on the TRITON Manager machine. Run the SQL Server installation program, and select Connectivity Only when asked what components to install.

If Log Server is installed on another machine, install the SQL Server client tools on that machine instead.

Restart the machine after installing the connectivity option. See Microsoft SQL Server documentation for details.

Configuring Microsoft SQL Server user roles

Microsoft SQL Server defines SQL Server Agent roles that govern accessibility of the job framework. The SQL Server Agent jobs are stored in the SQL Server msdb database.

To install Websense Log Server successfully, the user account that owns the Websense database must have one of the following membership roles in the msdb database and db_datareader :

SQLAgentUserRole

SQLAgentReader Role

SQLAgentOperator Role

The SQL user account must also have dbcreator fixed server role privilege. The TRITON AP-EMAIL user account must have sysadmin fixed server role privilege.

Use Microsoft SQL Server Management Studio to grant the database user account the necessary permissions to successfully install Log Server.

On the SQL Server machine, go to Start > Programs > Microsoft SQL Server 2008 or 2012 > Microsoft SQL Server Management Studio.

Log into SQL Server as a user with SQL sysadmin right.

Select the Object Explorer tree, and then go to select Security > Logins.

Select the login account to be used during the installation.

Right-click the login account and select Properties for this user.

Select Server Roles, and then select dbcreator. For TRITON AP-DATA, TRITON AP-EMAIL, and TRITON AP-WEB with the Web DLP module, also select sysadmin.

Select User Mapping and do the following:

Select msdb in database mapping.

Grant membership to one of these roles:

SQLAgentUserRole

SQLAgentReader Role

SQLAgentOperator Role

and also to:

db_datareader

Select wbsn-data-security in database mapping and mark it as "db_owner".

Select wbsn-data-security-temp-archive in database mapping and mark it as "db_owner".

Click OK to save your changes.